Legal

Privacy Policy

Last updated: 25 October 2026 · Version 2026-10-25.1

In short. SkyMatch Group is an independent helicopter charter broker and concierge. We do not own or operate aircraft. We use the details you send to review and arrange your request. Licensed operators receive the trip details they need to check feasibility and quote; your name and contact details are passed to an operator only after the SkyMatch team approves that introduction. We treat customer, operator, request and project information, including documents you upload, as confidential: we do not publish it or use it to send you marketing, and access is limited to authorised SkyMatch personnel and the service providers who need it to provide the service you asked for, or where the law requires disclosure (section 5). We limit who can see your information, but no online service can promise absolute security or confidentiality.

1. Who we are

SkyMatch Group ("SkyMatch", "we", "us") runs skymatchgroup.com. We are a helicopter charter broker and concierge: you send us a flight or mission request, our team reviews it, and we request quotes from licensed operators. A licensed operator confirms the aircraft, availability, route, landing and price before anything is booked. For privacy questions or requests, email support@skymatchgroup.com.

Who is responsible for your data (the controller). The business that runs SkyMatch Group decides how the personal data described here is used and is the controller for it. Its registered company name, registration number and registered address are not yet published on this site; email support@skymatchgroup.com and we will give them to you. Licensed operators that quote or fly your trip are separate businesses: once you book, they use your data as controllers in their own right, under their own privacy policies. The service providers in section 6 process data on our behalf.

2. Information we collect

Flight and mission requests: name, email, phone or WhatsApp number, country, departure and destination, dates, passenger numbers, baggage and weight notes, service type, optional budget, preferred language and anything you write in free-text fields.
Files you upload: documents you attach to a request in your signed-in account, and files sent with an urgent request.
Conversations: messages you send through the website concierge chat, by email or on WhatsApp, and our replies. WhatsApp conversations with our team may be copied into our enquiry records through a messaging-integration service so the team sees one history per request.
Accounts: if you sign in (customers, operators or staff), your email address and account details; for operators, company and fleet information they provide.
Email updates: if you subscribe, your email, chosen topics, language and frequency, and the time and wording of the consent you gave.
Usage data: pages viewed, referring source and campaign tags, language, device and browser information, and approximate location derived from your IP address.

3. How we use it

To review your request, ask operators for quotes and follow up with you until it is resolved.
To reply to messages and send the service emails your request needs.
To send email updates only if you asked for them; every update has a link to change preferences or unsubscribe immediately.
To measure and improve the website and our advertising (only with your cookie consent), prevent abuse and meet legal obligations.

4. Why we may use it (legal bases)

Data protection law, such as the GDPR and UK GDPR, requires a legal basis for each use of personal data. The basis we rely on for each purpose:

Reviewing your request, asking operators to quote and following up: taking steps you asked for before a contract, and performing the contract if you book.
Copying WhatsApp and email conversations into one record per request, preventing abuse and keeping the service secure: our legitimate interest in running the service reliably. You can object at any time (see section 10).
Business, accounting and tax records: compliance with legal obligations.
Email updates, and analytics and advertising cookies: your consent, which you can withdraw at any time without affecting what happened before.

Where you send a request, the contact details and trip details are needed for us to handle it; without them we cannot prepare a proposal. Nothing on this site makes automated decisions about you that have legal or similarly significant effects.

5. Who sees your details, and confidentiality

Confidentiality. We treat customer, operator and supplier information, and request or project information, as confidential. That includes documents you upload and anything in a private project area, where we provide one. We do not publicly disclose this information, except listings an operator asks us to publish, such as empty-leg flights. We do not use it to send you marketing: email updates go only to people who subscribe, and the advertising measurement in section 6 runs only if you accept advertising cookies. Access is limited to authorised SkyMatch personnel and to the service providers who need it to provide the service you asked for, or where the law requires us to disclose it, for example to a court or public authority. In practice:

The SkyMatch team: enquiry records are stored in our database behind access rules that limit them to authorised SkyMatch staff accounts, and to you for requests made while signed in to your own account.
Licensed operators: we share the trip details needed to check feasibility and prepare a quote (for example route, date, passengers and baggage). Your name and contact details are released to an operator only after the SkyMatch team approves an introduction for that trip, and the approval can be withdrawn. Once you book, the operator handles your data under its own privacy policy and aviation obligations.
Files you upload: documents attached to a request in your signed-in account can be opened by authorised SkyMatch staff, by you, and by team members of an operator that SkyMatch has matched to that request, so leave contact details out of attachments unless you are happy for that operator to see them. Files sent with an urgent request can be opened only by authorised SkyMatch staff.
Service providers listed in section 6, only as needed to run the service.

