Privacy Policy

1. Who we are

SKIFI GROUP LLC (“we”, “us”, “our”) operates the website https://skifidesigns.com under the brand SkiFi Designs. We are a single-member limited liability company formed in Wyoming, USA with operations based in Kerala, India. This Privacy Policy explains what personal information we collect from visitors and clients, how we use it, and the rights you have over it.

2. Information we collect

We collect the following categories of information:

• Contact details you provide - name, email, company name, phone (optional).
• Project details you submit through our onboarding form (project type, timeline, description, slide count).
• Payment information processed by Stripe, our payment provider. We do not store full card numbers on our servers - Stripe handles tokenisation and PCI compliance.
• Authentication data when you sign in with Google to access our Resources area (name, email address, profile picture, Google account ID).
• Usage analytics - pages visited, device/browser type, approximate location (country/region only), referrer URL. Collected via PostHog.
• Communications - emails, WhatsApp messages and meeting notes you send us.

3. How we use your information

• To deliver the services you've ordered (design work, templates, consultations).
• To process payments and issue invoices/receipts.
• To send transactional emails (order confirmations, project updates, delivery files) via Resend.
• To respond to enquiries and provide customer support.
• To improve our website, services and marketing - based on aggregated analytics.
• To comply with legal obligations (tax, accounting, fraud prevention).

We do not sell your personal information to third parties. Ever.

4. Legal bases (GDPR / UK-GDPR)

If you are located in the EEA, UK, or Switzerland, we rely on the following legal bases under Article 6 GDPR:

• Contractual necessity - to deliver paid services you've ordered.
• Legitimate interests - to operate the website, improve our offerings, and contact past clients about related services.
• Consent - for non-essential cookies and marketing communications (you can withdraw consent at any time).
• Legal obligation - for tax, accounting, and fraud-prevention records.

5. Third-party processors

We share data with the following carefully-vetted service providers solely to deliver our services:

• Stripe - payment processing (USA / EU).
• Resend - transactional email delivery (USA).
• Google LLC - single sign-on for the Resources area (USA).
• MongoDB Atlas - database hosting (region depends on deployment).
• Cal.com - meeting scheduling.
• PostHog - product analytics.
• Cloudflare - content delivery and DDoS protection.

6. International data transfers

Because we operate from India and use US-based providers, your data may be transferred to and processed in the United States, India, the EU, or other jurisdictions. Where required, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards.

7. Data retention

• Project files and order records: 7 years (for tax/accounting compliance).
• Marketing contacts: until you unsubscribe.
• Analytics data: typically 12 months in aggregated form.
• Failed / abandoned checkout sessions: 90 days.

8. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Object to processing or restrict it.
• Data portability - receive your data in a portable format.
• Withdraw consent at any time, without affecting the lawfulness of past processing.
• Lodge a complaint with your local data protection authority.

To exercise any right, email us at contact@skifidesigns.com. We respond within 30 days.

9. California residents (CCPA / CPRA)

California residents have additional rights to know, delete, correct, and limit use of sensitive personal information. We do not sell or “share” your personal information as defined under the CCPA/CPRA. To submit a request, email us with “California Privacy Request” in the subject line.

10. Children's privacy

Our services are not directed to individuals under 16, and we do not knowingly collect data from children.

11. Security

We protect your data with industry-standard safeguards including HTTPS/TLS encryption in transit, access controls, and least-privilege principles. No system is 100% secure - if you believe your account or data has been compromised, please contact us immediately.

12. Changes to this policy

We may update this Privacy Policy. Material changes will be notified via email or a prominent notice on the website. Continued use after changes constitutes acceptance.

13. Contact

For privacy questions, requests, or complaints, email contact@skifidesigns.com with the subject "Privacy Request".