This policy only applies for Skyfallen services broadly. Some Skyfallen services may have their own privacy policies for some of the data they may collect.
– The Skyfallen Company ONE Identity Services Privacy Policy
In some regions, there may be specific privacy policies that extend or override this policy.
– Türkiye Cumhuriyeti’nde Bulunan Kişi ve Kuruluşlar için Skyfallen ile Paylaşılan Kişisel Verilerin Korunması Politikası
– Datenschutzerklärung der Skyfallen Limited (The Skyfallen Company)
This Privacy Policy explains how Skyfallen Limited, trading as The Skyfallen Company (“Skyfallen”, “we”, “us”, or “our”), collects, uses, stores, shares, transfers, and protects personal data when you access or use Skyfallen websites, applications, software, platforms, communications services, cloud services, professional services, partner services, and other products or services (collectively, the “Services”).
Certain Services may be subject to additional privacy notices, service-specific terms, or customer agreements. Where a service-specific privacy notice conflicts with this Privacy Policy, the service-specific notice will control for that Service.
This Privacy Policy is intended to satisfy applicable requirements under the UK GDPR, EU GDPR, Turkish Personal Data Protection Law (KVKK), and applicable United States privacy laws.
1. Data Controller
The data controller for personal data processed under this Privacy Policy is:
Skyfallen Limited
(Companies House Registration Number 13431214)
Trading as The Skyfallen Company
Registered Office
14/2e Docklands Business Centre
10-16 Tiller Road
London E14 8PX
United Kingdom
Privacy Contact
In some circumstances, Skyfallen customers may act as independent controllers or controllers in their own right when they use Skyfallen Services to collect, manage, process, or store information relating to their own customers, employees, contractors, members, students, patients, users, or other data subjects.
2. Scope
This Privacy Policy applies to personal data processed through Skyfallen Services, including websites, applications, identity services, communications services, software products, cloud services, customer portals, partner services, support channels, payment systems, and related business operations.
This Privacy Policy does not apply to third-party products, services, websites, applications, or platforms that are not operated by Skyfallen, even where they integrate with Skyfallen Services.
3. Information We Collect
The information we collect depends on the Services you use and your relationship with Skyfallen.
3.1 Account and Identity Information
We may collect:
- Name and contact information
- Email addresses
- Telephone numbers
- Postal addresses
- Date of birth where required
- Profile information
- Account identifiers
- Authentication credentials
- Security preferences
- Identity verification information
- Organisation membership information
- Employment or business relationship information
3.2 Business and Organisation Information
We may collect:
- Legal business names
- Registration information
- Tax information
- Licensing information
- Billing information
- Business contact details
- Authorised representative information
- Verification documents
- Proof of authority documentation
3.3 Payment and Transaction Information
We may collect transaction-related information necessary to process payments, subscriptions, invoices, refunds, and account administration.
Payment card information is processed by authorised payment processors and is not stored by Skyfallen.
3.4 Communications Information
We may collect information contained in communications with Skyfallen, including:
- Support requests
- Emails
- Telephone calls
- Messages
- Verification requests
- Customer service interactions
- Feedback and surveys
3.5 Technical and Usage Information
We may collect:
- IP addresses
- Device information
- Browser information
- Operating system information
- Session information
- Application usage information
- Log data
- Error reports
- Security events
- Performance metrics
- Diagnostic information
3.6 Information Received From Third Parties
We may receive information from:
- Customers
- Business partners
- Payment processors
- Identity providers
- Technology providers
- Resellers
- Public sources
- Verification providers
- Government or regulatory authorities where legally permitted
4. How We Use Information
We use personal data to:
- Provide and operate the Services
- Create and manage accounts
- Authenticate users
- Process payments and subscriptions
- Verify identities and organisations
- Deliver customer support
- Provide communications services
- Administer contracts and customer relationships
- Manage licensing and subscriptions
- Maintain security
- Detect and prevent fraud
- Monitor service performance
- Improve and develop Services
- Conduct analytics and business operations
- Comply with legal obligations
- Protect rights, property, safety, and security
- Enforce agreements and policies
5. Lawful Bases for Processing
Where required by applicable law, we process personal data on one or more of the following legal bases:
- Performance of a contract
- Legitimate interests
- Compliance with legal obligations
- Consent
- Protection of vital interests
- Public interest or official authority where applicable
6. Internal Data Sharing
Skyfallen operates multiple websites, applications, systems, and Services.
Personal data may be shared between Skyfallen Services, websites, applications, affiliated systems, administrative platforms, support systems, communications systems, and business operations where reasonably necessary to:
- Maintain a unified customer account
- Authenticate users
- Process transactions
- Administer subscriptions
- Deliver Services
- Provide customer support
- Maintain security
- Prevent fraud
- Verify identities and organisations
- Comply with legal obligations
- Improve Services
- Conduct analytics
- Operate Skyfallen’s business
Information shared internally may include account information, subscription status, payment status, organisation information, verification information, analytics information, legal documentation, licensing information, and other information reasonably necessary for these purposes.
