Privacy notice
Version 1, effective 23 October 2026
This notice explains what personal data the Skytaals website collects, why, and what you can do about it. It covers India's Digital Personal Data Protection Act 2023 and Rules 2025, and the EU General Data Protection Regulation where it applies to you.
The short version: this site sets no cookies, loads nothing from third parties and runs no analytics. We only receive personal data when you send us an enquiry.
Who we are
Skytaals [legal entity name and registered address] is the Data Fiduciary (under the DPDP Act) and controller (under the GDPR) for this website. Contact us about privacy at privacy@skytaals.com.
What we collect, and why
| Data | Purpose | Basis | Kept for |
|---|---|---|---|
| Name, work email | Reply to your enquiry and propose a scope | Your consent (DPDP S.6). Under GDPR: steps at your request before a contract, Art. 6(1)(b) | 12 months from last contact, unless we start working together |
| Organisation, topic, message (optional) | Understand your situation so the reply is useful | As above | As above |
| Name, work email | Occasional regulatory updates, only if you ticked that box | Your separate consent (DPDP S.6; GDPR Art. 6(1)(a)) | Until you unsubscribe or withdraw |
| Consent record: reference, time, notice version, purposes | Prove what you agreed to, as DPDP S.6(10) requires | Legal obligation | As long as the data it covers, then [period] |
We do not use your data for profiling or automated decisions, and we never sell or rent it.
What we don't collect
- No cookies, local storage or similar technologies.
- No analytics, advertising or tracking scripts.
- No third-party fonts or content delivery networks: every file comes from our own domain.
- The DPDP self-check runs entirely in your browser. Your answers are never sent to us unless you choose to add them to an enquiry.
- Our enquiry handler does not read or store your IP address or browser details.
Our hosting provider, [provider], may keep short-lived technical logs to protect the service from abuse. [Describe retention.]
Who receives it
- Resend, our email delivery provider, transmits the enquiry to our inbox. [Confirm processing location and the data processing agreement.]
- [Email provider], which hosts our inbox.
Each processor is bound by contract to protect the data and use it only on our instructions. Some providers may process data outside India; we transfer it only where the law allows. [List countries and safeguards, e.g. EU Standard Contractual Clauses.]
Your rights
Write to privacy@skytaals.com to:
- get a summary of the personal data we hold about you and how we use it;
- correct, complete, update or erase it;
- withdraw consent, for either purpose, at any time. Withdrawing is as easy as consenting, and doesn't affect anything done before;
- nominate someone to exercise your rights if you die or become incapacitated (DPDP S.14);
- if the GDPR applies to you, also object, restrict processing or ask for a portable copy.
We will confirm receipt and answer within [30] days.
Complaints
Write first to our grievance officer, [name], at privacy@skytaals.com. If you're not satisfied with our response, you can complain to the Data Protection Board of India. In the EU, you can complain to the supervisory authority where you live or work.
Language
You can ask for this notice in Hindi or another language in the Eighth Schedule to the Constitution of India by writing to privacy@skytaals.com. [Confirm languages available.]
Security
The site uses HTTPS everywhere and a strict content security policy. Enquiries go straight to our email provider and are not stored on the web server. To report a vulnerability, see our security.txt.
Children
This site is for organisations. We don't knowingly collect data from anyone under 18. If you think we have, tell us and we will erase it.
Changes
If we change this notice, we will update the version and date above. Each consent record notes the notice version that applied when you agreed.