Privacy Policy for Skies No Limit

Last Updated: November 4, 2026

At Skies No Limit, we are committed to protecting your privacy and handling your personal information securely and responsibly. This Privacy Policy explains how we collect, use, disclose and protect your information. We follow the Australian Privacy Principles (APPs) in the Privacy Act 1988 (Cth) as a matter of good practice.

---

---

1. Types of Information We Collect

We collect and hold personal and business information that is necessary for providing our AI consultancy and automation services, including:

Identity and Contact Data: Name, company name, email address, phone number, city and website.

Technical Data: IP address, browser type, device information and pages visited, collected by the analytics and advertising tools on our websites (see Section 9).

Business Operational Data: Information about your trade business operations, including:

• Current workflow and administrative processes
• Client management and scheduling practices
• Pain points and efficiency challenges
• Team structure, revenue range and operational requirements
• Other business information you provide during our audit process

Project Data: Information regarding your automation requirements, implementation preferences, and ongoing consultancy needs.

Payment Data: If you buy a report or service, a confirmation of your payment and the email address you paid with. Your card details are handled by our payment processor; we do not see or store them.

Call Recordings: Recordings and transcripts of calls and meetings. We tell you at the start of each call, and you can ask us not to record.

Credential and Access Data: Login credentials, usernames, passwords, API keys, and platform access details collected through our secure credential portal (credentials.skiesnolimit.com.au) solely for the purpose of configuring and implementing automation systems on your behalf.

---

2. How We Collect Your Information

We collect personal information through:

Direct Interaction:

• Completing our audit questionnaires at audit.skiesnolimit.com.au and aiaudit.skiesnolimit.com.au
• Filling out contact forms or using the chat assistant on our website
• Email correspondence and phone conversations
• Discovery calls, consultations, and project meetings
• Submitting platform credentials via our secure credential portal at credentials.skiesnolimit.com.au for automation implementation purposes

Automated Technologies:

• Website analytics and advertising tags
• Form submission data
• Technical data collected when you access our online services

---

3. How We Process Your Audit Data

When you complete one of our audit questionnaires:

• Your responses are sent over an encrypted connection (HTTPS) and stored in our secure cloud database
• Your business answers are analysed by third-party AI services to produce your customised report. Your email address and phone number are not included
• These AI services operate under business terms that do not use your data to train their models by default. They may keep it for a limited time for safety and abuse monitoring, and some process it outside Australia
• Your report is delivered to you by email and by a private link. Please do not share the link with anyone you would not want to read your report
• Automated workflows pass your information between our systems so we can deliver your report and follow up with you

---

4. Purpose of Collection and Use

We use the information we collect to:

• Analyse your business operations and identify automation opportunities
• Generate customised workflow audit reports and recommendations
• Provide AI consultancy and automation implementation services tailored to your trade business
• Follow up with you about your audit, and communicate about project updates, support, and service delivery
• Process payments and issue invoices
• Maintain our customer relationship management system for ongoing support
• Improve our service offerings and user experience
• Send relevant updates and automation insights (where you have opted in)
• Comply with legal and regulatory obligations

---

5. Disclosure of Your Information

We share your information only with service providers who help us run our business, and only as much as they need:

• Cloud hosting, storage and website hosting
• Workflow automation platforms that pass data between our systems
• Customer relationship management and project tracking
• AI services used to analyse audits and write reports
• Email, payments, call recording, and website analytics and advertising (Google Analytics and Meta)

Other Disclosures:

• Professional advisers (lawyers, accountants, insurers) when necessary
• Law enforcement or regulatory bodies where required by Australian law
• Parties involved in business transfers or acquisitions (with your notification)

We take reasonable steps to make sure our service providers protect your information consistently with this Privacy Policy and the Australian Privacy Principles.

---

6. Data Storage and International Transfers

Some of our systems are hosted in Australia. Many of our service providers, including our AI services and the tools we use for automation, customer records, email, payments and form hosting, store or process information outside Australia, mainly in the United States and the European Union.

When information goes overseas, we take reasonable steps to make sure the provider handles it in a way that is consistent with the Australian Privacy Principles.

---

7. Data Security

We take reasonable steps to protect your information from misuse, loss and unauthorised access, including:

• Encrypted connections (HTTPS/TLS) across our websites and systems
• Access to client information limited to Skies No Limit
• Two-factor authentication on every platform that holds client information
• Private cloud storage with enterprise-grade security from our hosting providers
• Logins sent through our credential portal stored in encrypted secret storage, never in our CRM or email

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security, so please send us only what your project needs.

---

8. Data Retention

We keep your personal and business information only as long as we need it for the purposes in this policy:

• Audit Data and Reports: Kept while we may need them to provide your report, follow up with you or support you as a client, then deleted
• Client and Billing Records: Kept as long as tax and accounting laws require
• Marketing Communications Data: Kept until you unsubscribe or ask us to delete it
• Credential and Access Data: Logins and files sent through our credential portal are used only for your project and deleted automatically after a short period, or sooner if you ask

You may request deletion of your data at any time, subject to our legal obligations to retain certain records.

---

9. Cookies and Tracking Technologies

Our websites use:

• Essential Cookies: Required for secure form submission and website functionality
• Analytics Cookies: Google Analytics, to understand how visitors use our websites and forms and improve them
• Advertising Cookies: Our free audit form uses the Meta (Facebook) Pixel to measure visits and sign-ups that come from our Facebook and Instagram activity. This sets a cookie and shares page-visit data with Meta, which may use it under its own terms, including to personalise ads. It does not affect the AI audit analysis or your business data. You can opt out of Meta's ad personalisation directly at https://www.facebook.com/adpreferences.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect website functionality.

---

10. Your Privacy Rights

You have the right to:

Access: Request a copy of the personal and business information we hold about you, including:

• Your audit questionnaire responses
• Generated workflow reports
• Information stored in our CRM
• Any other personal data we've collected

Correction: Request that we correct any inaccurate, incomplete, or outdated information.

Deletion: Request deletion of your personal information (subject to business record retention requirements and legal obligations).

Opt-Out: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us directly.

Lodge a Complaint: Raise concerns about how we handle your personal information (see Section 14).

To exercise any of these rights, please contact our Privacy Officer using the details in Section 14. We will respond within 30 days.

---

11. Data Breach Notification

In the event of a data breach that is likely to result in serious harm to you, we will:

1. Notify affected individuals as soon as practicable
2. Notify the Office of the Australian Information Commissioner (OAIC) where required under the Notifiable Data Breaches (NDB) scheme
3. Provide information about the breach, the type of information involved, and steps you can take to mitigate potential harm
4. Take immediate action to secure our systems and prevent further unauthorised access

---

12. Other Important Information

Children's Privacy:

Our services are directed towards trade business owners and operators. We do not knowingly collect personal information from individuals under 18 years of age.

Third-Party Links:

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

AI and Machine Learning:

Our AI analysis tool uses large language models to process your audit responses and generate recommendations. Important clarifications:

• We use business-grade AI services that do not train their models on your data by default
• AI processing is used solely for generating your customised report
• Reports are generated by AI. They are guidance only and may contain mistakes, so check any recommendation before you act on it
• We do not use AI to make decisions that significantly affect your legal rights

Marketing Communications:

If you opt in to receive marketing communications, we may send you:

• Automation tips and insights for trade businesses
• Updates about our services
• Industry news and best practices
• Case studies and success stories

You can opt out at any time, and this will not affect our service delivery.

---

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations.

When we make changes:

• The "Last Updated" date at the top will be revised
• We may also let active clients know about significant changes by email

We encourage you to review this Privacy Policy periodically.

---

14. Contact Us and Complaints

Complaint Process:

If you have a complaint about how we have handled your personal information:

1. Contact us first: Email our Privacy Officer with details of your concern. We take all complaints seriously.
2. We will investigate: We will acknowledge your complaint within 5 business days and investigate the matter thoroughly.
3. We will respond: We aim to provide a written response within 30 days, outlining the outcome of our investigation and any steps we will take.
4. External review: If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
   • Website: www.oaic.gov.au
   • Phone: 1300 363 992
   • Email: enquiries@oaic.gov.au

---

By using our services, you acknowledge that you have read and understood this Privacy Policy.