Privacy and Cookie Policy
This policy explains what personal data we collect when you use cyprus-ip-box.com, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.
1. Who we are
Consortia Ltd, a company registered in the Republic of Cyprus.
Registered office: Efesou 9, 5280 Paralimni, Cyprus
Company registration number: HE 386363
Email: thanos@cyprus-ip-box.com · Telephone: +357 99 637 198
We are the data controller for personal data collected through this website. We have not appointed a Data Protection Officer because we are not required to; privacy questions go to the email above with "Privacy" in the subject line.
2. What we collect and why
2.1 When you book a consultation
Bookings are made through Calendly. You provide your name, email address, and optionally a phone number, company name, and notes about your situation. Calendly passes these to us.
| Purpose | Legal basis | Retention |
|---|---|---|
| Scheduling and holding the consultation; sending the calendar invitation and reminders | Steps at your request before entering a contract (Art. 6(1)(b) GDPR) | Until the consultation has taken place, then 12 months unless you become a client |
| Following up after the consultation with a proposal, if you asked for one | Legitimate interest in responding to your enquiry (Art. 6(1)(f)) | 12 months from last contact |
| Anti-money-laundering checks, if you become a client | Legal obligation under Cyprus AML law (Art. 6(1)(c)) | 5 years after the relationship ends, as the law requires |
2.2 When you contact us by email, phone or WhatsApp
We keep your message and contact details for as long as needed to deal with it, then for 12 months in case you come back. WhatsApp messages are processed by Meta Platforms Ireland under its own privacy terms; we do not use WhatsApp Business API tools that store your conversation on third-party servers.
2.3 When you use the calculator
The figures you type into the calculator are processed in your browser only. They are not sent to us, stored, or logged. If you have accepted analytics cookies, we record only that the calculator was used, not the values you entered.
2.4 Technical data
Our hosting provider, Cloudflare, processes your IP address, browser type, and the pages you request in order to serve the site, protect it from attack, and keep short-term security logs. This happens under Cloudflare's own terms as a processor and is necessary to run the website (Art. 6(1)(f)). Cloudflare retains these logs for a limited period, typically under 30 days.
3. Cookies and similar technologies
When you first visit, no analytics or advertising cookies are set. A banner asks you to choose. Your choice is stored in your browser for 180 days, and you can change it at any time using the "Cookie settings" link in the footer.
| Category | Cookies / storage | Provider | Purpose | Duration |
|---|---|---|---|---|
| Essential | cipb_consent_v1 (localStorage) | Us | Remembers your cookie choice | 180 days |
| Essential | __cf_bm, cf_clearance | Cloudflare | Bot protection and security | Up to 30 minutes / 1 year |
| Analytics (optional) | _ga, _ga_* | Google Analytics 4 | Counts visits, page views, calculator use and scroll depth so we can improve the page. IP addresses are anonymised. | Up to 2 years |
| Advertising (optional) | _gcl_au, _gcl_aw, IDE | Google Ads | Measures whether a visit from a Google ad led to a booking, so we know which ads work. May be used for personalised advertising if you also accept that. | 90 days to 13 months |
| Third-party (optional, only if loaded) | Calendly embed | Calendly LLC | Displays the booking widget. The explainer video is hosted on our own site and sets no cookies. | Session to 2 years |
We use Google Consent Mode v2. If you decline advertising cookies, Google receives only anonymous, cookieless signals that cannot identify you. If you decline everything, Google tags are not loaded at all.
4. Who we share data with
We do not sell personal data. We share it only with the service providers below, each under a data processing agreement:
- Calendly LLC (USA), scheduling. Transfers to the USA are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Google Ireland Ltd, analytics and advertising measurement, only with your consent.
- Cloudflare Inc. (USA/EU), hosting and security. EU-US Data Privacy Framework and Standard Contractual Clauses.
- Meta Platforms Ireland Ltd, if you contact us on WhatsApp.
- Our email provider, for handling correspondence.
We may also disclose data where the law requires it, for example to the Cyprus Tax Department in the course of a ruling application you have instructed us to make, or to a regulator or court.
5. How long we keep data
The retention periods are in the tables above. When a period ends, we delete or anonymise the data. Data we are legally required to keep, such as AML records, is kept for the statutory period and then deleted.
6. Your rights
You have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted, where there is no legal reason for us to keep it
- Restrict or object to processing based on legitimate interest
- Receive your data in a portable format
- Withdraw consent at any time, for example by changing your cookie settings
To exercise any of these, email thanos@cyprus-ip-box.com. We respond within one month. If you are not satisfied, you can complain to the Commissioner for Personal Data Protection, Cyprus, at dataprotection.gov.cy, or to the supervisory authority in your own EU country.
7. Children
This site is for businesses and their advisers. We do not knowingly collect data from anyone under 18.
8. Changes
If we change this policy we will update the date at the top. Significant changes will be flagged on the site.