Sky Connect Privacy & Cookie Notice
This privacy and cookies notice applies to the processing of personal data by Sky Connect, including information we collect and store via cookies and other related technologies. Sky Connect is the trading name of the division of Sky UK Limited which sells business-grade communications products and services to business customers.
References in this policy to “Sky”, “we” “us” or “our” should be interpreted accordingly. The processing explained in this notice may be carried out by Sky or other data controllers within the Sky group of companies (including but not limited to Sky Subscribers Services Limited and The Cloud Networks Limited) that may from time to time act as Sky's agent to help Sky Connect provide products and services to you.
If you access the products and services of other Sky companies and businesses, you should refer to their privacy notices.
Types of information we process and where it comes from
Information you've provided to us about your business, its employees or other contacts, including their names and contact details.
Information relating to products and services you've ordered or enquired about, via Sky Connect's sales and marketing channels.
Information our data broker, Experian, provides to Sky about your business. To manage how Experian use your personal data and share it with companies like Sky you should speak to them directly or refer to the privacy notice on their website.
Information about your and your business’ use of our products and services from equipment we supply or devices you use to receive the same (including where we collect this information via cookies and other related technologies) which may include the following:
Account information: including unique identification numbers, MAC addresses, online identifiers, passwords and other similar identifying information required to receive and use our products and services.
Usage Information: including call data records, IP addresses, browser information, and other relevant traffic data or network information Sky requires to provide and manage your use of our products and services.
IP addresses, MAC addresses, unique identification numbers, online identifiers (including device IDs and advertising IDs), browser information, logical network address, and other similar identifying information required for your devices to communicate with websites and applications on the internet.
Technical information from the devices you use to receive Sky products and services, for example, the collection of diagnostic and traffic or location information. Note that devices and applications have their own privacy settings and notices under which they collect your information, so please check and manage your device and application settings.
Information relating to your customer service interactions and other administrative information with us including personal data you provide when you exercise your rights under our contract with your business or any applicable data protection legislation.
Images recorded by cameras fitted to Sky’s engineer vans.
How we use your information
The main purpose for which we process your personal data is so that we can provide your business with our products and services in accordance with the contract your business has with Sky. This includes:
- Managing your account (such as updating contact information, making changes to products or services and billing for services rendered).
Managing our products and services and traffic across our network. For example, Sky uses your information to facilitate the operation of its network by choosing the most efficient route to transmit signals received through the various parts of its network of equipment and systems. This information is held securely within restricted areas, is accessible only by authorised personnel and otherwise in accordance with our data retention, deletion and acceptable use policies.
Where you give us consent, we will process your data in a number of ways, including:
- In order to send you direct marketing. This may include communications by post, telephone, SMS, email or other electronic means, using the contact details you have provided, about us and our content products and services, events and special offers, including, for a reasonable time after you have ceased to be a customer of ours (see further details below). We may also send you ‘abandoned basket’ marketing if you provided us your contact details (and given us consent to use them for marketing) during our online sales journey but didn’t complete your purchase. We will tailor the marketing based on what you added to your basket.
- In order to process your data for online and digital advertising (see below at “How we share your information for online and digital advertising”) and;
- In order to process special category data you’ve provided to us. This may include using data you have provided to us or to our business partners concerning your health to provide assistance and support on your account.
We may also use your information to comply with our legal and regulatory obligations. This includes:
- By complying with police and other security investigations; and
- By complying with Ofcom information requests and regulatory investigations.
In some circumstances, we may process your personal data in reliance upon our legitimate interests, including to:
improve our products, services and customer experiences by monitoring your use of our products and services and working with our suppliers to improve the products and services we offer, and develop new products and services;
Monitor, record, store and use customer service communications we have with you. This helps us to improve the quality of our customer service, to confirm any instructions you give us and for training and development purposes and to meet our legal and regulatory responsibilities;
In some cases, we rely on legitimate interest to send you direct marketing – for example, if you’re a prospective customer. This may include communications by post, email or other electronic means (such as push notifications and in-product notifications), using the contact details you have provided, about us and our content, products and services, events and special offers, including, for a reasonable time after you have ceased to be a customer of ours (see further details below). This may also involve processing your data for online and digital advertising (see below at ''How we share your information for online and digital advertising''). We will confirm how we received your data and record any preferences you have about receiving further communications from Sky Connect;
Use for market research;
Protect or enforce our rights or the rights of any third party such as by analyzing activity on our network to help block unauthorized or illegitimate content, publication of, or access to it; and
Help prevent and detect crime and for the purposes of public and road safety. We will also process your data where we need to in order to safeguard your vital interests or those of another person, for example to support crime prevention and protect the safety of members of the public and Sky employees.
