Effective date: 2 April 2026
1. Introduction
CyprusAligned, [Registered Company Number], of [Registered Address], Cyprus, is the data controller for the purposes of this website and the personal data collected through it. As a Cyprus-based business established in an EU Member State, CyprusAligned processes personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation or GDPR) and Cyprus Law 125(I)/2018, as amended.
This Privacy Policy explains what personal data we collect through cyprusaligned.com, why we collect it, how we use it, how long we keep it, and the rights available to you under applicable data protection law. It is intended to provide a clear and transparent account of our data handling practices.
2. Personal Data We Collect
CyprusAligned collects personal data through one channel only: the consultation request form available on the website. The form requests your full name, email address, area of interest, and message, and it may also request your phone number on an optional basis.
We do not use tracking cookies, behavioural advertising tools, profiling technologies, or third-party analytics services such as Google Analytics or Meta Pixel. The website uses browser localStorage solely to remember your theme preference, such as dark mode or light mode. This functionality does not track your browsing activity across websites and is used only to preserve your visual display preference on your device.
The website also loads Google Fonts from Google's content delivery network. As with any external content request, this may involve a technical connection between your browser and Google's servers for the purpose of displaying the website correctly.
3. Purposes and Legal Basis of Processing
We process personal data only to receive, review, route, and respond to consultation enquiries, and to direct those enquiries to the relevant internal coordination team or, where necessary for the client's requested process, to appropriately involved licensed specialists working under confidentiality obligations.
Our legal basis for processing is Article 6(1)(b) GDPR, where processing is necessary in order to take steps at your request before entering into a potential client relationship, and Article 6(1)(f) GDPR, where processing is necessary for the legitimate interests of CyprusAligned in managing and responding to genuine business enquiries in an orderly and secure way.
4. Sharing of Personal Data
CyprusAligned does not sell, rent, or commercially disclose personal data. We may share relevant enquiry information only where reasonably necessary to progress your request and only with licensed lawyers, accountants, real estate professionals, banking or compliance specialists, or comparable professional counterparties directly involved in the matter. In such cases, sharing is limited to what is necessary and is subject to appropriate confidentiality expectations or obligations.
We do not use third-party analytics providers for website visitor tracking, and we do not disclose consultation form data for advertising purposes.
5. Retention
Consultation enquiry data is retained for up to two years from the date of submission, unless a longer retention period is required by law, needed for the establishment, exercise, or defence of legal claims, or you request deletion earlier and no overriding legal basis requires continued retention.
At the end of the applicable retention period, personal data is deleted or securely anonymised, as appropriate.
6. Your Rights
Under the GDPR, you have the right to request access to your personal data, rectification of inaccurate data, erasure of data in certain circumstances, restriction of processing, data portability, and to object to processing where the legal basis permits such objection. These rights are recognised by the GDPR and are enforceable subject to the conditions and limitations set out in applicable law.
To exercise your rights, please contact us at contact@cyprusaligned.com. We may need to verify your identity before acting on your request.
7. Complaints and Supervisory Authority
If you believe that your personal data has been handled in a manner that does not comply with applicable law, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus, which is the competent supervisory authority in Cyprus for GDPR matters.
8. Security and International Scope
CyprusAligned takes reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. At the same time, users should be aware that no internet transmission or storage system can be guaranteed to be completely secure.
Because CyprusAligned works with international clients, regulatory and professional requirements may vary by jurisdiction. This Privacy Policy addresses CyprusAligned's handling of personal data through this website, but it does not replace jurisdiction-specific legal, tax, or regulatory advice.
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect legal, operational, or website-related changes. The most current version will always be published on cyprusaligned.com with its effective date.