Privacy Policy for YilaHR SAS
Last updated: May 2026
YilaHR SAS (and its affiliates where applicable) ("YilaHR", "we", "us" or "our") recognises the provisions of the Cameroonian Law No. 2012/007 of 19 April 2012 relating to the protection of persons with regard to the processing of personal data. We acknowledge the importance of confidentiality and the duty owed to our clients' information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our payroll SaaS platform and related services. We are committed to using your personal information solely to provide our products and services.
We invite you to read this policy carefully. If you use our services on behalf of a company or other persons (e.g., your employees), you are responsible for ensuring that they are aware of this Privacy Policy and consent to the supply of their personal data to us.
Definitions
- "You" means the person or entity that subscribes to, uses, or purchases our services, including any employer, administrator, or employee who accesses the platform.
- "YilaHR", "we", "us", "our" means YilaHR SAS, a simplified joint-stock company registered in Cameroon (RCCM: CM-DLA-02-2025-B-01893), with its registered office at Bonamoussadi, Douala.
Our Commitment to Protecting Your Data
YilaHR strictly adheres to Cameroonian data protection laws. We uphold the principles of lawfulness, fairness, transparency, accuracy, integrity, confidentiality (security), and accountability in all data collection and processing activities.
Our commitments to you are:
- To keep your data secure and private;
- To share your data only when necessary and with your consent or as required by law;
- To use your data to deliver and improve our services;
- To give you control over your data (access, correction, deletion, etc.).
Types of Personal Information We Collect
| Type of Personal Information | Description |
|---|---|
| Personal Information | Name, address, email, telephone number, date of birth, national ID (CNI), NIU, passport, employee photo, etc. |
| Employee / Payroll Data | Salary details, working hours, contract terms, deductions, bank account information, CNPS/DGI-related data, family/dependant details. |
| Transactional | Payroll processing records, payment details, declarations to CNPS and DGI. |
| Contractual | Details of the service agreement between you and YilaHR. |
| Technical | IP address, device information, browser type, login logs. |
| Usage / Behavioural | How you and your employees use the platform (e.g., features accessed). |
| Location | Approximate location derived from IP address or device settings (when relevant). |
| Communications | Emails, WhatsApp messages, support tickets, and calls with our team. |
| Sensitive Data | May include health-related data (for specific payroll deductions), marital status, children, or next of kin where necessary for payroll compliance. |
Lawful Processing of Data
We process your personal data only when at least one of the following applies:
- Performance of a contract with you (e.g., providing the payroll SaaS service);
- Compliance with legal obligations (e.g., CNPS, DGI, tax regulations in Cameroon);
- Protection of vital interests;
- Legitimate interests pursued by YilaHR, unless overridden by your rights;
- Your consent (where required).
Data Minimization
We collect only the data strictly necessary for the provision of our payroll services, regulatory compliance, and platform functionality. We do not collect unnecessary information.
How We Use Your Information
We may use your information to:
1. Fulfil our contract and deliver services
- Process payroll, generate payslips, DIPE, CNPS/DGI declarations, and bank transfer orders.
- Provide the employee mobile portal.
- Manage your account and support requests.
2. Improve our services
- Enhance platform features and user experience.
- Perform maintenance, updates, and testing.
- Develop new functionalities (including AI optimisation).
3. Manage operations
- Billing and payments.
- Regulatory compliance and reporting.
4. Marketing and communications (with consent)
- Inform you about updates, new features, or promotions.
- Send newsletters (you can unsubscribe at any time).
5. Security and risk management
- Prevent fraud, ensure platform security, and comply with legal requirements.
Where We Collect Personal Information
- Directly from you when you register or input employee data.
- From your usage of the platform.
- From third parties (e.g., banks for payment processing) where authorised.
- Automatically through cookies and technical logs.
Sharing Your Personal Information with Third Parties
We do not sell your personal data. We may share data only as necessary:
- With service providers (e.g., hosting, payment processors) who are bound by confidentiality and data protection obligations.
- With regulatory authorities (CNPS, DGI, tax offices) as required by Cameroonian law.
- With legal advisors, auditors, or in the context of a business transfer (merger, acquisition).
- With your explicit consent in other cases.
All third parties are required to protect your data and use it only for the specified purposes.
Data Security and Protection
We implement robust technical and organisational measures:
- Encryption: AES-256 encryption for data at rest and in transit.
- Hosting: Data stored and secured in Africa and Europe.
- Access Controls: Strict role-based access, multi-factor authentication, and audit logs.
- Maintenance: Regular updates, vulnerability scanning, and monitoring.
- Personnel: Employees receive regular training on data protection and confidentiality.
- Incident Response: We have procedures to manage and notify relevant parties in case of a data breach.
Your Rights
Under Cameroonian law, you have the right to:
- Access: Request a copy of your personal data.
- Rectification: Correct inaccurate or incomplete data.
- Erasure: Request deletion of your data (subject to legal obligations).
- Restriction: Limit processing in certain circumstances.
- Objection: Object to processing based on legitimate interests.
- Portability: Receive your data in a structured, commonly used format (where technically feasible).
- Withdraw Consent: Where processing is based on consent.
To exercise these rights, contact us at the details below. You also have the right to lodge a complaint with the competent Cameroonian data protection authority.
Data Retention
We retain your personal data for as long as necessary to provide the service, comply with legal obligations (e.g., tax and social security requirements), or resolve disputes. Once no longer needed, we securely delete or anonymise the data.
Cookies and Tracking
We use essential cookies to operate the platform. You can manage cookie preferences through your browser settings.
Updates to this Privacy Policy
We may update this policy from time to time. We will notify you of significant changes via the platform or email. Continued use of our services after changes constitutes acceptance of the updated policy.
Contact Us
For any questions, requests, or complaints regarding this Privacy Policy:
YilaHR SAS
Rue 5.121 Bonamoussadi, Douala, Cameroon
Email: contact@yilahr.com
Phone / WhatsApp: +237 6 40 57 44 07
We are committed to resolving any concerns promptly and in accordance with applicable law.
This Privacy Policy is governed by the laws of the Republic of Cameroon.