Privacy Policy

CyprusDesk ("we", "us", "our") is an independent professional directory for Cyprus business. We are operated by an individual controller based in the European Union.

Contact: contact@cyprusdesk.com

Data you give us directly:

• Name and email address when you submit a quote request or sign up for updates
• Your company situation details entered in our free tax estimate tool
• Any messages you send us by email

Data we collect automatically:

• Pages visited, time spent, referral source — collected via Google Analytics 4 (GA4), anonymised
• IP address (anonymised by GA4 before storage)
• Browser and device type

• To send you the tax estimate report you requested (transactional email via Resend)
• To improve the site using aggregated, anonymous analytics (GA4)
• To respond to enquiries you send us directly

We never sell your data to third parties.

• Contract / pre-contractual steps — when you request a report or quote
• Legitimate interests — site analytics to improve our service

We share data with the following trusted processors:

• Supabase (supabase.com) — database storage for lead data and subscribers. Hosted on AWS eu-west-1 (Ireland).
• Resend (resend.com) — transactional email delivery. Processes only the email address and content of individual emails.
• Google Analytics 4 (analytics.google.com) — anonymised website analytics. IP addresses are anonymised before storage. Data may be transferred to US under EU Standard Contractual Clauses.
• Vercel (vercel.com) — website hosting. Processes request logs. EU region available; US transfers covered by SCCs.

We use the following cookies:

• Analytics cookies (GA4) — _ga, _ga_*, _gid — retention: 13 months. These are non-essential. You can opt out via your browser settings or a browser extension like uBlock Origin.
• No tracking or advertising cookies.

By using this site, you acknowledge that we use analytics cookies. You may clear cookies at any time via your browser settings.

• Lead / quote data: 2 years from submission, or until you request deletion
• Email subscriber list: until you unsubscribe
• GA4 analytics: 14 months (Google default)

Under GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Object to processing based on legitimate interests
• Withdraw consent at any time (without affecting prior lawfulness)
• Lodge a complaint with your national data protection authority

To exercise any right, email contact@cyprusdesk.com. We will respond within 30 days.

All data is transmitted over HTTPS/TLS. Access to our database is restricted by Supabase Row Level Security policies. We do not store payment card data (we have no payment flows at this time).

This site is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has submitted data, contact us immediately.

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after a change constitutes acceptance.