This policy explains what personal data CyCorporate collects through cycorporate.com and by email, why we collect it, how long we keep it and the rights you have under the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.
Who we are
CyCorporate provides company formation and corporate services from 23 Agias Paraskevis, Germasogeia, 4044, Limassol, Cyprus. We are responsible (the "controller") for the personal data described in this policy. You can reach us about anything in this policy at [email protected].
What we collect
- Enquiry details: when you use our contact form or email us, we receive your name, email address, phone number (if you give it), the service you are interested in and your message.
- Client documents: if you become a client, we collect the information and documents needed to provide our services and to meet our legal obligations, such as identity documents and company information.
- Website statistics: we use Cloudflare Web Analytics to count visits and see which pages are read. It does not use cookies, does not track you across websites and does not identify you personally.
Why we use it, and our legal basis
- To answer your enquiry and prepare a quote, because you asked us to (steps taken at your request before a contract).
- To provide our services once you instruct us (performance of a contract).
- To meet legal obligations, such as anti-money-laundering, record-keeping and tax rules (legal obligation).
- To run and improve our website using anonymous statistics (legitimate interests).
We do not sell your personal data and we do not use it for automated decision-making.
Who we share it with
We only share personal data with providers that help us run our business, and only as far as needed:
- Cloudflare, which hosts our website and provides the anonymous statistics.
- Web3Forms, which delivers messages from our contact form to our inbox.
- Microsoft 365, which provides our email.
- Public authorities and professional partners (for example the Registrar of Companies, the Tax Department, banks or the Civil Registry and Migration Department) when this is needed to carry out the service you asked for or required by law.
Some of these providers may process data outside the European Economic Area. Where that happens, they rely on safeguards recognised under the GDPR, such as the European Commission's standard contractual clauses or adequacy decisions.
How long we keep it
- Enquiries that do not lead to work: up to 24 months, then deleted.
- Client records: for as long as we act for you and afterwards for the period required by law, for example under anti-money-laundering and tax rules.
Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Email [email protected] and we will reply within one month.
If you are unhappy with how we handle your data, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).
Cookies
Our website does not use advertising or tracking cookies, so we do not show a cookie banner. If this changes, we will update this policy and ask for your consent where required.
Changes to this policy
We may update this policy from time to time. The date below shows when it was last changed.
Last updated: 19 October 2026