Privacy

Business listings

Contact details for a sole trader are personal data under the GDPR, even when they are published as business details. We treat them that way.

What we hold

Trading and legal name, registration number, business address, business telephone, business email, website, the services a company documents, and any professional registrations we have been able to verify.

Where it comes from

Public registers (the Department of Registrar of Companies), professional bodies whose membership can be independently checked, OpenStreetMap, and the companies’ own websites. Every individual field records its source and the date it was retrieved.

Lawful basis

Legitimate interest under Article 6(1)(f): operating a directory that helps people in Cyprus find and compare businesses that have chosen to trade publicly. We have carried out and documented a legitimate interest assessment. It is available on request.

What we do not hold

No identification numbers, no health data, no financial account details, no photographs of identifiable private individuals, and no special category data of any kind.

Your rights

You can ask what we hold, have it corrected, or object to it being held at all. Use the removal form. We respond within 30 days.

A removed listing stays removed. It is marked as suppressed in our records, which is what stops the crawler from reinstating it the next time it sees the company. We keep the suppression marker itself so that we can honour the request permanently.

Visitors to this site

We run no analytics on this site. No cookies are set, no visitor statistics are collected, and nothing you do here is measured or profiled. We do not build advertising profiles, and we do not sell or share data with advertising networks. That is why you are not seeing a cookie banner.

Our hosting provider processes technical request data — IP address, user agent, timing — as part of serving the site and protecting it from abuse.

Our crawler

We operate a crawler that identifies itself as cy-network-crawler. It respects robots.txt, limits itself to one request per second per host, and does not attempt to access private or authenticated areas. How to block it.

Processors

We use third parties for hosting, database, media storage and content production. Each operates under a data processing agreement. We do not transfer personal data outside the arrangements those agreements cover.

Contact and complaints

Data protection enquiries go to the contact address published on our contact page. If you are not satisfied with how we handle a request, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus.

This policy applies to legality.cy. Our other sites publish their own, with the same substance.