Privacy Statement

Data processing

The data controller within the meaning of Article 4(7) EU GDPR and UK GDPR is: SKYLAB TRADING LTD, r/n 09816915, Holborn Circus, 20 St. Andrew Street, EC4A 3AG, London, United Kingdom, info@skylaboratory.co.uk (hereinafter referred to as we, SKYLAB), processes personal data collected from you at the time when you visit and use the services of websites (hereinafter referred to as WEBSITE) owned and operated by SKYLAB.

Personal data in this regard shall mean any information relating to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that individual. 

Processing shall mean any operation that is performed on personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

SKYLAB collects and processes personal data provided by you solely and independently for the purpose of feedback to you in the event of you did email us with a question. For these purposes, the collected personal data are your name and email address. The legal basis for this processing activity is Article 6 (1) 1 lit. c EU GDPR and UK GDPR.

Automatic data collection

When you visit our website, we automatically gather and store “functional” cookies. These cookies cannot be switched off, do not store any personally identifiable information and are used only to assist us in providing an effective service. The legal basis for this processing activity is Article 6 (1) 1 lit. b EU GDPR and UK GDPR.

When you first visit our website, you are asked to provide consent for the use of non-essential cookies via a cookie banner. They are performance cookies - to provide enhanced functionality and usability for users, and analytical cookies - to create a profile of your interests and show you relevant ads. You may withdraw or change your consent at any time via the cookie settings available on the website.

Our website is hosted on the Shopify platform provided by Shopify International Ltd., Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, Ireland. Shopify uses cookies that are necessary for the operation, security and performance of the website. Shopify may also set analytical or marketing cookies.

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyze how users use the website. The information generated by these cookies about your use of the website may include: IP address (shortened/anonymized), device and browser information,visited pages, referrer URLs, interaction data.

Processing is carried out only with your prior consent pursuant to Article 6(1)(a) EU GDPR and UK GDPR and Section 25(1) TTDSG / ePrivacy Directive.

Recipient of your personal data

We may engage third parties who assist us in providing our products, customer support services, and content delivery. The legal basis for this data transfer and processing activity is Art. 28 GDPR in conjunction with the data processing agreements we concluded with respective third-party companies. Therefore, our contractors will only use your personal data to the extent necessary to perform their functions and will be contractually bound to process your personal data only on our behalf and in compliance with our requests.

We may disclose your personal data if legally entitled or required to do so (for example if required by law or by court order). The legal basis for this processing is Art. 6 (1) 1 lit. C GDPR.  

International data transfer

Within the scope of our information sharing activities set out above, your personal data may be transferred to other countries (including countries outside the European Union) which may have different data protection standards than your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavor to take reasonable measures to keep up an adequate level of data protection also when sharing your personal data with such countries.

In the case of a transfer outside of the European Union or the United Kingdom, this transfer is safeguarded by the EU Standard Contractual Clauses and/or the UK International Data Transfer Addendum (IDTA), as applicable.

Data retention

We strive to keep our processing activities with respect to your personal data as limited as possible for fulfilling declared purposes of such processing.

In case of contacting us with a question or request, your personal contact data is stored whilst this correspondence is in progress and for six months after that.

Security

We implement appropriate technical and organizational measures in accordance with Article 32 EU GDPR and UK GDPR to ensure a level of security appropriate to the risk.

Data subject rights

You may be entitled to exercise some or all of the following rights free of charge: 

a. require (i) information whether your personal data is retained and (ii) access to and/or (iii) duplicates of your personal data retained, including the purposes of the processing, the categories of data concerned, and the recipients or categories of recipients to whom the data are disclosed and where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; 

b. request proper rectification, removal or restriction of your personal data, e.g. because (i) of the incomplete or inaccurate nature of the personal data, (ii) it is no longer needed for the purposes for which it was collected, (iii) the consent on which the processing was based has been withdrawn, or (iv) you have taken advantage of an existing right to object to the data processing; in case your personal data is processed by third parties, we will forward your request for rectification, removal or restriction also to such third parties unless this proves impossible or involves disproportionate effort; 

c. receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and to transmit those data to another controller without hindrance from our side; where technically feasible you shall have the right to have the personal data transmitted directly from us to another controller, 

d. refuse to provide and – without impact to data processing activities that have taken place before such withdrawal – withdraw your consent to processing of your personal data at any time;

e. object at any time that your personal data will be used for direct marketing purposes, or – based on grounds relating to your particular situation, that your personal data shall be subject to data processing for other purposes; 

f. not to be subject to any automatic individual decisions (automatic decisions based on data processing by automatic means, for the purpose of assessing several personal aspects) which produce legal effects on you or similarly significantly affect you; 

g. take legal actions in relation to any breach of your rights regarding the processing of your personal data, as well as to lodge complaints before the competent data protection regulators.

If you are in the United Kingdom, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (https://ico.org.uk).

For all data protection inquiries, including exercise of data subject rights, you may contact us at: privacy@spaltglobal.com.

We will respond to your request without undue delay and in any event within one month of receipt, in accordance with Article 12(3) EU GDPR and UK GDPR.

Revision of the Privacy Statement

SKYLAB may change or update the privacy statement without prior notice. All such changes will go into effect once they have been posted on the WEBSITE. It is your responsibility to monitor such updates. The privacy statement was last updated on April 14, 2026.