6. Service providers we use

Website hosting, database and sign-in: Lovable Cloud.
Email: Google Workspace for our mailboxes (our team's inbox is read by our enquiry system so replies are linked to the right request) and Resend for sending service emails and updates.
Messaging: WhatsApp, and a messaging-integration service that copies team WhatsApp conversations into our enquiry records.
AI: the website concierge chat sends your chat messages to an AI model (through the Lovable AI gateway) to generate replies, so avoid sharing anything in the chat you do not want processed this way. Internal AI tools used by our team receive trip details, not your name, email or phone number.
Measurement and advertising (only if you accept them, see section 7): Google Analytics for analytics; Google Ads and an OpenAI measurement tag for advertising; Google Tag Manager only when you accept both. With advertising accepted, sending a request passes an encoded (hashed) copy of your email, phone, name and country to Google Ads so it can measure which ads lead to requests. Hashing is not anonymisation.

7. Cookies, consent and browser storage

On your first visit a cookie banner asks for your choice. Until you choose, and if you reject, no Google or OpenAI measurement tags load and no measurement events are queued to send later.

Always on (needed for the site to work): browser storage for sign-in sessions, your language, some form progress and your cookie choice itself.
Analytics (optional): Google Analytics, to count visits and see how pages are used.
Advertising (optional): Google Ads and an OpenAI measurement tag, to measure ad results, including the hashed contact details described in section 6.

"Accept all" and "Reject all" are equally easy, and "Choose" lets you pick analytics and advertising separately. Change or withdraw your choice at any time with (also in the footer of every page). If you withdraw consent after tags have loaded, the page reloads so they stop.

How long things last: your choice is kept in your browser until you change it in Cookie settings or clear your browser data (we ask again only if this notice changes); the last few choices are kept on your device as a record. Google sets its own cookie durations: by default Google Analytics cookies last up to 2 years and Google Ads cookies up to 90 days. Data in your quote requests and messages is kept as described in section 9. Each conversion logged in our own records notes the cookie choice in force at the time.

8. Security

What we do today:

The website is served only over HTTPS: plain http:// addresses redirect permanently to https://, and browsers are told to keep using HTTPS for skymatchgroup.com and its subdomains for a year (HSTS).
Uploaded files are kept in private storage that is not publicly accessible, with access rules limiting who can open them (section 5).
Enquiry and CRM records (requests, notes and timelines, messages, proposals and quotes, inbound emails, the WhatsApp inbox and compliance checks), and subscriber records, are protected by database access rules: visitors who are not signed in cannot read them, and only authorised staff accounts (or you, for your own signed-in requests) can.
Staff and CRM pages are kept out of search engines: they are blocked in robots.txt and marked noindex, nofollow.
Operators see your contact details only after an approved introduction, as described in section 5.
We keep regular database backups to help recover from failures.

No method of sending or storing information is completely secure, and we cannot guarantee that information will never be accessed without permission. Please do not send payment card numbers, passwords or identity documents through the request forms, chat or WhatsApp. If you think your information has been misused, contact us straight away at support@skymatchgroup.com.

9. How long we keep it

Requests, messages and related CRM notes: for as long as needed to handle the request and any booking, follow up, and keep business and accounting records, then for as long as the law requires or a dispute needs. We do not yet delete these automatically after a fixed period; you can ask us to delete them sooner (see section 10).
Email updates: until you unsubscribe, which takes effect immediately.
Your cookie choice: in your browser until you change it or clear your browser data.

10. Your rights

Under the GDPR and UK GDPR you can ask us to:

Access the personal data we hold about you and receive a copy.
Correct data that is wrong or incomplete.
Erase your data, where we no longer need it or have no other legal reason to keep it.
Restrict how we use it while a question about it is resolved.
Port data you gave us, in a common machine-readable format, where we use it based on your consent or a contract.
Object to uses based on our legitimate interests; you can always object to marketing emails.
Withdraw consent at any time: unsubscribe from email updates, or change your choice with the Cookie settings link in the footer.

Which rights apply depends on the legal basis and your circumstances. Send your request to support@skymatchgroup.com; we may ask you to confirm your identity first, and we will answer within the time the law sets (normally one month under the GDPR). You also have the right to complain to a data protection authority, in particular in the country where you live or work or where you think an infringement happened: see the list of EU and EEA authorities or, in the UK, the Information Commissioner's Office.

11. International transfers

Our service providers and the operators who quote your trip may process information in countries other than your own, including outside the UK and European Economic Area. We share only what each step needs. A transfer out of the EEA or UK needs a legal safeguard, such as a European Commission adequacy decision or standard contractual clauses (European Commission overview). Email support@skymatchgroup.com to ask which safeguard applies to a particular provider.

12. Changes

We may update this policy as the service changes. The date and version at the top of this page show the current revision.

13. Contact

Privacy questions, rights requests and security concerns: support@skymatchgroup.com. See also our Terms and Conditions of carriage.