Privacy Policy
Last Updated On 29-Dec-2022
Effective Date 28-Dec-2022

This Privacy Policy describes the policies of Yalla ya! sa de cv, Tlaxcala 106, CDMX 06760, Mexico, email: support@yalla-ya.com, phone: +525555538152 on the collection, use and disclosure of your information that we collect when you use our app or website ( Metro Metrobus – Mexico or https://mmbus.yalla-ya.com ). (the “Service”). By accessing or using the Service, you are consenting to the collection, use and disclosure of your information in accordance with this Privacy Policy. If you do not consent to the same, please do not access or use the Service.
We may modify this Privacy Policy at any time without any prior notice to you and will post the revised Privacy Policy on the Service. The revised Policy will be effective 180 days from when the revised Policy is posted in the Service and your continued access or use of the Service after such time will constitute your acceptance of the revised Privacy Policy. We therefore recommend that you periodically review this page.

Information We Collect:
We will collect and process the following personal information about you:

• Name
• Email
• Mobile
• Social Media Profile
• Date of Birth
• Gender

How We Collect Your Information:
We collect/receive information about you in the following manner:

When a user fills up the registration form or otherwise submits personal information
Interacts with the app or website
From public sources

How We Use Your Information:
We will use the information that we collect about you for the following purposes:

Marketing/ Promotional
Creating user account
Customer feedback collection
Support
Administration info
Targeted advertising
Manage customer order
Manage user account
If we want to use your information for any other purpose, we will ask you for consent and will use your information only on receiving your consent and then, only for the purpose(s) for which grant consent unless we are required to do otherwise by law.

How We Share Your Information:
We will not transfer your personal information to any third party without seeking your consent, except in limited circumstances as described below:

Ad service
Sponsors
Analytics
We require such third party’s to use the personal information we transfer to them only for the purpose for which it was transferred and not to retain it for longer than is required for fulfilling the said purpose.
We may also disclose your personal information for the following: (1) to comply with applicable law, regulation, court order or other legal process; (2) to enforce your agreements with us, including this Privacy Policy; or (3) to respond to claims that your use of the Service violates any third-party rights. If the Service or our company is merged or acquired with another company, your information will be one of the assets that is transferred to the new owner.

Retention Of Your Information:
We will retain your personal information with us for 90 days to 2 years after users terminate their accounts or for as long as we need it to fulfill the purposes for which it was collected as detailed in this Privacy Policy. We may need to retain certain information for longer periods such as record-keeping / reporting in accordance with applicable law or for other legitimate reasons like enforcement of legal rights, fraud prevention, etc. Residual anonymous information and aggregate information, neither of which identifies you (directly or indirectly), may be stored indefinitely.

Your Rights:
Depending on the law that applies, you may have a right to access and rectify or erase your personal data or receive a copy of your personal data, restrict or object to the active processing of your data, ask us to share (port) your personal information to another entity, withdraw any consent you provided to us to process your data, a right to lodge a complaint with a statutory authority and such other rights as may be relevant under applicable laws. To exercise these rights, you can write to us at support@yalla-ya.com. We will respond to your request in accordance with applicable law.
You may opt-out of direct marketing communications or the profiling we carry out for marketing purposes by writing to us at support@yalla-ya.com.
Do note that if you do not allow us to collect or process the required personal information or withdraw the consent to process the same for the required purposes, you may not be able to access or use the services for which your information was sought.

Cookies Etc.
To learn more about how we use these and your choices in relation to these tracking technologies, please refer to our Cookie Policy.

Security:
The security of your information is important to us and we will use reasonable security measures to prevent the loss, misuse or unauthorized alteration of your information under our control. However, given the inherent risks, we cannot guarantee absolute security and consequently, we cannot ensure or warrant the security of any information you transmit to us and you do so at your own risk.

Grievance / Data Protection Officer:
If you have any queries or concerns about the processing of your information that is available with us, you may email our Grievance Officer at yalla ya! sa de cv, Tlaxcala 106, Roma Sur, 06760, CDMX, email: support@yalla-ya.com. We will address your concerns in accordance with applicable law.

Data Deletion Policy:

1. Purpose
   This document sets out our policy for responding to requests for deletion of data under data protection law. This document explains the rights of the data subject in relation to data deletion and the responsibilities of Socialtools in responding with such a request.
2. Individual Rights
   An individual has the right to erasure, also known as ‘the right to be forgotten’. The principle underpinning this right is to enable an individual to request the deletion or removal of personal data where there is no compelling reason for its continued processing.
3. When does the right to erasure apply?
   As stipulated in data protection law, individuals have a right to have personal data erased and to prevent processing in specific circumstances:

Where the personal data is no longer necessary in relation to the purpose for which it was originally collected/processed;
When the individual withdraws consent;
When the individual objects to the processing and there is no other legal ground for the relevant processing activity;
When the personal data was unlawfully processed;
Where the personal data has to be erased in order to comply with a legal obligation.

4. What information does we retain?
   We stores data about individuals in order to create an account for our customer on our platform. We store the first name , last name (if provided) , e-mail address , language (if provided) , country (if provided) , time zone (if provided), and entity (if provided), which is stored on our secure servers in the US for a period of use of this account in our platform. This data is stored and used in accordance with our Privacy Policy

If consent is provided, personal data may be stored in our CRM system for the purposes of contacting you regarding the app or websites news, products and promotions.

5. How can data be deleted?
   If you have purchased a subscription on the App, Metro Metrobus Mexico acts as data controller. In this case, we will delete the user account upon request (via email to support@yalla-ya.com), upon closure of your account, or after three years. If an organization purchases access to Metro Metrobus Mexico, Metro Metrobus Mexico acts as the data processor and the customer acts as data controller. In this case, it is the responsibility of the customer, as data controller, to ensure that data is not held longer than necessary for the purposes for which it is intended.

A user of the Metro Metrobus Mexico Account, acting on behalf of their organization, can delete data from their account whenever they wish. This data is deleted from the system immediately and cannot be recovered by any users or Metro Metrobus Mexico employees after this point. Data which has been deleted or otherwise destroyed can not be recovered at any time. Sufficient warning is given to the account administrator before data is permanently deleted.

Data may still remain in the systems back-up files, which will be deleted periodically.

Information may be deleted from our CRM upon request to support@yalla-ya.com. We undertake to perform the deletion within one month (30 calendar days) and will send you a confirmation once the information has been deleted. Wherever possible, we will aim to complete the request in advance of the deadline.