Yochana Data Privacy & Protection Policy Effective Date: January 01, 2026

Yochana IT Solutions Inc, including its affiliates and subsidiaries (“Yochana,” “Company,” “we,” “us,” or “our”), is committed to protecting Personal Information and respecting the privacy rights of individuals whose information we process. This Privacy Policy describes how Personal Information is collected, used, disclosed, transferred, retained, and protected when individuals interact with Yochana through our website, recruiting platforms, workforce management systems, client engagement processes, business communications, and related services.

This Privacy Policy applies to Personal Information processed by Yochana in its capacity as a data controller/business. Where Yochana processes personal information solely on behalf of a client as a service provider, processor, contractor, or staffing vendor, such processing is governed by the applicable client agreement and the client’s privacy notice.

1. Scope

This Privacy Policy applies to individuals who visit our website, apply for employment or contract opportunities, submit resumes or professional profiles, communicate with our recruiting or business teams, participate in interviews, onboarding, training, webinars, or events, visit our offices, or otherwise interact with Yochana in a professional or business capacity. Our services are intended for adults and individuals legally eligible to work and are not directed to children under the age of eighteen (18).

2. Personal Information – We Process

Yochana may process structured, semi-structured, and unstructured data elements including identity attributes, contact identifiers, professional profile metadata, resume and curriculum vitae records, employment and assignment history, educational credentials, technical certifications, skills taxonomies, compensation and payroll data, immigration and work authorization records, onboarding artifacts, communications metadata, interview and assessment outputs, device fingerprints, network identifiers, IP addresses, browser and operating system telemetry, application interaction logs, authentication events, cookie identifiers, analytics data, and publicly available professional information obtained from business networking platforms and other lawful enterprise data sources. If you provide Personal Information relating to another individual, you represent that you have the authority to do so and that the information may be processed in accordance with this Privacy Policy.

3. Automated Collection of Technical Information

When users access Yochana websites, portals, APIs, SaaS applications, cloud workloads, or digital services, we may automatically collect endpoint telemetry, network telemetry, device fingerprints, browser signatures, session tokens, authentication metadata, API request logs, HTTP header information, referral URLs, clickstream analytics, behavioral interaction data, geolocation approximations derived from IP intelligence, and other operational security telemetry through cookies, web beacons, SDKs, server logs, analytics platforms, and security monitoring technologies. Such telemetry is processed for cybersecurity operations, threat detection, fraud analytics, anomaly detection, attack surface monitoring, incident investigation, performance engineering, capacity management, service optimization, and business intelligence purposes.

4. Purposes of Processing

Yochana processes Personal Information for specified and lawful business purposes, including talent acquisition, candidate evaluation, staffing and workforce placement, onboarding and employment administration, payroll and benefits administration, immigration and employment eligibility compliance, client relationship management, contractual performance, service delivery, billing and payment processing, customer support, business continuity operations, enterprise security management, incident response, fraud prevention, legal compliance, audit activities, regulatory reporting, and corporate governance.

5. Lawful Basis for Processing

Where required by applicable law, Yochana processes Personal Information on one or more lawful bases, including performance of a contract, steps taken prior to entering into a contract, compliance with legal obligations, legitimate business interests such as recruitment, workforce management, cybersecurity, fraud prevention, and service delivery, and consent where consent is required by law. Individuals may withdraw consent for processing activities that rely on consent, subject to legal or contractual restrictions.

6. Recruitment and Background Verification

Candidate information may be processed through applicant tracking systems, resume parsing technologies, interview scheduling platforms, collaboration tools, and other recruitment technologies. Yochana may conduct employment verification, education verification, professional reference verification, background screening, sanctions screening, and other pre-employment due diligence activities where permitted by law and with any required authorization. Screening information is used solely for recruitment, placement, compliance, and risk management purposes.

7. Disclosure of Personal Information

Yochana does not sell Personal Information for monetary consideration. Personal Information may be disclosed to clients considering a candidate for employment or assignment payroll, benefits, and HR administrators recruitment technology providers cloud hosting and IT infrastructure providers cybersecurity and managed service providers background screening vendors professional advisors such as attorneys, auditors, and accountants government authorities, regulators, tax authorities, immigration authorities, or law enforcement agencies where required by law and affiliated entities for legitimate business operations. All third parties receiving Personal Information are expected to protect it through appropriate confidentiality, security, and data protection obligations.

8. International Data Transfers

Yochana operates globally and Personal Information may be transferred to and processed in countries other than the country in which the individual resides, including the United States. Where required by applicable law, cross-border transfers are protected through Standard Contractual Clauses (SCCs), Binding Corporate Rules (BCRs), data transfer agreements, adequacy mechanisms, or other legally recognized safeguards designed to provide an appropriate level of protection.

9. Email Communications and Corporate Email Signatures.

Yochana processes business communications transmitted through enterprise email systems, collaboration platforms, messaging tools, and other authorized electronic communication channels, which may contain Personal Information, resumes/CVs, employment records, business information, technical information, and operational metadata required for recruitment, workforce management, client service delivery, compliance, support, and business operations. Such information is securely stored within Yochana’s authorized information systems and cloud platforms and is not disclosed, sold, rented, or shared with any unauthorized third party except where necessary for recruitment and placement activities with the relevant client, engagement of approved service providers under confidentiality obligations, compliance with applicable law, legal process, or regulatory requirements, or with the individual’s consent. Yochana implements security controls designed to protect electronic communications against unauthorized access, interception, disclosure, alteration, phishing, malware, business email compromise (BEC), and other cybersecurity threats, including secure email gateways, encryption in transit, SPF, DKIM, DMARC, security logging, and continuous monitoring. Official communications are generally transmitted from authorized corporate domains, including @yochana.com and recipients are encouraged to independently verify requests involving financial transactions, payroll changes, banking information, credentials, authentication codes, or other sensitive information through a trusted communication channel. Yochana may use standardized corporate email signatures containing employee identification details, business contact information, company branding, confidentiality notices, and compliance disclosures, and such information is processed solely for business communication, identity verification, and corporate contact purposes. Electronic communications may be retained in accordance with applicable records retention, legal hold, audit, regulatory, and business continuity requirements and are subject to secure deletion or disposal in accordance with Yochana’s information governance practices.

10. Information Security

Yochana maintains a defense-in-depth information security program comprising administrative, technical, organizational, and physical safeguards designed to protect Personal Information against unauthorized access, acquisition, disclosure, alteration, destruction, loss, misuse, ransomware activity, credential compromise, data leakage, insider threats, and other cybersecurity risks. Security controls may include identity and access management (IAM), role-based access control (RBAC), least-privilege authorization, privileged access management (PAM), multi-factor authentication (MFA), single sign-on (SSO), encryption in transit using TLS 1.2+ protocols, encryption at rest using industry-standard cryptographic algorithms, endpoint detection and response (EDR), anti-malware controls, network segmentation, zero-trust security principles, secure configuration baselines, vulnerability scanning, penetration testing, intrusion detection and prevention systems (IDS/IPS), web application firewalls (WAF), security logging, centralized log aggregation, security information and event management (SIEM), security orchestration automation and response (SOAR), continuous security monitoring, backup integrity validation, disaster recovery controls, and periodic security risk assessments aligned with recognized information security standards.

Security controls are implemented across the entire information lifecycle, including data ingestion, transmission, processing, storage, replication, backup, archival, retrieval, access, use, sharing, and secure disposal. Yochana continuously evaluates and enhances its security posture through governance reviews, control testing, remediation activities, and security awareness programs; however, no information system, network, cloud service, or transmission mechanism can be guaranteed to be completely secure.

11. Confidentiality and Access Management

Access to Personal Information is restricted to authorized personnel, contractors, and service providers with a legitimate business need to know. Personnel handling Personal Information are subject to confidentiality obligations, acceptable use requirements, privacy and security policies, and periodic training. Access rights are reviewed periodically and revoked when no longer required.

12. Data Retention

Yochana retains Personal Information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including recruitment, employment, contractual, legal, tax, regulatory, accounting, audit, and dispute-resolution requirements. Upon expiration of the applicable retention period, Personal Information is securely deleted, destroyed, anonymized, or de-identified in accordance with our records management and information governance procedures.

Where complete deletion is not immediately feasible due to backup media, disaster recovery systems, legal hold obligations, or archival constraints, Yochana will implement measures to isolate and securely protect the retained information from further active processing.

13. Cookies and Analytics Technologies

Our website uses cookies, session tokens, persistent cookies, analytics tags, and similar technologies to authenticate users, maintain session continuity, remember preferences, analyze website performance, measure traffic patterns, detect anomalous activity, and improve functionality. Users may manage cookie preferences through browser settings however, disabling certain cookies may affect website functionality or security features. Additional information regarding cookies may be provided through our website cookie preferences mechanism.

14. Marketing Communications

Where permitted by applicable law, Yochana may send employment opportunities, industry insights, service updates, event invitations, newsletters, and other business communications. Individuals may opt out of non-essential marketing communications by using the unsubscribe mechanism included in the communication or by contacting us directly. Transactional, operational, security, compliance, and employment-related communications may continue where necessary.

15. S. Privacy Rights

Residents of California and other states with comprehensive privacy laws may have rights to know, access, correct, delete, and obtain a copy of their Personal Information, and to opt out of certain sharing or targeted advertising activities where applicable. Yochana does not sell Personal Information for monetary consideration and does not knowingly share Personal Information for cross-context behavioral advertising in a manner requiring an opt-out under applicable law. Privacy requests may be submitted using the contact information below, and Yochana may verify the identity of the requester before processing a request.

16. Third-Party Websites

Our website may contain links to third-party websites, job boards, social networking platforms, collaboration tools, or other external services. Yochana is not responsible for the privacy practices, content, security controls, or data handling practices of third parties, and access to such services is governed by the applicable third-party terms and privacy notices.

17. Changes to This Privacy Policy

Yochana may modify, amend, or update this Privacy Policy from time to time to reflect changes in business operations, technology architecture, security practices, legal requirements, regulatory guidance, or industry standards. Material changes will be posted on our website with an updated effective date, and continued use of our website or services following publication of the revised Privacy Policy constitutes acknowledgment of the updated terms.

18. Contact Information

Questions, privacy requests, security concerns, or data protection inquiries may be directed to:

Yochana IT Solutions
General Contact: hello@yochana.com
Phone: +1 248-213-6465
Website: https://www.yochana.com

Yochana maintains internal privacy and information security governance processes to address inquiries, investigate concerns, and support compliance with applicable U.S. privacy and data protection requirements.