Privacy statement
Last updated:
Controller and contact
Skylio Sites provides this website. Controller details: Malou Trading, trading as Skylio Sites, Piet Heinstraat 3, 1521 KX, Wormerveer, Netherlands, KVK: 97684279. Contact hello@skyliosites.com with privacy questions or requests.
Information we process
We process the name, business, email, optional phone, town, selected country, links, messages and files you submit. Enquiries also include your chosen language, detected country and bounded UTM source, medium, campaign, content, term and identifier fields. We do not sell personal data.
Demo requests and client services — contract
We handle demo and quote requests, communicate with you and deliver agreed website services on the basis of GDPR Article 6(1)(b): steps at your request before a contract and performance of a contract.
Administration and invoices — legal obligation
Client administration, invoices and required fiscal records are processed under Article 6(1)(c), to comply with Dutch legal obligations. Dutch accounting records are retained for 7 years.
Security and attribution — legitimate interests
Spam protection, security and enquiry attribution (language, country and UTM fields) rely on Article 6(1)(f). Our interests are protecting the service and understanding the origin of enquiries. We use limited information, do not store IP addresses, do not follow you across websites and restrict access, balancing these interests against your privacy. You may object at any time on grounds relating to your situation; we then stop unless compelling overriding grounds or legal claims apply.
Country detection
Country is derived from hosting request information at visit time, without storing the IP address in our application or sending it to an external lookup service. It suggests a language and currency; browser language is the fallback. A manual language choice always wins.
Processors and safeguards
Technical processors act on our instructions under data processing agreements: Website hosting and database: Lovable Cloud; Email delivery: Provider details available on request. Access is limited to the owner and authorised providers using appropriate security measures. Provider names are maintained centrally; contact hello@skyliosites.com for current processor details.
International transfers
Processing may take place outside the EEA. Where required, transfers rely on applicable safeguards such as the EU–US Data Privacy Framework for certified recipients and/or European Commission Standard Contractual Clauses, with supplementary measures where necessary. We verify the applicable mechanism for each provider.
Retention
Enquiries that do not become projects, including their language, country and campaign details, are deleted after 12 months from last contact. Client and accounting records are retained for 7 years where required. Change-request uploads are deleted 12 months after the request is completed. We retain only what is necessary for the stated purpose or an applicable legal requirement.
AI chat assistant
The chat assistant answers questions using only the content of this website. Your messages and the current page language are sent to an AI provider to generate answers; they are processed for that purpose only and are not stored by us. Only if you submit the "Leave a message" form inside the chat do we store your name, contact details, question, a short chat transcript, language, detected country, campaign fields and page address as an enquiry. Legal basis: steps at your request before a contract, Art. 6(1)(b), and our legitimate interest in answering questions efficiently, Art. 6(1)(f); you may object at any time. A session counter without message content is kept for at most one hour to prevent abuse. The AI provider may process data outside the EEA; such transfers rely on safeguards such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses. Answers are generated automatically and do not constitute a decision about you.
Your rights
Subject to the GDPR conditions, you may request access, rectification, erasure, restriction, portability and object to processing. Where processing relies on consent, you can withdraw it at any time without affecting earlier lawful processing. Contact hello@skyliosites.com; we normally respond within one month and only request proportionate identification where necessary. We do not use automated decision-making or profiling.
Complaints
You may complain to the Autoriteit Persoonsgegevens at autoriteitpersoonsgegevens.nl, or to the supervisory authority in your own EU country.
Cookies and browser storage
No tracking or advertising cookies are used. Local storage is limited to functional language/currency preferences and the dismissed language notice; no consent banner is needed for these necessary preferences. Limited campaign fields remain in session storage and are submitted only with an enquiry. You can remove them in browser settings. Any future analytics must be cookieless; this statement will be updated before changes to processing.