GDPR Compliance Statement
Effective date: January 1, 2026
Our commitment to GDPR compliance
sky-yard is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This statement outlines how we comply with GDPR requirements when processing your personal information.
Legal basis for processing
We process your personal data under the following legal bases:
- Consent: When you explicitly agree to our processing activities, such as subscribing to communications
- Contract performance: When processing is necessary to fulfil our consultancy services agreement with you
- Legitimate interests: When we have a legitimate business reason for processing that does not override your rights
- Legal obligation: When we must process data to comply with legal requirements
Your GDPR rights
Under GDPR, you have the following rights regarding your personal data:
Right to access
You have the right to request access to the personal data we hold about you. We will provide you with a copy of your data in a structured, commonly used format.
Right to rectification
You may request correction of any inaccurate or incomplete personal information we hold about you.
Right to erasure
You have the right to request deletion of your personal data under certain circumstances, such as when it is no longer necessary for the purposes for which it was collected.
Right to restrict processing
You may request that we restrict processing of your personal data in certain situations, such as when you contest the accuracy of the data.
Right to data portability
You have the right to receive your personal data in a structured, machine-readable format and to transmit it to another data controller.
Right to object
You may object to processing of your personal data based on legitimate interests or for direct marketing purposes.
Rights related to automated decision-making
You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
How to exercise your rights
To exercise any of your GDPR rights, please contact us at [email protected]. We will respond to your request within one month, or inform you if we require an extension. You will not be charged for exercising your rights unless your request is manifestly unfounded or excessive.
Data protection officer
For questions about our GDPR compliance or data protection practices, you may contact our data protection representative at [email protected].
International data transfers
We primarily store and process data within the United Kingdom and European Economic Area. If we transfer data outside these regions, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.
Data breach notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach. If the breach poses a high risk, we will also notify affected individuals without undue delay.
Children's privacy
Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without appropriate consent, we will take steps to delete that information.
Supervisory authority
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates GDPR. In the United Kingdom, the relevant authority is the Information Commissioner's Office (ICO).
Updates to this statement
We may update this GDPR compliance statement periodically to reflect changes in our practices or legal requirements. The effective date at the top of this page indicates when the statement was last revised.
Contact information
For questions about GDPR compliance or to exercise your rights, please contact us:
Email: [email protected]
Address: 47 Eccleston Square, London SW1V 1PB, United Kingdom