Privacy policy

We take the protection of our website users’ data very seriously and undertake to protect information that users provide in connection with using our website. We also undertake to protect and use your data in accordance with applicable law.

This privacy policy explains our practices for collecting, using and disclosing your data when you access our digital assets (the “services”) using your devices.

This notice informs you about data processing. Visiting or continuing to use this website does not constitute consent to optional cookies, analytics services or external media. You can change or withdraw your statistics and marketing choices through Cookie settings. Project videos have a separate choice directly at each video.

• How we collect data
• What data we collect
• Why we collect it
• Who we share it with
• Where it is stored
• How long it is retained
• How we protect it
• How we deal with minors
• Updates or changes to this privacy policy

The following is an overview of the data we may collect:

• Unidentified and non-identifiable information that you provide during registration or that is collected through using our services (“non-personal data”). This does not identify the person from whom it was collected and mainly consists of technical and aggregated usage information.
• Individually identifiable information, meaning information that identifies you or could do so with reasonable effort (“personal data”). This may include names, email addresses, postal addresses, telephone numbers, IP addresses and other information requested from time to time. If personal and non-personal data are combined, we treat the combined information as personal data for as long as it remains combined.

Our main methods of collecting data are:

• When you visit our digital assets and use the services, we may collect and store usage, session and related information.
• We collect information you provide directly, for example when contacting us by email with a comment or feedback.
• We may collect information from third-party sources as described below.
• We collect data you provide when signing in to our services through a third party such as Facebook or Google.

We may use your data for the following purposes:

• To provide and operate our services;
• To develop, adapt and improve them;
• To respond to feedback, enquiries and requests and provide assistance;
• To analyse demand and usage patterns;
• For other internal, statistical and research purposes;
• To improve data security and fraud prevention;
• To investigate violations, enforce our terms and policies and comply with applicable laws, regulations and official orders;
• To send updates, news, promotional material and other information about our services. You can decide whether to continue receiving promotional emails by using their unsubscribe link.

We may share your data with service providers to operate our services, for example third-party hosting and data storage or technical support.

We may also disclose data: (i) to investigate, detect, prevent or address unlawful activity or other misconduct; (ii) to establish or exercise legal defences; (iii) to protect our rights, property or personal safety and those of users or the public; (iv) in a change of control affecting us or an affiliated business, such as a merger or acquisition of substantially all assets; (v) to collect, retain or manage data through authorised third parties, such as cloud providers, where appropriate for business purposes; or (vi) to work with third parties to improve the user experience. For clarity, we may transfer, share or otherwise use non-personal data at our discretion.

Our services may allow social interaction, such as public posts, information, comments or chats. Information shared there may be read, collected and used by others. Do not post information you do not want to make public. Uploading or otherwise providing content through a service is at your own risk. We cannot control other users or members of the public who have access to it. Copies may remain accessible after deletion on cached or archived pages or after third parties have copied or stored the content.

We distinguish necessary functions from optional services. Optional services are disabled by default. The cookie banner allows you to accept all currently available optional services, allow only necessary functions or save your own selection. Rejecting optional services does not restrict access to the remaining content.

We store your cookie choices in your browser’s local storage under skyisnolimit-consent, including the selection, version, timestamp and expiry date. Storage lasts up to 180 days and does not connect to an external service. You can change or withdraw your choices at any time through Cookie settings in the footer. If browser storage is unavailable, the selection applies only to the current page. Your language choice is also stored locally. A session is used to limit abuse when the contact form is submitted.

Project videos use YouTube’s privacy-enhanced mode (youtube-nocookie.com), provided by Google Ireland Limited. Preview images are hosted on our server. Only clicking Play film allows a connection to YouTube for that video. Your IP address and usage data may then be processed and data may be transferred to the United States. YouTube may use cookies or similar storage. Google’s privacy information is linked at the player. Close video removes the player but does not retrospectively delete data already processed by the provider. This choice is separate from statistics and marketing consent and is not permanently stored for other videos.

Google Analytics 4

Google Analytics 4, measurement ID G-KLMJK5GG8G, is configured for the live website. It is provided by Google Ireland Limited and evaluates page views and usage to help improve our website. The Google script loads only on our live domain and only after your explicit consent to Statistics. Before consent, and when rejected, this integration sends no analytics requests to Google. Analytics is completely disabled in local previews; preview selections do not count as consent for the live website.

After consent, visited pages, timestamps, browser and device information, referral sources and cookie identifiers may be processed. Your IP address is transmitted when the connection is established; Google states that GA4 does not store it. Google may also process data in the United States. Our integration does not pass form entries and removes query parameters and fragments from page and referrer URLs sent to Analytics. Google Signals and advertising personalisation are disabled in our integration.

