Data Protection
Privacy Policy
This Privacy Policy explains how we collect, use, store and protect personal data when you visit stayreadycyprus.com, contact us, submit a request or use our services.
This Privacy Policy applies to the website stayreadycyprus.com and to the services offered under the brand Stay Ready Cyprus.
1. Data Controller
8540 Tsada, Paphos
Cyprus
2. What Personal Data We Process
Depending on how you use our website and services, we may process the following categories of personal data:
- name and surname;
- email address;
- phone number;
- company name, where applicable;
- property-related information provided by you;
- address or location details relating to a property, where necessary for the requested service;
- message content submitted via email, WhatsApp or other communication channels;
- billing and invoicing information;
- technical website data such as IP address, browser type, device information, date and time of access, pages visited and server log data;
- communication history with us.
We do not intentionally collect special categories of personal data unless you provide such information voluntarily and it is necessary for a specific request.
3. Purposes and Legal Bases of Processing
We process personal data only where there is a lawful basis under the General Data Protection Regulation.
| Purpose | Data Processed | Legal Basis |
|---|---|---|
| Providing and securing the website | IP address, browser data, server logs, technical access data | Legitimate interests, Art. 6(1)(f) GDPR |
| Responding to enquiries | Name, email, phone, message content | Pre-contractual steps, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR |
| Preparing offers and service proposals | Contact details, property-related information, requested services | Pre-contractual steps, Art. 6(1)(b) GDPR |
| Performing services | Client data, contact data, property-related service information | Contract performance, Art. 6(1)(b) GDPR |
| Invoicing, accounting and tax compliance | Billing data, invoice data, payment information | Legal obligation, Art. 6(1)(c) GDPR |
| Client communication and service coordination | Contact data, communication content, service details | Contract performance, Art. 6(1)(b) GDPR; legitimate interests, Art. 6(1)(f) GDPR |
| Storing cookie notice status | Local browser preference that the essential-only notice was acknowledged | Legitimate interests, Art. 6(1)(f) GDPR |
| Marketing communication, if subscribed or legally permitted | Name, email, communication preferences | Consent, Art. 6(1)(a) GDPR or legitimate interests, Art. 6(1)(f) GDPR where legally permitted |
Our legitimate interests include operating a secure website, responding to business enquiries, managing client communication, improving our services and protecting our business from misuse or security risks.
4. Contact and Email Communication
If you contact us by email, WhatsApp or another communication channel, we process the information you provide in order to respond to your enquiry, prepare an offer, provide requested information or perform services.
The information you provide is not used for unrelated purposes without a separate legal basis.
5. Property-Related Information
If you request property readiness, property support, service coordination or related services, we may process property-related information provided by you.
This may include details about the property, service needs, access instructions, maintenance requirements, cleaning requirements, arrival preparation, guest-readiness tasks, photos or operational notes, depending on the requested service.
Such data is processed only to assess, prepare, coordinate or perform the requested service.
6. Hosting, Server Logs and Netlify
This website is hosted on Netlify. When you visit the website, technical data may automatically be processed by Netlify and related server systems to deliver the website, keep it secure and maintain technical stability.
This may include:
- IP address;
- date and time of access;
- requested page or file;
- referrer URL;
- browser type and version;
- operating system;
- device information;
- access status and error logs.
This processing is necessary to display the website, ensure technical stability, improve security and detect misuse.
7. Cookies and Similar Technologies
At launch, this website does not use analytics cookies, marketing cookies, advertising pixels, embedded tracking tools, chat widgets or third-party tracking scripts.
The public website uses only technically necessary processing for page delivery and security through Netlify. We also store a small local browser preference after you acknowledge the cookie notice, so the same notice does not need to be shown on every page view.
| Name | Type | Purpose | Duration |
|---|---|---|---|
| stayready_cookie_notice_v1 | Local storage preference | Remembers that the essential-only cookie notice was acknowledged | Until deleted by the user or reset through Cookie Preferences |
You can delete this preference in your browser settings or reopen the notice through the Cookie Preferences link in the footer.
8. Analytics and Tracking Tools
We do not currently use analytics, pixels, retargeting tools or behavioural advertising technologies on this website.
If analytics or marketing tools are introduced later, they will be documented in this Privacy Policy and, where legally required, activated only after valid consent.
Current launch setup: Netlify hosting only, no Google Analytics, no Meta Pixel, no retargeting and no marketing cookies.
9. Recipients of Personal Data
We may share personal data with the following categories of recipients where necessary:
- website hosting providers, currently Netlify;
- email and communication service providers;
- IT service providers;
- accounting, tax or legal advisors;
- payment or invoicing providers;
- subcontractors or local service partners where required to perform a requested property-related service;
- public authorities, where legally required.
We only share personal data to the extent necessary for the relevant purpose.
10. Service Partners and Subcontractors
For property-related services, we may work with local service providers, contractors or operational partners, for example for cleaning, maintenance, inspections, repairs, access coordination or preparation tasks.
Where such partners receive personal data, this is limited to the information necessary to perform the specific task.
11. International Data Transfers
We primarily process personal data within the European Union and the European Economic Area.
If personal data is transferred to a country outside the EU/EEA, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission, EU Standard Contractual Clauses or another legally recognised transfer mechanism.
12. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected.
Typical retention periods are:
- website server logs: usually retained for a limited technical security period;
- enquiries: retained for as long as necessary to respond and follow up;
- client and service records: retained for the duration of the business relationship and as required for legal, contractual or accounting reasons;
- invoices and accounting records: retained in accordance with applicable tax and accounting obligations;
- marketing consent records: retained until consent is withdrawn or the data is no longer required.
When personal data is no longer required, we delete or anonymise it, unless legal retention obligations apply.
13. Your Rights
Under the GDPR, you have the following rights, subject to the applicable legal requirements:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to data portability;
- right to object to processing based on legitimate interests;
- right to withdraw consent at any time where processing is based on consent;
- right to lodge a complaint with a supervisory authority.
To exercise your rights, please contact us at: contact@stayreadycyprus.com.
14. Right to Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
15. Right to Object to Direct Marketing
You may object to the use of your personal data for direct marketing purposes at any time.
If you object, we will stop processing your personal data for direct marketing purposes.
16. Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority.
For Cyprus, the competent authority is the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.
You may also contact the data protection authority in your country of residence, workplace or the place of the alleged infringement.
17. Data Security
We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet-based service can be guaranteed to be completely secure. We recommend that you contact us immediately if you believe that your personal data or communication with us may have been compromised.
18. Automated Decision-Making
We do not use personal data for automated decision-making that produces legal effects or similarly significant effects on individuals.
19. Changes to This Privacy Policy
We may update this Privacy Policy from time to time, especially if our website, services, legal obligations or technical systems change.
The current version will always be available on this website.