How we share your information
We work with a number of suppliers who may process your personal data in accordance with our instructions. The categories of suppliers that we may use include:
- Engineer services firms
- Couriers (who may also (who may also process your contact data as a data controller when arranging or communicating with you about your delivery)
- Payment service providers (including Worldpay, which processes data as a data controller (their privacy notice)
- Information Technology and services companies
- Customer service centres
- Debt collection agencies
- Other Sky group companies (Information can be found here); and other companies in the Comcast group (including NBCU companies, such as Peacock); and Marketing companies that deliver our communications.
Sometimes we share personal data with suppliers and business partners who may process it outside of the European Economic Area. (for example, we use customer service centres in India and some IT services in USA). Most of the time the data we share will be with companies who supply services to us to enable us to supply our services to you. On occasion, we may share personal data with our parent company, Comcast Corporation, based in the US. We grant these companies access to personal data only where necessary and only where appropriate security measures and controls are in place to protect your personal data in accordance with applicable data protection laws, regulations and regulatory guidance. This means these transfers will take place on the basis of an approved data transfer mechanism, such as EU Standard Contractual Clauses and EU Commission Decisions on Adequacy (country details).
In the event that the structure of our business changes so that another company in the Sky group provides our products and services to you, we will pass your personal information to that company. This includes, for example, a merger between us and another company, where another company acquires us or some or all of our assets, or where we acquire another company or our holding company restructures our corporate group.
We may share your personal data with debt collection agencies where there is an outstanding debt owed on the account. We do this so that they can use the information, alongside other information that they hold, to attempt to contact you on our behalf so that we can recover the debt. In some cases, where we have been unable to recover the amount owed, we may sell the debt to a third-party debt management company. You will be informed when this takes place and following the sale of the debt, any questions you have about communications you receive should be directed to the company in question.
We share personal data with the courts, enforcement agencies (e.g. the police) and with regulatory authorities (e.g. OFCOM in the UK) where this is required, in order for us to comply with our legal and regulatory obligations.
Where Sky receives a request for the ownership of a vulnerable customer’s account to be transferred to a nominated individual, personal data of the existing account holder may be shared with the new account holder. The ownership of the account would only be transferred once Sky has received signed acceptance and authorisation of the transfer from both parties.
How we use your information for online and digital advertising
If you don’t want your data to be matched with the social media sites you use, let us know using one of the methods in the “Managing Your Marketing Preferences” section below. You might still see Sky posts or adverts on those sites, but they won’t be personalised using your Sky account data. You can also change your settings on that social media site to control the promoted posts you see there.
Where our partners are based outside of the European Economic Area, we work with these partners to make sure personal data is processed only if appropriate measures and controls are in place to protect your personal data in accordance with applicable data protection laws and regulations and regulatory guidance. Any data transfers will only take place on the basis of an approved data transfer mechanism as described in the section ‘How we share your information’ above.
Managing your marketing preferences
You can always choose not to receive direct marketing from us in the following ways:
When you make a request not to receive marketing, it can take us up to one month to process that request. If you receive direct marketing from other Sky group companies or in relation to other Sky services (such as Sky TV, Sky Broadband, Sky Mobile, Sky WiFi or Now TV) you can choose not to by contacting them directly.
Cookies and online behavioural advertising
Please see the section on “Controlling my Cookies” on how to adjust cookie settings for your devices.
Keeping your data up to date and your rights
You can review, manage, amend and correct your information in the following ways:
You also have the following rights:
To request access to, or erasure of, the personal data we hold about you (we explain more about this below);
To request us to restrict the processing of the personal data we hold about you;
To object to us processing personal data relating to you;
Where you have given us consent to process your personal data, you have the right to withdraw that consent at any time; and
You have the right to obtain certain personal data from us in a format that can be transferred electronically to a third party (also called “data portability”).
Please note that some of these rights are not absolute. In some cases, for example, we may refuse a request to exercise particular rights if complying with it meant that we are no longer able to meet our contractual obligation to provide you with particular products and services, or if we had a legal obligation or right not to comply with the request. However, we will keep you informed as to the actions that we can take, when you make your request.
Finally, if you are unhappy about the way we have processed your personal data and wish to make a complaint please refer to the “Complaints” section of this notice for details of your rights and how to do so.
You can exercise these rights in the following ways:
- Emailing us at firstname.lastname@example.org
- Calling us on 0333 759 7590
How long we keep your information
In this section, we explain the categories of personal data that we may keep, the periods applied and our reasons for keeping them.
These categories of data include customer contact information, the addresses where we have provided services, account, account correspondence with notes and complaints, payment card and financial history. We keep this information for business, legal and regulatory purposes. Some of the legal reasons why we keep this data are: tax purposes, to enable us to defend potential legal claims under the statutory periods set out in the Limitation Act 1980 (for Sky UK Limited and other Sky companies based in England and Wales). We will also need to keep some information to demonstrate compliance with the Data Protection Act 2018, for example, where we need to evidence compliance with suppression requests. This information is also helpful if we receive customer enquiries or complaints, and to verify your identity when you contact Sky.
