Privacy Policy

Effective Date: 21 August 2026 · Last Updated: 21 August 2026

YAxis Advisory Ltd. ("YAxis Advisory", "YAxis", "we", "us or "our") respects your privacy and is committed to protecting personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal information when you:

visit or use https://yaxisadvisory.com/;
communicate with us by email, telephone, online meeting or other communication channels;
submit an enquiry, contact form or request for consultation;
request or receive a proposal or quotation;
engage us to provide accounting, finance, FP&A, financial modelling, bookkeeping, payroll, workforce or business-process outsourcing services;
interact with our employees, representatives or service providers; or
otherwise provide personal information to us in connection with our business.

This Privacy Policy applies to information collected through our website and in the ordinary course of our business.

Where we process personal information solely on behalf of one of our clients as a service provider or processor, the relevant client generally determines the purposes and means of that processing. In those circumstances, our processing will primarily be governed by the applicable client agreement, statement of work, data-processing agreement and the client's documented instructions.

1. About YAxis Advisory Ltd.

Legal Name:

YAxis Advisory Ltd.

Company Registration No.:

C-210234/2026

Registered Office / Business Address:

H-108 (Flat-301), Road-10/2, Block-D, Niketon, Gulshan, Dhaka-1212, Bangladesh

Registered Address:

Level - 3, House- 72 (Front Building), Road- 21, Block- B, Banani, Dhaka, PO: 1213, Bangladesh

General Contact:

info@yaxisadvisory.com

Privacy Contact:

privacy@yaxisadvisory.com

Website:

https://yaxisadvisory.com/

2. Information We Collect

The type of information we collect depends on how you interact with us.

2.1 Information You Provide Directly

We may collect information you voluntarily provide, including:

full name;
job title;
professional role;
company or organisation name;
business email address;
telephone number;
business address;
country or jurisdiction;
information contained in enquiries;
information provided through website forms;
information provided during consultations;
information contained in correspondence;
information contained in proposals and contracts;
billing and payment information;
information required to establish or maintain a business relationship; and
other information you voluntarily provide to us.

2.2 Client Information

In providing our services, clients may provide us with information relating to their businesses and personnel.

Depending on the services provided, this may include:

accounting records;
transaction records;
invoices;
bank statements;
financial statements;
management accounts;
budgets;
forecasts;
financial models;
cash-flow information;
customer information;
supplier information;
employee information;
payroll information;
compensation information;
benefits information;
tax and statutory information;
identification information;
banking information;
employment information;
contact information;
shareholder and director information;
contracts;
business plans;
investor information;
operational information; and
other information required to perform the agreed services.

Where YAxis processes this information solely on behalf of a client, we act as a service provider or processor and process the information in accordance with the client's instructions and the applicable agreement.

3. Information Collected Automatically

When you access our website, certain technical information may be collected automatically.

This may include:

IP address;
browser type;
operating system;
device type;
device identifiers;
approximate geographic information;
pages viewed;
website interactions;
referring website;
date and time of access;
session information;
website performance information; and
information relating to errors or technical issues.

This information may be used for website security, functionality, analytics, performance monitoring and improvement.

4. Cookies and Similar Technologies

Our website may use cookies, pixels, tags and similar technologies.

These technologies may be used for:

essential website functionality;
security;
remembering preferences;
website analytics;
performance measurement;
understanding how visitors use our website;
improving our website;
marketing measurement; and
advertising or remarketing, where applicable and permitted.

We may use third-party technologies including Google Analytics, LinkedIn and Meta technologies.

Where applicable law requires consent for non-essential cookies or similar technologies, we will seek the appropriate consent.

You may also manage cookies through your browser settings.

Disabling certain cookies may affect the functionality of parts of our website.

5. Third-Party Services

We use various technology and service providers to operate our business and provide services.

Depending on your interaction with YAxis and the services we provide, these may include:

Google Workspace;
Google Analytics;
Google Calendar;
Calendly;
HubSpot;
LinkedIn;
Meta;
cloud storage providers;
accounting software providers;
financial reporting platforms;
communication platforms;
video-conferencing platforms;
payment providers;
document-management systems; and
other technology providers.

These providers may process information on our behalf or, depending on the service, independently determine certain processing activities.

We seek to use reputable service providers and apply appropriate contractual and security measures where appropriate.

6. How We Use Personal Information

We may use personal information for the following purposes:

Business enquiries

To:

respond to enquiries;
communicate with prospective clients;
arrange consultations;
understand your requirements;
prepare proposals;
provide quotations; and
establish potential business relationships.

Service delivery

To:

provide accounting services;
provide bookkeeping services;
provide financial reporting;
provide FP&A services;
prepare financial models;
provide cash-flow and cash-burn analysis;
provide payroll and workforce services;
provide BPO services;
communicate with clients;
administer engagements; and
deliver agreed professional services.

Business administration

To:

manage contracts;
issue invoices;
process payments;
maintain financial records;
manage suppliers;
maintain internal records;
manage employees and contractors;
administer our business; and
maintain professional relationships.

Security

To:

protect our systems;
detect unauthorised access;
prevent fraud;
investigate security incidents;
protect our users and clients;
maintain system integrity; and
enforce our terms and policies.

Website improvement

To:

understand website usage;
improve website content;
analyse performance;
troubleshoot technical problems; and
improve user experience.

Legal and regulatory purposes

To:

comply with applicable laws;
respond to lawful requests from authorities;
maintain required records;
establish or defend legal claims;
protect our legal rights; and
meet contractual obligations.

7. Legal Bases for Processing

Where applicable data-protection law requires us to identify a legal basis for processing, we may rely on one or more of the following:

performance of a contract;
taking steps at your request before entering into a contract;
compliance with a legal obligation;
legitimate interests;
consent; or
another lawful basis recognised under applicable law.

Where we process information on behalf of a client, the client generally determines the relevant legal basis and purpose of processing.

8. YAxis as a Service Provider / Processor

A significant part of YAxis's business involves providing outsourced accounting, finance, FP&A, payroll, HR and BPO services.

In those engagements, we may process personal information on behalf of our clients.

Where applicable, YAxis acts as a service provider or processor.

In such circumstances:

the client determines the purposes of processing;
YAxis processes personal information according to documented instructions;
access is limited to authorised personnel;
personal information is used only for authorised business purposes;
appropriate confidentiality obligations apply;
reasonable technical and organisational safeguards are implemented;
approved technology providers may be used where appropriate;
information is retained according to the engagement and applicable requirements; and
information is returned, deleted or retained according to contractual and legal requirements.

Where YAxis independently determines the purposes and means of a particular processing activity, YAxis may act as a controller for that activity.

We may share personal information with:

authorised employees;
contractors;
approved service providers;
professional advisers;
auditors;
legal advisers;
accounting and financial software providers;
cloud-service providers;
communication providers;
payment providers;
technology providers;
approved subcontractors;
regulators;
governmental authorities;
courts;
law-enforcement authorities; or
a successor entity in connection with a merger, acquisition, restructuring or sale of our business.

We do not sell personal information to third parties.

We will disclose information only where reasonably necessary for legitimate business purposes, service delivery, legal compliance or other permitted purposes.

10. International Data Transfers

YAxis Advisory is incorporated and operates in Bangladesh while serving clients internationally.

As a result, information may be accessed, transferred, stored or processed in countries outside the country in which the information was originally collected.

Where applicable law restricts international transfers, we will seek to use appropriate safeguards and lawful transfer mechanisms.

Depending on the circumstances, these may include:

contractual protections;
data-processing agreements;
standard contractual clauses where applicable;
adequacy mechanisms;
approved service providers; or
another legally recognised transfer mechanism.

For client data processed on behalf of a client, international transfer arrangements may also be addressed in the applicable client agreement or Data Processing Agreement.

11. Data Retention

We retain personal information only for as long as reasonably necessary for:

the purposes for which it was collected;
service delivery;
contractual obligations;
legitimate business requirements;
accounting requirements;
tax requirements;
regulatory requirements;
dispute resolution;
establishment or defence of legal claims; or
other applicable legal obligations.

Retention periods may therefore vary depending on the nature of the information and the relationship involved.

When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it, subject to applicable legal and contractual retention requirements.

12. Information Security

We implement reasonable technical and organisational measures designed to protect information against:

unauthorised access;
unauthorised disclosure;
accidental loss;
destruction;
alteration;
misuse; and
other unauthorised processing.

Our measures may include:

role-based access;
least-privilege access;
secure cloud platforms;
authentication controls;
multi-factor authentication where supported;
encrypted communications;
secure file sharing;
backups;
access reviews;
confidentiality obligations;
documented procedures;
business continuity measures; and
security incident procedures.

Further information is available in our Security & Confidentiality Policy.

We do not claim that any information system or internet transmission can be guaranteed to be completely secure.

13. Data Protection and Security Incidents

If we become aware of a security incident affecting personal information, we will take reasonable steps to:

assess the incident;
contain the incident;
investigate its circumstances;
mitigate potential harm;
restore affected systems where appropriate; and
make notifications required by applicable law or contract.

Where YAxis acts as a processor, we will notify the relevant client in accordance with the applicable agreement and legal requirements.

14. Your Privacy Rights

Depending on applicable law and your location, you may have rights including:

right to access personal information;
right to correct inaccurate information;
right to request deletion;
right to restrict processing;
right to object to processing;
right to data portability;
right to withdraw consent;
right to complain to a relevant data-protection authority; and
other rights provided by applicable law.

These rights may be subject to legal limitations and exceptions.

Where YAxis processes personal information solely on behalf of a client, you may need to exercise your rights directly with that client.

We will reasonably assist our clients in responding to applicable data-subject requests where required by law and contract.

15. Children's Information

Our website and professional services are intended for businesses and professional users.

Our services are not directed toward children.

We do not knowingly collect personal information from children through our website for the purpose of providing our services.

16. Third-Party Websites

Our website may contain links to third-party websites.

Those websites are operated independently of YAxis.

We are not responsible for:

their content;
security;
privacy practices;
cookies;
data processing; or
other activities.

We recommend reviewing the privacy policies of third-party websites before providing personal information.

17. Marketing Communications

We may occasionally send business communications, newsletters, service information or other marketing communications where permitted by applicable law.

Where consent is required, we will obtain appropriate consent.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism provided or by contacting us.

Unsubscribing from marketing communications will not prevent us from sending essential communications relating to an existing client relationship, contract, transaction or service.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Updates may be made because of:

changes in our services;
changes in technology;
changes in applicable law;
changes in our data-processing practices;
changes in our service providers; or
improvements to our privacy practices.

The latest version will be published on our website with the applicable effective and last-updated dates.

19. Contact Us

If you have questions about this Privacy Policy or wish to exercise an applicable privacy right, please contact:

YAxis Advisory Ltd.