Privacy Policy
Last updated: October 2026
1. Data Controller
The data controller responsible for the processing of your personal data on this website and in connection with our services is:
Entity Name: [PLACEHOLDER: Legal Entity Name, e.g., Skyup Agency Ltd / GmbH]
Registered Address: [PLACEHOLDER: Registered Business Address]
Commercial Register Number: [PLACEHOLDER: Registration Number & Court of Registry]
VAT ID: [PLACEHOLDER: VAT Identification Number]
Email: [PLACEHOLDER: Contact Email, e.g., privacy@skyup.agency]
Data Protection Contact: [PLACEHOLDER: Data Protection Officer Name or Team Contact]
2. Principles of Data Processing
We process your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR) and applicable national data protection acts. We adhere to the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.
3. Data We Collect and Purposes
A. Contact and Enquiry Data
When you submit an enquiry via our website contact form or schedule a call, we collect your full name, work email address, phone number (optional), company name, estimated monthly ad spend, and message content.
Legal Basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(a) GDPR (your consent).
B. Server Logs and Technical Data
When accessing our website, our hosting provider automatically processes temporary server log data including your IP address, browser type, operating system, referrer URL, and access timestamps to ensure system security and stability.
Legal Basis: Art. 6(1)(f) GDPR (our legitimate interest in operating a secure and stable website).
C. Cookie and Analytics Data
We only set optional analytics and marketing cookies or scripts if you have explicitly granted consent via our cookie consent banner. Technical essential cookies necessary for website operation are set based on Art. 6(1)(f) GDPR.
4. Third-Party Sub-processors and Hosting
To deliver our services reliably and securely, we utilize European-hosted infrastructure and vetted sub-processors under compliant Data Processing Agreements (DPAs):
- Hosting & Edge Delivery: Vercel Inc. (EU region: Frankfurt fra1).
- Database & Authentication: Supabase Inc. (EU region: Frankfurt eu-central-1).
- Transactional Email: Resend Inc. (EU region).
- Meeting Scheduling: Cal.com, Inc. (used when scheduling strategy calls).
- Payment Processing: Stripe Payments Europe Ltd. (Dublin, Ireland).
5. Retention Periods
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by statutory retention obligations (such as commercial or tax record retention requirements under applicable European laws).
6. Your Rights Under GDPR
As a data subject in the European Union or United Kingdom, you have the following rights:
- Right of Access (Art. 15 GDPR): You may request confirmation and copies of your personal data.
- Right to Rectification (Art. 16 GDPR): You may request correction of inaccurate data.
- Right to Erasure (Art. 17 GDPR): You may request deletion of your personal data.
- Right to Restriction (Art. 18 GDPR): You may request that we restrict processing.
- Right to Data Portability (Art. 20 GDPR): You may receive your data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): You may object at any time to processing based on legitimate interests.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting past processing.
To exercise any of these rights, please contact us at: [PLACEHOLDER: privacy@skyup.agency].
7. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority in your EU member state of residence, workplace, or place of alleged infringement.