The _ga and _ga_KLMJK5GG8G analytics cookies are configured for a maximum of 180 days without automatic renewal. You can withdraw consent through Cookie settings in the footer. Further collection is then disabled and these cookies are deleted where possible. This does not retrospectively erase data already sent to Google. Cookie lifetime is separate from data retention settings in the Analytics account.

Meta Pixel (Facebook Pixel) is planned but not yet technically connected. Selecting Marketing currently loads no Meta script. The privacy information and consent version will be updated before it is connected.

Non-personal data

Our businesses, trusted partners and service providers are located around the world. For the purposes described in this policy, non-personal data may be stored and processed in different jurisdictions.

Personal data

Personal data may be maintained, processed and stored in the United States, Ireland, South Korea, Taiwan, Israel and other jurisdictions where needed to provide our services properly or where required by law, as explained below.

We retain collected data for as long as necessary to provide the services, fulfil legal and contractual obligations, resolve disputes and enforce agreements. We may correct, supplement or delete inaccurate or incomplete data at our discretion.

The hosting service for our digital assets supplies the online platform used to provide our services. Data may be stored through its storage facilities, databases and general applications. It stores data on secure servers behind a firewall and provides secure HTTPS access to most areas of its services.

Payment options offered by us and our hosting provider comply with the Payment Card Industry Data Security Standard (PCI-DSS) managed by the PCI Security Standards Council, a collaboration involving brands such as Visa, MasterCard, American Express and Discover. These requirements support secure handling of card information, including physical, electronic and procedural safeguards, by our shop and service providers.

Despite these measures and efforts, we cannot guarantee absolute protection or security for data you upload, publish or otherwise share with us or others. Please choose secure passwords and, where possible, avoid sharing confidential information whose disclosure could seriously or persistently harm you. Email and instant messaging are not considered secure communication methods; please do not send confidential information through them.

Children may use our services, but certain functions may require them to provide information. Some data, including data obtained through cookies, web beacons and similar technologies, may be collected automatically. Where we knowingly collect, use or disclose a child’s data, we will give notice and obtain parental consent in accordance with applicable law. Participation in an online activity is not conditional on providing more contact information than reasonably necessary. We use the collected data only in connection with the services requested by the child.

We may use a parent’s contact details to communicate about the child’s activities. Parents may review the data collected from their child, prohibit further collection and request deletion of the data from our records.

Contact us to review, update or delete your child’s information. We may request proof of identity to protect the child and may refuse access if identity is uncertain. Some data may not be deletable because of other legal obligations.

We use personal data only for the purposes set out in this policy and only where we believe that:

• Use is necessary to enter into or perform a contract, for example to provide services, customer care or technical support;
• Use is necessary to meet legal or regulatory obligations; or
• Use is necessary to support legitimate business interests, provided it remains proportionate and respects your privacy rights.

As an EU resident, you may:

• Request confirmation of whether your personal data is processed and access to it and certain additional information;
• Receive data you supplied in a structured, commonly used, machine-readable format;
• Request correction of stored personal data;
• Request deletion of personal data;
• Object to our processing;
• Request restriction of processing; or
• Lodge a complaint with a supervisory authority.

These rights are not unlimited and may be subject to our legitimate interests and regulatory requirements. For questions about collected data and its use, contact us using the details below. Providing the services may involve cross-border transfers to affiliated businesses or other third parties, including transfers from your country or jurisdiction to other countries. Use of the services signifies agreement to transfers outside the EEA.

For EEA residents, we transfer personal data outside the EEA only where we believe an adequate or comparable level of protection exists. We take appropriate steps to establish suitable contractual arrangements with third parties and safeguards to minimise the risk of unlawful use, alteration, deletion, loss or theft, and to ensure those parties act in accordance with applicable laws.

If you use the services as a California resident, you may be entitled under the California Consumer Privacy Act (CCPA) to request access to and deletion of your data.

To exercise these rights, see the contact details below.

We do not sell users’ personal data for the purposes of the CCPA.

California users under 18 may request removal of their published content by emailing the address in Contact below. Requests must be marked “California Removal Request”, describe the content to be removed and provide enough information to locate it. We do not accept unmarked or improperly submitted notices and may be unable to respond to incomplete requests. A request does not ensure complete or comprehensive removal; other users or third parties may have republished the material.

We may revise this policy at our discretion from time to time. The published version is the current version (see any stated revision date). Please check it regularly. We will publish a notice of material changes. Continuing to use the services after notification indicates acknowledgement and acceptance of the changes and their terms.

For general questions about the services or the information we collect about you and how we use it, please contact: