Privacy policy

Last updated: [DD Month 2026]

This Privacy Policy explains how [Legal company name] ("SkyBill", "we", "us" or "our") collects, uses and protects personal information when you visit skybill.eu (the "Website"), contact us, request a demo or otherwise interact with us online.

This policy applies to visitors from the European Union, the European Economic Area, the United Kingdom, the United States and other countries. Where local law gives you additional rights, we explain them below.

1. Who we are

The data controller responsible for your personal information is:

[Legal company name]
Registration number: [number]
Registered address: [street, city, postal code, country]
Email: [privacy@skybill.eu]
Phone: [+371 ...]

If you have any questions about this policy or how we handle your data, please contact us using the details above.

2. Scope of this policy

This policy covers personal information collected through the Website and our related marketing and sales communications.

It does not cover:

The SkyBill client portal and login area (skybill.info), which is covered by separate terms and agreements.
Personal data that we process on behalf of our clients (for example, end customer billing data) as part of delivering the SkyBill software. In those cases, our client is the controller and we act as a processor under a data processing agreement.

3. Information we collect

Information you give us directly

Contact details, such as your name, email address, phone number, company name and job title, when you fill in a contact form, book a demo or email us.
The content of your messages and any information you choose to share with us.
Your preferences, if you subscribe to updates or newsletters.

Information collected automatically

When you visit the Website, we and our service providers may automatically collect:

Device and browser information, such as IP address, browser type, operating system and language settings.
Usage information, such as pages visited, time spent on pages, links clicked and the website that referred you.
Approximate location derived from your IP address (country or city level).

This information is collected through cookies and similar technologies. See section 7 for details.

We do not intentionally collect sensitive personal information (such as health data, precise geolocation or government identification numbers) through the Website.

4. How we use your information and our legal bases

We use personal information for the following purposes. For visitors in the EU, EEA and UK, we also list the legal basis we rely on under the GDPR.

PurposeLegal basis (GDPR)

Responding to your enquiries and demo requestsSteps prior to entering into a contract, or our legitimate interest in replying to business enquiries

Communicating with you about our products and servicesYour consent, or our legitimate interest in B2B marketing where permitted by law

Operating, maintaining and securing the WebsiteOur legitimate interest in running a secure and functional website

Analysing Website usage and improving our contentYour consent (for non-essential cookies)

Measuring the effectiveness of our advertisingYour consent

Complying with legal obligations and enforcing our rightsLegal obligation, or our legitimate interest in protecting our business

You can withdraw your consent at any time. Withdrawing consent does not affect processing carried out before the withdrawal.

We do not use your personal information for automated decision-making that produces legal or similarly significant effects on you.

5. How we share your information

We do not sell your personal information for money. We share personal information only with:

Service providers who help us run our business and the Website, such as website hosting (Wix.com), analytics providers (for example Google Analytics), email and communication tools, and customer relationship management software (for example Microsoft). These providers may only use your data to perform services for us.
Professional advisers, such as lawyers, auditors and accountants, where necessary.
Authorities, where required by law or to protect our rights, property or safety.
A buyer or successor, if we are involved in a merger, acquisition or sale of assets. You will be informed of any such change.

6. International data transfers

Some of our service providers are located outside the EU/EEA or the UK, including in the United States. When we transfer personal data outside the EU/EEA or the UK, we ensure appropriate safeguards are in place, such as:

An adequacy decision by the European Commission or the UK government, including the EU-U.S. Data Privacy Framework and its UK extension, where the recipient is certified.
Standard Contractual Clauses approved by the European Commission, and the UK International Data Transfer Addendum where applicable.

You can request more information about these safeguards by contacting us.

7. Cookies and similar technologies

We use cookies and similar technologies on the Website. They fall into these categories:

Strictly necessary cookies: required for the Website to work, for security and to remember your cookie preferences. These do not require consent.
Analytics cookies: help us understand how visitors use the Website so we can improve it.
Functional cookies: remember choices you make to improve your experience.
Advertising cookies: help us measure and improve our advertising campaigns.

For visitors in the EU, EEA and UK, we only place non-essential cookies after you give consent through our cookie banner. For visitors in the United States, you can opt out of non-essential cookies at any time.

You can change your cookie preferences at any time using the "Cookie Settings" link in the Website footer. You can also block or delete cookies through your browser settings, although some parts of the Website may not work properly as a result.

8. How long we keep your information

We keep personal information only for as long as needed for the purposes described in this policy, unless a longer period is required by law. In general:

Enquiries and demo requests: up to [24] months after our last contact with you, unless you become a client.
Marketing contacts: until you unsubscribe or withdraw consent.
Analytics data: up to [14] months.
Client and contract related information: for the period required by applicable accounting and tax laws.

When information is no longer needed, we delete or anonymise it securely.

9. How we protect your information

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse or alteration. These include encrypted connections (HTTPS), access controls and working with providers that meet recognised security standards. SkyBill holds ISO 9001 and ISO/IEC 27001 certifications.

No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Your rights in the EU, EEA and UK

If you are in the EU, EEA or UK, you have the right to:

Access the personal data we hold about you.
Correct inaccurate or incomplete data.
Request deletion of your data.
Restrict how we process your data.
Object to processing based on legitimate interests, including direct marketing.
Receive your data in a portable format.
Withdraw consent at any time, where processing is based on consent.

You also have the right to lodge a complaint with a data protection authority. In Latvia, this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv). In the UK, this is the Information Commissioner's Office (www.ico.org.uk). You may also contact the authority in the country where you live or work.

11. Your rights in the United States

Depending on the state where you live (including California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws), you may have the right to:

Know what personal information we collect, use and disclose, and request a copy of it.
Correct inaccurate personal information.
Delete personal information we have collected from you.
Opt out of the "sale" or "sharing" of personal information, and of processing for targeted advertising.
Limit the use of sensitive personal information (we do not collect sensitive personal information through the Website).
Not be discriminated against for exercising your privacy rights.

Notice at collection for California residents

In the past 12 months, we have collected the following categories of personal information:

Identifiers (such as name, email address, phone number, IP address).
Professional or employment related information (such as company name and job title).
Internet or network activity (such as browsing and interaction with the Website).
Approximate geolocation data.

We collect this information for the purposes described in section 4 and keep it for the periods described in section 8. We disclose these categories to the service providers listed in section 5 for business purposes.

Sale and sharing of personal information

We do not sell personal information for money. Some advertising and analytics cookies may be considered "sharing" for cross-context behavioural advertising or "sale" under certain US state laws. You can opt out at any time by using the "Do Not Sell or Share My Personal Information" option in our cookie settings.

We honour Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid request to opt out of the sale or sharing of your personal information for that browser.

We do not knowingly sell or share personal information of consumers under 16 years of age.

How to exercise your rights

To make a request, email us at [privacy@skybill.eu]. We will need to verify your identity before responding, usually by matching information you provide with the information we hold. You may use an authorised agent to submit a request on your behalf, but we may ask for proof of authorisation.

We will respond within the time required by applicable law (generally 45 days in the United States). If we deny your request, you may appeal by replying to our decision with "Appeal" in the subject line. If your appeal is denied, you may contact the attorney general of your state.

12. Children's privacy

The Website is intended for business users and is not directed at children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

13. Links to other websites

The Website may contain links to third party websites, such as social media platforms or partner sites. We are not responsible for the privacy practices of those websites, and we recommend reading their privacy policies.

14. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date at the top. If we make significant changes, we will take reasonable steps to inform you.

15. Contact us

For any questions or requests relating to this Privacy Policy or your personal data, please contact:

[Legal company name]
[Registered address]
Email: [privacy@skybill.eu]
Phone: [+371 ...]