BluSkyi Limited (“BluSkyi”, “we”, “us” or “our”) is committed to protecting your personal data and respecting your privacy. This policy explains what personal data we collect when you use bluskyi.com and our platform (the “Service”), how we use it, who we share it with, and the rights you have over it.
We are the controller responsible for your personal data.
Our details
- Company: BluSkyi Limited
- Registered office: First Floor, 736 High Road, North Finchley, London N12 9QD, United Kingdom
- Contact for privacy matters: hello@bluskyi.com
This policy is written primarily around the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Where the EU GDPR applies to you, we apply equivalent protections. We aim to handle the personal data of subscribers in other regions to a comparable standard.
1. The personal data we collect
We collect and process the following categories of personal data.
Account and registration data. Your name, email address, profession, the disciplines and research fields you select, and your professional body where you use our CPD features.
Authentication data. Login credentials and information needed to verify your identity and keep your account secure. Where you register or sign in using Google or LinkedIn, we receive limited profile information from those providers (typically your name and email address) as described in section 3.
Subscription and billing data. Your subscription plan, billing status, and transaction history. We do not currently collect payments. When subscription billing begins, payments will be handled by a third-party payment processor, and we will not store full payment card numbers on our systems.
CPD activity data. Records of the continuing professional development activity you log or that the Service tracks on your behalf, including time spent and the records generated for your professional body.
Platform usage data. Information about how you interact with the Service, such as the briefings and articles you view, your engagement and preferences, and technical data such as your device type, browser, and IP address.
Marketing and communications data. Your contact details and preferences where you have asked to receive updates from us, and any correspondence you send to us.
We do not intentionally collect special category data (such as health, racial or ethnic origin, or political opinions). Please do not send us such information unless we specifically request it.
2. How we use your personal data and our lawful bases
We only use your personal data where the law allows us to. The table below sets out how we use it and the lawful basis we rely on.
| Purpose | Lawful basis |
|---|---|
| Creating and managing your account, and providing the Service | Performance of our contract with you |
| Authenticating you and keeping your account and our platform secure | Performance of our contract; our legitimate interests in protecting the Service |
| Generating and maintaining your CPD records | Performance of our contract with you |
| Processing subscriptions and payments (once billing is live) | Performance of our contract; compliance with legal obligations |
| Personalising the briefings and content you see | Our legitimate interests in providing a relevant, useful Service |
| Understanding how the Service is used so we can improve it | Our legitimate interests in developing and improving the Service |
| Sending you marketing or product updates | Your consent, or our legitimate interests where permitted for existing subscribers |
| Meeting our legal and regulatory obligations | Compliance with legal obligations |
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights and have concluded they are not. You can ask us for more detail on this assessment.
3. How we collect your personal data
We collect personal data in three ways.
Directly from you when you register, set up your profile, log CPD activity, contact us, or otherwise use the Service.
From third-party sign-in providers. If you choose to register or log in using Google or LinkedIn, that provider shares limited profile information with us so we can create or access your account. The information we receive is governed by your settings with that provider. We recommend reviewing the privacy policies of Google and LinkedIn to understand how they handle your data.
Automatically as you use the Service, through cookies and similar technologies and through server logs that record technical and usage data.
4. Cookies and similar technologies
We use cookies and similar technologies to operate the Service. Essential cookies are required to log you in, keep your session active, and maintain security; these cannot be switched off without affecting how the Service works.
Where the law requires your consent for non-essential cookies, we will ask for it before setting them. You can control cookies through your browser settings, though disabling some may affect the Service.
5. Who we share your personal data with
We do not sell your personal data. We share it only with the following categories of recipient, and only as needed.
Service providers (processors) who process personal data on our behalf under contract and on our instructions. Our current providers include:
- Hostinger – website and platform hosting and infrastructure, sending system emails.
- Google – email infrastructure for our correspondence, and the Google sign-in option where you choose to use it.
- LinkedIn – the LinkedIn sign-in option where you choose to use it.
When we appoint a payment processor for subscription billing, we will add it here and update this policy.
We may also disclose personal data to professional advisers, regulators, or law enforcement where we are legally required to do so, or to protect our rights, and to a buyer or successor in the event of a sale or reorganisation of our business.
This list of providers may change as the Service develops. We will keep this policy updated to reflect the providers we use.
6. International transfers
Some of our providers may process personal data outside the United Kingdom and the European Economic Area. Where they do, we take steps to ensure your data receives an equivalent level of protection, for example by relying on a UK or EU adequacy decision, the UK International Data Transfer Agreement, or the EU Standard Contractual Clauses with appropriate safeguards.
7. How long we keep your personal data
We keep your personal data only for as long as we need it for the purposes set out in this policy.
- Account and profile data: for as long as your account is active, and for a reasonable period afterwards in case you return.
- CPD records: for as long as your account is active and for a period afterwards, recognising that you may need them for professional body audits.
- Billing and transaction records: for as long as required to meet our legal and tax obligations (in the UK, typically six years).
- Marketing data: until you withdraw consent or object.
When we no longer need your personal data, we securely delete or anonymise it.
8. How we keep your personal data secure
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your data and to respond appropriately to any incident.
9. Personalisation
We personalise the briefings and content you see based on your profession, the disciplines you select, and how you use the Service. This helps us show you research that is relevant to you. This personalisation does not produce legal or similarly significant effects on you.
10. Children
The Service is intended for professionals and is not directed at children. We do not knowingly collect personal data from anyone under the age of 16. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Your rights
Under UK and EU data protection law you have the following rights, which you can exercise free of charge in most cases:
- Access – to ask for a copy of the personal data we hold about you.
- Rectification – to ask us to correct inaccurate or incomplete data.
- Erasure – to ask us to delete your data in certain circumstances.
- Restriction – to ask us to limit how we use your data in certain circumstances.
- Objection – to object to processing based on our legitimate interests, and to object to direct marketing at any time.
- Portability – to receive certain data in a portable format, or have it sent to another controller.
- Withdraw consent – where we rely on your consent, you can withdraw it at any time without affecting earlier processing.
To exercise any of these rights, contact us at hello@bluskyi.com. We will respond within the time required by law, normally within one month.
12. Complaints
If you have a concern about how we handle your personal data, please contact us first at hello@bluskyi.com so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to your local supervisory authority if you are in the EU.
13. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you. Please review it periodically.
14. Contact us
For any questions about this policy or your personal data, contact us at:
BluSkyi LimitedFirst Floor, 736 High Road, North Finchley, London N12 9QD, United Kingdom
hello@bluskyi.com