top of page

Privacy Policy

Last updated: December 2025

​

This Privacy Policy explains how Cyprus Estate Haven (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website and when you contact us by email. It is designed to meet the transparency and information requirements of the EU General Data Protection Regulation (GDPR).​

1. Who we are and how to contact us

The website Cyprus Estate Haven provides information about Cyprus residency and investment opportunities.​

If you have any questions about this Policy or your personal data, you can contact us at: info@cyprusestatehaven.com.​

If we appoint a Data Protection Officer (DPO) or EU representative, their details will be added here.​

2. What personal data we collect

We only collect personal data that is relevant and necessary for the purposes described below.​

a) Data you provide directly (for example, by email):

  • Name and contact details (such as email address, phone number if you choose to share it).

  • Country of residence or citizenship (if you include it).

  • Information about your situation and goals (for example, investment budget, family situation, timeline, or questions about Cyprus residency) that you choose to share in your message.​

b) Data collected automatically when you visit the website:

  • Technical and usage data, such as IP address, browser type and version, device type, pages visited, time and date of visit, and referring URL.​

  • Cookie‑related data, where applicable (see “Cookies and similar technologies” below).​

We do not intentionally collect data from children under 18. If you believe a child has provided personal data, please contact us so we can delete it.​

3. How we collect your data

We collect personal data in the following ways:​

  • When you contact us voluntarily by email at info@cyprusestatehaven.com.

  • When you browse our website, through standard server logs and cookies/analytics tools, where used.​

We do not use contact forms at this time; all direct contact is via email.

4. Why we use your data (purposes) and legal bases

Under GDPR, we must have a legal basis for each purpose of processing.​

a) Responding to your enquiries and providing information

  • To read and respond to emails you send to info@cyprusestatehaven.com.

  • To provide information about Cyprus residency, investment routes, and our services at your request.​

Legal basis:

  • Our legitimate interests in responding to people who contact us and in running our advisory website.​

b) Preparing potential consultations and follow‑up

  • To understand your profile, goals, and approximate budget, where you choose to share that, so we can assess suitability and answer more precisely.​

Legal basis:

  • Legitimate interests in evaluating enquiries and potential client relationships.​

c) Website operation, security, and improvement

  • To monitor traffic, maintain security, and improve the performance and structure of the website.​

Legal basis:

  • Legitimate interests in ensuring the website is secure, functional, and improved over time.​

d) Legal and compliance obligations

  • To comply with applicable EU/Cyprus laws, court orders, or requests from authorities, if ever required.​

Legal basis:

  • Legal obligation where such laws apply.​

We do not use your data for automated decision‑making or profiling in a way that produces legal or similarly significant effects.​

5. Cookies and similar technologies

Our website may use cookies and similar technologies to help it function correctly and to understand basic usage patterns.​

  • Strictly necessary cookies: required for the website to work (e.g. basic security and navigation).

  • Analytics cookies (if enabled): to see aggregated information such as number of visitors, most‑viewed pages, and general trends. These tools are configured to minimize personal data where possible.​

Where required by law, you will see a cookie banner allowing you to accept or manage non‑essential cookies before they are set.​

You can usually delete or block cookies via your browser settings. Note that some parts of the site may not function properly without certain cookies.​

6. Who we share your data with

We do not sell or rent your personal data to third parties.​

We may share your data only with:​

a) Service providers (processors)
Carefully selected third‑party service providers who help us operate the website and our communications, for example:

  • Website hosting and infrastructure providers.

  • Email hosting and security providers.

They process your data only on our instructions and under confidentiality obligations.

b) Independent professional partners (separate controllers)
If, with your knowledge or at your request, we introduce you to independent legal, tax, or real‑estate professionals, they will process your data as separate controllers under their own privacy policies.​

c) Public authorities
In rare situations where we are legally obliged to do so, we may share data with law enforcement, regulators, or courts.​

7. International transfers

Our main operations are based in the EU (Cyprus).​

Where service providers or systems involve transfers of personal data outside the European Economic Area, we will use appropriate safeguards such as:

  • Countries with an EU adequacy decision; or

  • Standard Contractual Clauses or equivalent legal mechanisms.​

Details can be provided on request by emailing info@cyprusestatehaven.com.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes described above, or as required by law.​

Typical retention periods:

  • Email enquiries and related correspondence: normally up to 3 years from our last meaningful contact, unless legal, regulatory, or dispute‑related reasons require us to keep them longer (for example, to demonstrate how we handled a request).​

  • Technical/analytics data: kept in aggregate or pseudonymous form for a shorter period, generally 12–24 months, where applicable.​

When data is no longer needed, it is securely deleted or anonymised.​

9. How we protect your data

We take reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.​

These measures include, for example:

  • Secure hosting in reputable data centres.

  • Access controls and least‑privilege principles.

  • Up‑to‑date software and security practices.

  • Limiting access to personal data to people who need it to perform their tasks.​

No system can be completely secure, but we aim to follow good practice and review our measures periodically.​

10. Your rights under GDPR

Under the GDPR, you have several rights concerning your personal data.​

You may:

  • Request access to the personal data we hold about you.

  • Request correction of inaccurate or incomplete data.

  • Request deletion of your data in certain circumstances (the “right to be forgotten”).

  • Request restriction of processing in specific situations.

  • Object to processing based on our legitimate interests.

  • Request data portability where the legal basis and technical conditions are met.

  • Withdraw consent where processing is based on consent (this does not affect past processing based on consent before withdrawal).​

To exercise any of these rights, contact us at info@cyprusestatehaven.com and clearly state which right you wish to exercise. We may need to verify your identity before responding.​

You also have the right to lodge a complaint with your local Data Protection Authority. For Cyprus, this is the Office of the Commissioner for Personal Data Protection.​

11. Third‑party websites

Our website may include links to other websites or resources.​

We are not responsible for how those third parties collect or process your data, and their privacy practices are governed by their own privacy policies. It is recommended that you read those policies before sharing any personal data.​

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example to reflect changes in law, our services, or how we process personal data.​

When we make changes, we will update the “Last updated” date at the top of this page. Where changes are material, we may provide additional notice on the website.

bottom of page