These records are retained securely for 7 years after your account is closed. After this time, they will either be securely deleted or anonymised.
Some categories of data are deleted sooner where the data is no longer needed for the purposes for which it was collected such as:
- Where we have recorded calls, these are retained for 12 months.
- Where you have registered for My Account, we retain this information for 12 months after the date your account is closed.
Please read the ‘Keeping your data up to date and your rights’ above to understand how to get in touch to discuss a right to erasure request.
When you access or use the Sky Connect website or certain products and services, we may collect information from the devices you use by using ‘cookies’ and/or other related technologies.
If you'd like to learn how to manage these cookies and choose whether or not to receive information of different types, please see the section “Controlling My Cookies” below.
What are cookies and how do they work?
The term “cookie” refers to one or more small pieces of information or text files which are stored on or provided by your computer or device when you access online information and may be placed either by the website owner (“First Party Cookies”) or by third parties that have an agreement with the website owner to place cookies when you visit that website (“Third Party Cookies”).
Your browser or device sends First Party Cookies every time you visit a website primarily so that the website (and related pages) can recognise your computer or device and tailor what you see on the screen – often these cookies are essential to make the service work otherwise they will help improve your overall browsing experience.
Third Party Cookies are commonly placed to enable advertisers to display advertisements and monitor sites that you visit to tailor and personalise the advertisements that are displayed to you. Other similar technologies such as pixel tags, locally stored objects and device fingerprinting work in a similar manner.
The primary purpose for which we use and share personal data in this context is to provide our website and our products or services to you. The First Party Cookies that we use for this purpose are essential because they help us to:
Position information correctly so that you can see the website and use its functionality accordingly
Recognise equipment or devices and their location on the network
Keep items you’ve added to the online shopping basket so they are present when you checkout
Create sessions and record Usage Information in relation to your session
Without the cookies referred to above, Sky would not be able to provide products or services you've asked for. We also use other First Party Cookies for purposes that may not be considered essential but are otherwise important because they help us to improve your overall browsing experience by:
Providing the session and related text in the appropriate language
Remembering settings and preferences or selections that you have made
Remembering the number of times you been shown a particular image
We like to keep track of what websites, information and links are popular and which ones don't get used so much, to help us keep our information on our websites relevant and up to date, identify trends of how people navigate these pages and when and where ‘error messages’ may originate.
This group of cookies, often called 'analytics cookies', are used to gather this information. The information collected is grouped with the information from other users' cookies. We can then see on an anonymous basis the overall patterns of usage rather than any one person’s activity. Analytics cookies are used to improve how an application, a website and its pages work.
Our applications, web locations, websites and communications you get from us contain small invisible images known as 'web beacons' or 'pixels'. These are used to manage the interaction between you and the online information or email and allow us to assess the effectiveness of the communication.
Sky Connect does not use Third Party Cookies on its website or in its products or services.
Controlling my Cookies
How can I see and manage my cookies in my browser?
Most modern browsers allow you to see what cookies are stored on your device, and to clear them individually or clear all of them. To find out how to do this, go to aboutcookies.org, which contains comprehensive information on how to do this on a wide variety of desktop browsers.
When you access the Sky Connect website for the first time, you will be asked to set your preferences for the cookies we use. After that, you can use the Privacy Options link (in the site footer) to manage those preferences. There you can also find out more information about the individual cookies, their features and the partners that supply them. If you disable cookies from your browser completely you will not be able to create a shopping basket or place an order on this site.
If you wish to make a complaint about how we use your information, please contact us by email at email@example.com or by writing to us at Sky Connect, 29 Wellington Street, 4th Floor, Leeds, LS1 4DL.
We will try to resolve your complaint in accordance with Sky Connect's Customer Complaints Code of Practice and you can find details of the steps we will take, including when we aim to respond by. If you are not satisfied with our response then please let us know and we will take the further steps detailed in the aforementioned link.
If you are still unhappy you can make a complaint to the Information Commissioner’s Office via their website.
Contacting Sky Connect
If you have any queries or comments about this privacy and cookies notice, please contact Sky Connect using any of the channels mentioned above or contact Sky’s Data Protection Officer via firstname.lastname@example.org.
Changes to this notice
We will occasionally update our privacy and cookies notice. We will post a notice of any material changes on our website prior to implementing the changes, and, where appropriate, notify you using any of the contact details we hold for you for this purpose. This may include phone, SMS, e-mail, post or interactive social media. We encourage you to periodically review our notice to be informed of how we use your information.
This privacy and cookies notice was last updated 24 March 2021.