7. How We Share Information
7.1 Service Providers
We engage trusted service providers that process personal data on our behalf under contractual protections and confidentiality obligations.
Such providers may assist with:
- Infrastructure and cloud hosting
- Communications
- Email delivery
- Messaging
- Telephony
- Payment processing
- Identity verification
- Analytics
- Security
- Customer support
- Artificial intelligence and automation services
- Professional services
These providers may include OpenAI, Anthropic, Google, Microsoft, Stripe, PayPal, Twilio, Brevo, and other service providers engaged by Skyfallen from time to time.
7.2 Partner Services
Where customers request or authorise Google Workspace, Microsoft 365, or other partner services, Skyfallen may exchange information with relevant providers for:
- Licensing
- Billing
- Provisioning
- Account administration
- Migration
- Support
- Compliance
- Partner programme requirements
- Service management
7.3 Customers and Administrators
Where a person uses Services provided by a Skyfallen customer, authorised administrators may access personal data in accordance with the customer’s configuration, contractual arrangements, and applicable law.
7.4 Legal Disclosures
We may disclose information where required or permitted by law, regulation, court order, governmental request, or regulatory authority.
7.5 Corporate Transactions
Personal data may be disclosed or transferred in connection with a merger, acquisition, restructuring, financing transaction, asset sale, or similar corporate event.
We do not sell personal data.
8. Artificial Intelligence and Automated Processing
Skyfallen may use artificial intelligence, machine learning, automation, and related technologies to assist with customer support, communications processing, call handling, document analysis, verification, fraud detection, workflow automation, service functionality, and operational efficiency.
These technologies may be provided by Skyfallen or by third-party providers, including OpenAI, Anthropic, Google, Microsoft, and other providers engaged from time to time.
Where required by law, appropriate safeguards and transparency measures will be implemented.
9. Storage Locations and International Transfers
Skyfallen primarily stores and processes personal data within the European Union.
Certain data may be processed in other jurisdictions where reasonably necessary for service delivery, support, legal compliance, security operations, disaster recovery, redundancy, partner services, authorised third-party services, or customer-requested functionality.
Where personal data is transferred internationally, Skyfallen implements appropriate safeguards required by applicable law.
10. Cookies and Similar Technologies
Skyfallen uses cookies and similar technologies to:
- Operate Services
- Maintain sessions
- Authenticate users
- Improve functionality
- Remember preferences
- Maintain security
- Measure performance
- Conduct first-party analytics
Skyfallen does not use third-party advertising cookies for behavioural advertising through its Services.
11. Analytics
Skyfallen uses first-party analytics, performance monitoring, diagnostic systems, security monitoring, and operational telemetry to understand how Services are used, improve reliability, maintain security, diagnose issues, and support business operations.
Analytics information may include usage information, technical events, performance information, error information, and aggregated behavioural patterns.
Skyfallen does not sell analytics information.
Skyfallen does not share analytics information with third parties for advertising purposes.
12. Security
Skyfallen implements reasonable administrative, technical, organisational, and physical safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction, misuse, or unlawful processing.
These measures may include:
- Encryption
- Access controls
- Authentication systems
- Security monitoring
- Network protections
- Audit logging
- Incident response procedures
No security system can guarantee absolute security.
13. Retention
Skyfallen retains personal data only for as long as reasonably necessary for:
- Providing Services
- Maintaining customer relationships
- Legal compliance
- Security
- Fraud prevention
- Dispute resolution
- Business operations
- Legitimate business purposes
Retention periods vary depending on the nature of the information, the Services involved, contractual obligations, and legal requirements.
14. Your Privacy Rights
Subject to applicable law, individuals may have rights including:
- Access
- Correction
- Deletion
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent
- Complaint to a supervisory authority
Requests may be submitted to [email protected].
15. Children
Skyfallen Services are not directed to individuals under 18 years of age.
Individuals under 18 may only interact with Skyfallen-powered services where a Skyfallen customer independently provides services to those individuals under that customer’s own terms, privacy policies, and legal responsibilities.
Skyfallen does not knowingly create direct customer relationships with individuals under 18 through its Services.
16. Third-Party Services
Skyfallen Services may integrate with, connect to, or interoperate with third-party products and services.
Such third parties maintain their own privacy practices, terms, and policies.
17. Changes to This Privacy Policy
Skyfallen may update this Privacy Policy from time to time.
Updated versions will be published with a revised effective date.
Where required by law, additional notice or consent will be provided.
18. Contact Information
Privacy Requests
[email protected]
Security Matters
[email protected]
Skyfallen Limited
Trading as The Skyfallen Company
14/2e Docklands Business Centre
10-16 Tiller Road
London E14 8PX
United Kingdom
CRN 13431214
19. Complaints
Individuals may lodge complaints with applicable supervisory authorities, including data protection authorities within the United Kingdom, European Economic Area, Türkiye, or other jurisdictions where applicable.
Skyfallen encourages individuals to contact [email protected] first so concerns may be addressed directly and efficiently.