Privacy Policy

This Privacy Policy explains how Skybloom Co., Ltd. (referred to here as "Skybloom", "we", "us", or "our") collects, uses, and protects your personal data when you visit our website at projectskybloom.com or interact with us in other ways.

We respect your privacy. We collect only what we need, we never sell your data, and we honour your rights under applicable data protection law — including the EU General Data Protection Regulation (GDPR).

01. Who we are

Skybloom Co., Ltd. is a company registered in Thailand and headquartered in Bangkok. We are the data controller for any personal information collected through this website.

For all privacy-related questions or requests, contact us at projectskybloom@gmail.com.

02. What information we collect

Newsletter signup

When you subscribe to our newsletter ("The Library"), we collect:

• Your email address
• The date and time of your subscription
• The IP address of the device used (collected automatically by our newsletter platform)

Contact form

When you contact us through our website, we collect the information you provide — typically your name, email address, and the contents of your message.

What we do not collect

• We do not use Google Analytics or similar visitor tracking on this website.
• We do not place advertising or marketing cookies.
• We do not collect financial information through this site.

03. How we use your information

We use your personal data only for the purposes for which you provided it:

• Newsletter: to send you new chapters from The Library, milestones, and occasional company updates after you submit your email through our subscription form.
• Contact form: to respond to your inquiry.
• Legal obligations: where required by law, regulation, or legal process.

04. Lawful basis

Under GDPR, we rely on the following lawful bases:

• Consent — for newsletter subscriptions. By submitting your email through our subscription form, you actively consent to receive newsletter emails from us. You may withdraw your consent at any time by clicking the unsubscribe link included in every email we send.
• Legitimate interest — for responding to inquiries you initiate.

05. Service providers we use

We use a small number of trusted third-party services to operate this site. These services may process limited personal data on our behalf:

• Substack — operates our newsletter ("The Library"). When you subscribe, your email address is stored in Substack's systems. Substack acts as a data processor on our behalf. See substack.com/privacy.
• Netlify — hosts our website. Netlify processes basic technical request information (such as IP addresses) to deliver the site to your browser. See netlify.com/privacy.

06. International data transfers

Substack and Netlify are based in the United States. When you subscribe or visit our site, your data may be transferred to and stored on servers in the US. These transfers are protected by appropriate safeguards under GDPR — including Standard Contractual Clauses adopted by the European Commission.

07. How long we keep your data

• Newsletter subscribers: we retain your email address until you unsubscribe.
• Contact inquiries: we retain correspondence for up to 24 months unless a longer period is needed to fulfil a legal obligation or address an ongoing matter.

08. Your rights

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar protections, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your personal data
• Restriction — ask us to limit how we use your data
• Portability — request your data in a portable format
• Objection — object to certain processing
• Withdraw consent — at any time, by clicking the unsubscribe link in any email we send, or by contacting us
• Lodge a complaint — with your local data protection authority

To exercise any of these rights, email projectskybloom@gmail.com. We respond to all valid requests within 30 days.

09. Cookies

This website uses only the technical cookies necessary to deliver the site to your browser. We do not use advertising, analytics, or tracking cookies.

Substack may set its own cookies if you visit a Substack-hosted page directly. Their cookie practices are described in Substack's privacy policy.

10. Children

This website is not directed at anyone under the age of 21, and we do not knowingly collect personal data from anyone under 21. If you believe someone under that age has provided us with personal information, please contact us so we can delete it.

11. Security

We take reasonable technical and organisational measures to protect your data. However, no method of transmission over the internet is fully secure. By using our site, you accept this inherent risk.

12. Changes to this policy

We may update this Privacy Policy from time to time. The most recent version will always be available at this URL, and the "Last updated" date at the top of this page reflects the date of the most recent change. Material changes will be communicated via email to active newsletter subscribers.

13. Contact us

For questions about this Privacy Policy or how we handle your data: