Where your material goes

This notice covers personal data handled by Yes Slides LTD in running this website and the presentation design work sold through it. It applies to enquiries, quotes, orders and the material sent to us to work from. It does not cover other websites reached from links on this one, each of which has a notice of its own.

Anything about this notice, or about data we hold, can be raised with us directly. Writing to the address below reaches a person, not a queue.

An enquiry reaches us as an email. What we then hold is its contents: your name, the address you write from, the company you work for, what the presentation is for, roughly how many slides you expect, the format and the date you want it by, and your description of the job. Anything else you write is held with it.

Attachments arrive the same way: an existing deck, a scope document, a price list, a logo, brand guidelines. Those are the working material of an order and are treated as such.

Once an order goes ahead we also hold the quote, the order confirmation, the correspondence about the work, the invoice and the record of payment. Billing details are held in the accounts. Card numbers are not: they never reach us, for the reason set out under recipients below.

We ask for nothing about health, beliefs, politics, ethnicity, sex life, trade union membership or criminal records, and none of it is wanted in a proposal deck either.

The brief and quote form runs entirely in your browser. It takes your answers, assembles them into a message and then either opens your own email programme with that message ready to send, or shows you the text so you can copy it. Until you press send yourself, nothing has left your computer and nothing has arrived here.

There is no form-handling service, no spreadsheet, no marketing tool and no database behind it, because there is no application server behind this website at all: it is a set of files handed out by a web server, and what you type into it is never posted anywhere.

There is also nowhere on this site to upload a file, and none is offered. Decks and brand files are attached to an email in the ordinary way, so they travel through your email provider and ours and never through this website.

Serving a page leaves a record on the server: the IP address the request came from, the date and time, the address of the page or file asked for, the response code, the amount of data sent and the browser's own description of itself. An IP address can identify a person, so those records fall inside this notice.

They are created and kept by the hosting provider for the operation and security of the server, under that provider's own retention period. We do not keep a separate copy, we do not use them to build a picture of individual visitors, and there is no analytics or measurement service on this site adding anything to them.

The material sent for a deck tends to contain more than the sender's own details: colleagues named on a team slide, a signature, a direct address, the name of the person at the company the proposal is going to, occasionally a photograph.

That material is used to carry out the order you have asked for and for nothing else. It is not added to any list, not shown to anyone outside the recipients named below, and never published: no client material appears on this website, and every slide, company and figure shown here is invented for demonstration.

You decide what to send. Where the material contains details of other people, it is for you to have a basis for passing them to us, and it helps everyone if you send only what the deck actually needs. Ask and we will work from initials, a role or an invented name instead.

• Reading an enquiry, asking the questions it raises and writing a quote against it.
• Agreeing an order and carrying it out: structuring the content, designing the slides, applying your brand material, making the agreed revisions and delivering the files.
• Issuing an invoice, taking payment and chasing one that has not been paid.
• Answering questions about an order in progress, and dealing with a complaint.
• Keeping a record of what was quoted, agreed and delivered, so that months later either of us can check it.
• Keeping the accounting and tax records a company is required to keep.
• Keeping this website working and dealing with attempts to misuse it.

It is not used to market anything. There is no mailing list here, no newsletter and no advertising, so there is nothing for you to unsubscribe from.

Article 6(1)(b) - contract, and steps taken at your request before one

Answering an enquiry, preparing a quote, agreeing an order, doing the work, delivering the files, handling revisions and answering questions about the order.

Article 6(1)(c) - legal obligation

Keeping invoices and accounting records for the periods company and tax law set, and responding where the law requires a disclosure.

Article 6(1)(f) - legitimate interests

Keeping the website and the server secure; keeping the correspondence and the confirmation for an order so that a later disagreement can be settled against what was actually agreed; and being able to bring or defend a legal claim. Our interest is in running a business without losing the evidence of what it agreed. Weighed against that, holding ordinary business correspondence for a limited period is close to what anyone writing to a supplier would expect, and you can object to it at any time under the rights set out below.

We do not rely on consent for any of this, so there is no consent for you to withdraw. If we ever ask for consent for something, we will say so at the time and you will be able to take it back as easily as you gave it, without that affecting anything done beforehand.

No statute obliges you to send us anything, and there is no contract requiring it before one exists. But the exchange is an email: without an address we cannot reply, and without some description of the job we cannot price it.

Company name, slide count and date are useful and entirely optional. Leave them out and the quote comes back rougher, or with a question attached. That is the whole consequence.

To place an order we need enough to invoice you and somewhere to deliver the files. Without those an order cannot go ahead, which is a practical limit rather than a legal one.

• The hosting provider that serves these pages, which holds the server logs described above.
• The email provider carrying our mail, through which every enquiry, attachment and delivery passes.
• Stripe and PayPal, the payment providers behind the link on an invoice. Card and account details are entered on their pages and go straight to them: they do not pass through this website and we never see or store them. What we receive back is confirmation that a payment succeeded, and the details on the invoice.
• An accountant or bookkeeper preparing the company's accounts and returns, who sees invoices and payment records.
• Anyone the law requires: a tax authority, a regulator, a court, where we are obliged to disclose.

Each of those is used for one job and is not free to use your material for its own purposes. Nothing is sold, rented or handed to an advertising network, a data broker or a marketing platform, and no such service is embedded in this site.

Correspondence, the files sent to us and the files delivered back are handled in the United Kingdom and the European Economic Area. Transfers to the EEA need no additional safeguard: the United Kingdom has found its data protection law adequate.

Stripe and PayPal are international companies and may process payment data outside the United Kingdom, including in the United States. Where they do, the transfer runs on the safeguards Article 46 of the UK GDPR provides for: the International Data Transfer Agreement, or the European Commission's standard contractual clauses with the UK addendum, as set out in each provider's own terms.

If a provider is ever replaced by one that handles data somewhere else on some other footing, this notice will say so before the change takes effect.

An enquiry that did not become an order

Held while we are in touch about it, and removed no later than twelve months after the last message. Ask sooner and it goes sooner.

Order records: quote, confirmation, correspondence, delivery note

Six years from the end of the order. That is the period in which a claim on a contract can be brought in England and Wales under section 5 of the Limitation Act 1980, and keeping the record for it protects both sides.

Invoices and accounting records

Six years from the end of the accounting period they fall in, as tax law requires.

Your source material, brand files and our working files

Held while the order is live and for twelve months after delivery, so that a file can be re-sent if you lose it. Deleted after that, and sooner if you ask us to.

The finished deck

Kept with the order record for the same six years, so that a later revision can start from what was actually delivered. Ask for it to be removed and it is removed.

Server logs

Kept by the hosting provider for no more than 30 days. We hold no copy, and we will name the provider if you ask.

Where something has to be kept because the law says so, we keep that and nothing more: the rest of the material around it is deleted on the periods above.

• See it. A copy of what we hold about you, with an explanation of where it came from and who has seen it.
• Correct it. Anything wrong put right, anything incomplete completed.
• Have it deleted. Where we no longer need it for the purpose it was collected for, and no legal duty makes us keep it.
• Have it restricted. Held but not used, while a dispute about its accuracy or about our grounds is worked out.
• Object. To anything we do on the ground of legitimate interests, on grounds relating to your situation. We stop unless we can show reasons that override yours, and if we cannot, we stop.
• Take it elsewhere. What you gave us, in a common machine-readable format, for you or for another provider, where it is held on the basis of contract or consent.
• Withdraw consent. Where consent is ever the basis for something, at any time, without affecting what was done before.

Write to contact@yes.it.com and say which of these you want. There is no fee. We answer within one month, and tell you inside that month if a request is complex enough to need longer. Where we genuinely cannot tell who is asking, we will ask you to confirm it before sending anything.

These rights have limits, and where one applies we say which and why rather than going quiet. An invoice, for instance, cannot be deleted on request while tax law requires it to exist.

This site sets no cookies. It writes nothing to local storage or session storage and reads nothing from them. There is no analytics, no advertising tag, no embedded video, no social button, no chat widget and no third-party script of the kind that usually brings storage with it.

The fonts, the styles and the small amount of code the pages use are served from this domain alongside the pages themselves, so reading the site sends no request to another company.

Regulation 6 of the Privacy and Electronic Communications Regulations requires consent before anything is stored on or read from your device unless it is strictly necessary for a service you asked for. Since nothing is stored or read at all, the question does not arise, and that is why you were not asked to click anything on arrival.

Your browser will still cache pages, images and fonts as it does on any site. That cache belongs to you and can be cleared in your browser's own settings.

Nothing here makes automated decisions producing legal effects for you or similarly significant ones, of the kind Article 22 of the UK GDPR is concerned with. There is no scoring of enquiries, no automatic pricing engine, no profiling and no attempt to guess anything about you from how you use the site.

A brief is read by a person, who writes back with a quote or with questions. That is the whole of the process.

Material is held in the email and file accounts used to run the business, protected with unique passwords and, where the provider offers it, a second factor. Access is limited to the people doing the work on your order. Files are not copied onto machines that have no part in it, and material no longer needed is deleted on the periods set out above rather than left to accumulate.

No arrangement is perfect and we will not claim otherwise. If a breach happens and it is likely to result in a risk to people's rights and freedoms, it is reported to the Information Commissioner within 72 hours of our becoming aware of it, and where the risk to you is high you are told directly.

If something about the way your material has been handled is wrong, write to contact@yes.it.com with what happened and what you would like done. We answer within one month.

If that answer does not satisfy you, or you would rather not start with us, you can complain to the Information Commissioner's Office, the United Kingdom's supervisory authority for data protection. Coming to us first is not a condition of going to them.

This notice is the edition in force and carries the date of 10 September 2026. It changes when what we do changes: a new provider, a different retention period, an obligation we did not have before.

When it does, the date changes with it and the new wording appears here before it starts to apply. Where a change materially affects how your material is handled and we hold an address for you, you are told by email rather than left to notice.

There is no archive of old editions on the site. Ask us for the wording in force on a particular date and we will send it to you.