Privacy Policy

Who we are

YaYaHelp ("we", "us") operates yayahelp.com and yayahelp.id and introduces families arriving in Indonesia to independent nannies, maids and home helpers. We are the data controller for the information described here. You can reach us at any time by email at hello@yayahelp.com or on WhatsApp at +62 818 1877 9358.

What we collect

We only collect what we need to find and verify a suitable helper:

• Request details: the service you need, dates, duration, schedule, city and area, accommodation type, an optional address or map link, the languages and preferences for your helper, your children's ages, tasks and any notes you add.
• Identity and contact details: your full name as written in your passport, email address, phone number and whether it is on WhatsApp, nationality, household size, preferred contact method and language.
• Passport image: one photo or PDF of your passport photo page.
• Technical data: the country your connection comes from, your browser's user agent, the language of your browser, and the result of a bot check (Cloudflare Turnstile). We do not store your full IP address with your request.
• Correspondence: messages you send us by email or WhatsApp, and notes our team adds while handling your request.

Why we use it and on what basis

Under UU PDP we process your data on the following bases:

• To perform the service you asked for (finding, checking and introducing helpers, and contacting you about it).
• With your explicit consent for the passport image, which you give by ticking the consent box before sending your request. You can withdraw consent at any time; we then stop processing the image and delete it.
• For our legitimate interest in keeping families, helpers and our service safe, for example by verifying identities and preventing abuse.
• To comply with legal obligations, including requests from Indonesian authorities made under applicable law.

Your passport image

We ask for a passport image for one reason: to confirm who you are before we place a helper in your home. This protects the helper as much as you.

The image is uploaded over an encrypted connection to private storage (Cloudflare R2) where it is encrypted at rest. It is never public, never shared with helpers and never attached to emails. Only our verification team can open it, through time-limited links, and every view is logged. Metadata such as camera and location information is removed from photos before storage.

The image is permanently deleted 30 days after your request is closed, matched or cancelled, or earlier if you ask us.

Who we share data with

Shortlisted helpers see only what they need to decide whether the role suits them: your first name, city and area, dates, schedule, the languages required and the number and ages of children. They never see your passport, email, phone number or full address.

We rely on a small number of service providers who process data on our behalf under contract: Cloudflare (hosting, storage, bot protection, cookie-free analytics and transactional email) and Meta's WhatsApp (if you choose to contact us there). We do not sell personal data and we do not use it for advertising.

How long we keep data

• Request and contact details: 12 months after your request closes, so we can support you during a placement and handle any follow-up.
• Passport image: 30 days after the request closes.
• Email delivery logs: 12 months.
• We delete or anonymise data sooner if you ask us to, unless we must keep it to comply with the law.

Where data is stored

Our systems run on Cloudflare's global infrastructure, so your data may be stored and processed outside Indonesia and outside your own country. Where that happens we rely on the safeguards available under UU PDP and, for visitors from the European Economic Area, on standard contractual clauses offered by our providers.

Your rights

You have the right to:

• Access the personal data we hold about you and receive a copy.
• Correct data that is inaccurate or incomplete.
• Have your data deleted, including your passport image, at any time.
• Withdraw consent, object to processing or ask us to restrict it.
• Receive your data in a portable format.
• Complain to the competent data protection authority in Indonesia or in your own country.

To use any of these rights, email hello@yayahelp.com from the address you used in your request, or message us on WhatsApp. We answer within 3 working days and act within the time required by law, which is at most 14 days under UU PDP.

Cookies and analytics

The site sets a single cookie, named "locale", only when you choose a language manually, so the site opens in that language next time. It does not track you. We use Cloudflare Web Analytics, which does not use cookies or collect personal data. Because of this the site has no cookie banner.

While you fill in the request form, your answers are kept in your browser's session storage so a refresh does not lose them. They stay on your device until you send the request or close the tab.

Children

The request form must be completed by an adult. We collect children's ages only so we can match a nanny with the right experience, and we never collect children's names or images.

Security

All traffic to our site is encrypted. Our admin tools are protected by Cloudflare Access and multi-factor authentication, and access to passport images is time-limited and logged. If we ever become aware of a breach that affects you, we will tell you and the authorities within the time required by UU PDP (72 hours).

Changes to this policy

If we change this policy in a way that matters, we update the date at the top and, where we have your contact details and the change affects you, we tell you directly.