Privacy Policy

Last Edited : Nov 13, 2025

Introduction

Sakura Sky (“we,” “our,” “us”) is committed to protecting your personal data. This Privacy Policy outlines how we collect, use, disclose, and protect your personal information in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Australian Privacy Principles (APP).

This policy applies to your interactions with our website (https://www.sakurasky.com), our services, or our applications.

1. Data Controller

Sakura Sky is the data controller responsible for your personal data. For any questions regarding this Privacy Policy or to exercise your rights, please contact us:

Email: info@sakurasky.com

Address: 8 The Green, Dover DE, USA 19901

2. Data We Collect

2.1 Website Analytics

We use Plausible.io, a privacy-focused web analytics tool, to collect anonymous data for statistical purposes. Plausible.io does not use cookies or collect any personal data. The aggregate information collected includes:

Page visits
Referring websites
General user engagement on our website

2.2 Contact Form

When you submit an inquiry through our “Contact Us” form, hosted by Formspree.io, we collect the personal data you provide:

Name
Company
Email Address
Any other personal data you voluntarily provide in your message

This data is used solely to respond to your inquiry. Formspree.io processes form submissions on our behalf and complies with all relevant data protection laws as outlined in their Privacy Policy.

2.3 LinkedIn App

If you use our LinkedIn app, we may collect non-personal, business-related information such as company name, industry, and size. The app does not collect personal data, such as individual names or contact details.

2.4 Client Data Processing

As a data processor, we provide cloud, data, and security engineering services to our clients. In this role, we may process personal data that our clients have collected, including data from third-party applications such as Facebook.

Our Role: We act solely as a data processor.
Your Data: The types of data, the purposes of processing, and retention periods are all defined and controlled by our client (the data controller).
Compliance: We process this data in strict accordance with our contractual agreements and the client’s documented instructions.

3. How We Use Your Data

We use the data we collect for the following specific purposes:

To respond to your inquiries submitted via our Contact Us form.
To analyze and improve the performance and user experience of our website using non-identifiable statistics.
To operate and provide the functionality of our LinkedIn app, which uses only non-personal company information.
To fulfill our contractual obligations to our clients as a data processor.

4. Legal Basis for Processing Data

We process personal data under the following legal bases:

Consent: When you provide your data through our contact form.
Legitimate Interests: For analyzing our website’s performance and for operating our LinkedIn app.
Contractual Obligation: When we process data on behalf of our clients to deliver our engineering services.
Compliance with Legal Obligations: To comply with applicable laws and regulations.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

Contact Form Data: Submissions are retained for 3 months from the date of submission, after which they are securely deleted.
Client Data: Data we process on behalf of clients is retained according to the terms of our specific agreements with those clients.

You have specific rights regarding your personal data, subject to local data protection laws:

Access: The right to request a copy of the personal data we hold about you.
Rectification: The right to request corrections to any inaccurate or incomplete data.
Erasure (Right to be Forgotten): The right to request the deletion of your data under certain conditions.
Restriction: The right to request the restriction of processing under certain conditions.
Data Portability: The right to receive your data in a structured, commonly used, and machine-readable format.
Objection: The right to object to the processing of your data for certain purposes.
Non-Discrimination: Under the CCPA, you have the right not to be discriminated against for exercising your privacy rights.
Anonymity and Pseudonymity: Under the APP, you have the right to not identify yourself or to use a pseudonym when interacting with us, unless it is required by law or it is impracticable for us to deal with you on that basis.

To exercise any of these rights, please contact us at info@sakurasky.com.

We do not sell your personal data. We do not share your personal data with third parties for their independent marketing or advertising purposes.

Service Providers: We use Formspree.io to process our contact form. They act as a service provider and are prohibited from using your data for any purpose other than providing that service.
Client Data: When acting as a data processor, we may engage third-party sub-processors as instructed by our clients and in full compliance with our contractual agreements.
Legal Requirements: We may disclose data if required by law or to protect our legal rights.

8. Data Security

We implement appropriate technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

9. Third-Party Services

Plausible.io: Our web analytics provider. Plausible does not collect personal data or use cookies. For more details, visit Plausible.io’s Data Policy.
Formspree.io: Our contact form processor. Formspree processes your data securely and in compliance with relevant data protection laws. For details, refer to Formspree.io’s Privacy Policy.
Client-Directed Applications: When we process data collected by our clients from applications such as Facebook, we adhere to our clients’ instructions and ensure our processes comply with all relevant data protection laws.

10. International Data Transfers

Our headquarters are in the United States. If you are interacting with us from outside the US (such as from the European Economic Area (EEA) or Australia), your personal data will be transferred to and processed in the United States. We ensure all international data transfers are protected by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other legally accepted mechanisms.

11. Updates to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable regulations. Please check this page periodically for updates. The “Last Edited” date at the top indicates when this policy was last revised.

12. Contact Information

For questions or concerns about this Privacy Policy, please contact us at: