GDPR Privacy Notice
Your rights under the EU and UK General Data Protection Regulation
Skydex (Pty) Ltd — Last updated: 13 November 2026
This notice applies to visitors to our website who are in the European Economic Area (EEA) or the United Kingdom. It explains the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR. Please read it together with our Privacy Policy and Cookie Policy.
1. Data controller
The controller responsible for your personal data is:
Skydex (Pty) Ltd
A company registered in South Africa
Email: info@skydex.co.za
2. Personal data we process, why, and our legal basis
| Personal data | Purpose | Legal basis under GDPR |
|---|---|---|
| Contact form details: your name, email address, contact number and message | To respond to your enquiry and follow up on it | Legitimate interests (Article 6(1)(f)) in replying to people who contact us. If your enquiry is about using our services, also steps taken at your request before entering into a contract (Article 6(1)(b)). |
| Google Analytics data: pages visited, time on site, how you found us, device and browser type, approximate location, and an online identifier stored in a cookie | To understand how visitors use our website and improve it | Consent (Article 6(1)(a)), given through our cookie banner. Analytics cookies are not set unless you accept them. |
You do not have to give us your personal data. However, if you don’t fill in the contact form, we cannot respond to your enquiry.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.
3. Who receives your personal data
We share personal data only with:
- Google (Google Ireland Limited and Google LLC), which provides Google Analytics and acts as our processor for analytics data
- Our website hosting and email service providers, who process contact form messages on our behalf
- Public authorities, but only where the law requires it
We do not sell your personal data.
4. International transfers
Skydex is based in South Africa, so personal data you send us is transferred to and processed in South Africa. Some of our service providers, including Google, may also process data in the United States and other countries.
- Transfers to South Africa: The European Commission has not issued an adequacy decision for South Africa. When you contact us, the transfer is necessary for us to respond to the enquiry you chose to send (Article 49(1)(b) and (c) GDPR). Your data is protected in South Africa by the Protection of Personal Information Act, 2013 (POPIA).
- Transfers by Google: Google relies on the EU–US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
5. How long we keep your personal data
- Contact form details: Only as long as we need them to deal with your enquiry and any follow-up. After that, we delete them, unless the law requires us to keep them longer or you become a client.
- Google Analytics data: No longer than 14 months, after which it is automatically deleted.
6. Your rights under GDPR
You have the right to:
- Access your personal data and get a copy of it (Article 15)
- Rectification: Have inaccurate or incomplete data corrected (Article 16)
- Erasure: Have your data deleted, in certain circumstances (Article 17)
- Restriction: Ask us to limit how we use your data, in certain circumstances (Article 18)
- Data portability: Receive your data in a structured, commonly used, machine-readable format, or have it sent to another controller (Article 20)
- Object to processing based on our legitimate interests (Article 21)
- Withdraw consent at any time, where we rely on consent. You can withdraw consent to analytics cookies through the “Cookie settings” link at the bottom of any page. Withdrawing consent does not affect processing that took place before you withdrew it.
To exercise any of these rights, email info@skydex.co.za. We may ask you to confirm your identity first. We will respond within one month of receiving your request. We can extend this by up to two further months for complex requests, and we will tell you if we do.
7. Right to complain
If you believe we have not handled your personal data properly, please contact us first so we can try to resolve it.
You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live, work or where the alleged breach took place. A list of EU supervisory authorities is available on the European Data Protection Board website. In the UK, the supervisory authority is the Information Commissioner’s Office (ICO).
8. Changes to this notice
We may update this notice from time to time. When we do, we will post the new version on this page and change the “Last updated” date at the top.
9. Contact us
Skydex (Pty) Ltd
Email: info@skydex.co.za