Privacy Policy for Skies No Limit

Last Updated: February 19, 2026

At Skies No Limit, we are committed to protecting your privacy and ensuring that your personal information is handled in a secure and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information in accordance with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

---

---

1. Types of Information We Collect

We collect and hold personal and business information that is necessary for providing our AI consultancy and automation services, including:

Identity and Contact Data: Name, company name, email address, phone number, and mailing address.

Technical Data: IP address, browser type, device information, and time zone setting when you visit our website or complete our audit questionnaire.

Business Operational Data: Information about your trade business operations, including:

• Current workflow and administrative processes
• Client management and scheduling practices
• Pain points and efficiency challenges
• Team structure and operational requirements
• Other business information you provide during our audit process

Project Data: Information regarding your automation requirements, implementation preferences, and ongoing consultancy needs.

Credential and Access Data: Login credentials, usernames, passwords, API keys, and platform access details collected through our secure credential portal (credentials.skiesnolimit.com.au) solely for the purpose of configuring and implementing automation systems on your behalf.

---

2. How We Collect Your Information

We collect personal information through:

Direct Interaction:

• Completing our workflow audit questionnaire at audit.skiesnolimit.com.au
• Filling out contact forms on our website
• Email correspondence and phone conversations
• Discovery calls, consultations, and project meetings
• Submitting platform credentials via our secure credential portal at credentials.skiesnolimit.com.au for automation implementation purposes

Automated Technologies:

• Website analytics and server logs
• Form submission data
• Technical data collected when you access our online services

---

3. How We Process Your Audit Data

When you complete our workflow audit questionnaire:

1. Your responses are securely transmitted via encrypted connection (HTTPS) and stored on Google Cloud Platform's Australian infrastructure (Sydney region)
2. Your business information is processed through our proprietary AI analysis system to generate your customised workflow optimisation report
3. AI processing uses third-party language model APIs to analyse your data and generate recommendations. Important: Your business data is not used to train these AI models - we use them solely for analysis purposes
4. Generated reports are securely stored on Google Cloud Australia and are accessible only to you and authorised Skies No Limit personnel
5. Throughout this process, automated workflows connect our systems while maintaining data security and confidentiality

---

4. Purpose of Collection and Use

We use the information we collect to:

• Analyse your business operations and identify automation opportunities
• Generate customised workflow audit reports and recommendations
• Provide AI consultancy and automation implementation services tailored to your trade business
• Communicate with you regarding project updates, support, and service delivery
• Maintain our customer relationship management system for ongoing support
• Improve our service offerings and user experience
• Send relevant updates and automation insights (where you have opted in)
• Comply with legal and regulatory obligations

---

5. Disclosure of Your Information

We may share your information only with trusted service providers who assist in our operations:

Infrastructure and Hosting Providers:

• Google Cloud Platform (Australia/Sydney region): Primary data storage, audit tool hosting, and report storage—ensuring your data remains within Australian jurisdiction
• Cloud delivery networks and website hosting services (Australian and international providers)
• Email service providers

Automation and Business Tools:

• Workflow automation platforms that route data between systems (data is processed but not permanently stored by these platforms)
• Customer relationship management and project tracking systems

AI Analysis Services:

• Third-party AI API providers for report generation. Important: Your data is processed for analysis purposes only and is not used for model training or retained by these providers beyond the analysis request

Other Disclosures:

• Professional advisers (lawyers, accountants, insurers) when necessary
• Law enforcement or regulatory bodies where required by Australian law
• Parties involved in business transfers or acquisitions (with your notification)

All service providers are contractually obligated to maintain data security and confidentiality consistent with this Privacy Policy. Where providers are based internationally, we ensure they comply with privacy standards substantially similar to Australian Privacy Principles or are covered by appropriate data processing agreements and security measures.

---

6. Data Storage and International Transfers

Australian Data Residency:

We prioritise data sovereignty by hosting our primary systems on Google Cloud Platform's Australian infrastructure (australia-southeast1/Sydney region). This means your audit data, business information, and generated reports remain within Australia's jurisdiction, subject to Australian privacy laws.

International Service Providers:

Some of our operational tools are provided by companies with servers located outside Australia, including providers based in the United States, European Union, and global content delivery networks. These tools handle various aspects of our business operations including workflow automation, customer relationship management, email services, and form hosting.

We ensure all international providers either:

• Comply with privacy standards substantially similar to Australian Privacy Principles, or
• Are covered by appropriate data processing agreements, security measures, and contractual protections

For AI processing, while API requests may be processed on international servers, your data is used only for analysis and is not retained by these providers for training or other purposes.

---

7. Data Security

We take the security of your business information seriously and implement comprehensive technical and organisational measures:

Access Controls:

• Two-factor authentication (2FA) enabled on all platforms handling client data
• Role-based access controls limiting data access to essential personnel only
• Secure password policies across all systems

Technical Security:

• Encrypted data transmission (HTTPS/TLS) across all systems and websites
• Google Cloud Platform's enterprise-grade security infrastructure
• Encrypted storage of reports and sensitive business information
• Regular security monitoring and updates

Process Security:

• Regular security audits of our automation workflows
• Documented data handling procedures
• Incident response protocols
• Secure backup procedures

Physical Security:

• Cloud infrastructure with certified data centre security (Google Cloud Platform)

Despite our security measures, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

---

8. Data Retention

We retain your personal and business information only as long as necessary to fulfil the purposes outlined in this policy:

• Audit Questionnaire Data: Retained for 3 years after report generation, unless you request earlier deletion
• Generated Reports: Retained for 5 years for business records and to support ongoing client relationships
• CRM Data: Retained while you remain a client and for 2 years after final engagement
• Marketing Communications Data: Retained until you unsubscribe or request deletion
• Technical/Server Logs: Retained for 90 days for security and troubleshooting purposes
• Email Correspondence: Retained in accordance with business record-keeping requirements (typically 5-7 years)
• Credential and Access Data: Deleted immediately upon completion of your automation implementation, or upon written request. Credentials are never retained beyond project completion.

Longer retention periods may apply where required by law (e.g., tax and accounting regulations).

You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

---

9. Cookies and Tracking Technologies

Our websites use:

• Essential Cookies: Required for secure form submission, website functionality, and user authentication
• Analytics Cookies: To understand how visitors use our site and improve user experience (if implemented)
• No Advertising Cookies: We do not use third-party advertising or marketing tracking cookies

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect website functionality.

---

10. Your Privacy Rights

Under the Australian Privacy Principles, you have the right to:

Access: Request a copy of the personal and business information we hold about you, including:

• Your audit questionnaire responses
• Generated workflow reports
• Information stored in our CRM
• Any other personal data we've collected

Correction: Request that we correct any inaccurate, incomplete, or outdated information.

Deletion: Request deletion of your personal information (subject to business record retention requirements and legal obligations).

Restrict Processing: Object to certain types of data processing, such as marketing communications.

Data Portability: Request your data in a commonly used, machine-readable format.

Opt-Out: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us directly.

Lodge a Complaint: Raise concerns about how we handle your personal information (see Section 14).

To exercise any of these rights, please contact our Privacy Officer using the details in Section 14.

---

11. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to you, we will:

1. Notify affected individuals as soon as practicable
2. Notify the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches (NDB) scheme
3. Provide information about the breach, the type of information involved, and steps you can take to mitigate potential harm
4. Take immediate action to secure our systems and prevent further unauthorised access

---

12. Other Important Information

Children's Privacy:

Our services are directed towards trade business owners and operators. We do not knowingly collect personal information from individuals under 18 years of age.

Third-Party Links:

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

AI and Machine Learning:

Our AI analysis tool uses large language models to process your audit responses and generate recommendations. Important clarifications:

• Your business data is NOT used to train AI models
• AI processing is used solely for generating your customised report
• No business-sensitive information is retained by AI providers beyond the analysis request
• All AI-generated reports are reviewed by our team for accuracy and relevance before delivery

Marketing Communications:

If you opt in to receive marketing communications, we may send you:

• Automation tips and insights for trade businesses
• Updates about our services
• Industry news and best practices
• Case studies and success stories

You can opt out at any time, and this will not affect our service delivery.

---

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make changes:

• The "Last Updated" date at the top will be revised
• Significant changes will be communicated via email to active clients
• Continued use of our services after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

---

14. Contact Us and Complaints

Complaint Process:

If you have a complaint about how we have handled your personal information:

1. Contact us first: Email our Privacy Officer with details of your concern. We take all complaints seriously.
2. We will investigate: We will acknowledge your complaint within 5 business days and investigate the matter thoroughly.
3. We will respond: We aim to provide a written response within 30 days, outlining the outcome of our investigation and any steps we will take.
4. External review: If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
   • Website: www.oaic.gov.au
   • Phone: 1300 363 992
   • Email: enquiries@oaic.gov.au

---

By using our services, you acknowledge that you have read and understood this Privacy Policy.