Privacy policy
Controller. LEGARITHM CYPRUS LTD (HE 465393), Arch. Makarios III Avenue 1–7, Mitsis Building 3, 3rd floor, Office 302, 1065 Nicosia, Cyprus (“Kyprio”, “we”). For anything about your data, write to kalimera@kyprio.io.
What we collect and why
Enquiry form. Your name, email address, phone number (required, so we can reach you on WhatsApp or Telegram if you prefer), the service you pick, your message, the page you sent it from and the site language. We use these details to answer your request and, if you become a client, to start the engagement. Legal basis: steps taken at your request before a contract (GDPR art. 6(1)(b)).
How you found us. When you arrive, the site keeps a short note in your browser’s session storage: the first page you landed on, the referring website and any campaign tags in the link (UTM parameters and ad click IDs such as gclid or fbclid). The note stays in your browser, disappears when you close the tab and reaches us only if you send the form or email us from a link on the site. If you allowed analytics cookies, the form also sends your Google Analytics client ID. If you email us from a link on the site, the email subject carries a short reference code whose first letter shows the type of channel you came from (for example search, AI assistant or social). We use this to see which pages and channels bring enquiries. Legal basis: our legitimate interest in understanding where enquiries come from (art. 6(1)(f)).
IP address. The form server records the IP address the request came from, to limit abuse and spam, and keeps it with your enquiry record for the same period as the enquiry. Legal basis: legitimate interest in keeping the form secure (art. 6(1)(f)).
Email, phone and messengers. If you write to us by email, call us, or message us on Telegram or WhatsApp, we receive whatever you send and your contact details on that channel. The messaging service’s own privacy terms apply to its part.
Analytics. Only after you click “Allow” in the cookie notice do we load Google Analytics 4, with IP anonymisation. It sets two cookies (_ga and _ga_<ID>) to count visits and see which pages help. If you decline, these cookies are not set. We also use Ahrefs Web Analytics, which sets no cookies and stores nothing in your browser; it records page views in aggregate. Legal basis: your consent for Google Analytics (art. 6(1)(a)); legitimate interest for cookieless Ahrefs statistics (art. 6(1)(f)).
Server logs. Our web server keeps standard access logs (IP address, requested URL, browser type, time) for security and troubleshooting, and rotates them on a short schedule.
Cookies and browser storage
| Name | Where | Purpose | When |
|---|---|---|---|
kyprio-consent | Local storage | Remembers your cookie choice | After you choose |
ky_utm | Session storage | First page, referrer and campaign tags for the enquiry form | Until you close the tab |
_ga, _ga_<ID> | Cookies (Google Analytics) | Visit statistics | Only after you click “Allow” |
You can change your choice at any time with Cookie settings at the bottom of every page. Withdrawing consent removes the Google Analytics cookies and shows the notice again.
Who receives your data
We do not sell or rent personal data and do not run advertising trackers. Your enquiry is handled by the team working on your request, using these providers:
- DigitalOcean hosts the website and the form server in Frankfurt, Germany.
- NetHunt CRM stores enquiries and our correspondence with you.
- Slack, our internal messaging tool, may carry notifications about new enquiries.
- Resend delivers the automatic confirmation email, when one is sent after you submit the form.
- Forward Email delivers mail sent to our kyprio.io address to our inbox.
- Google (Google Analytics, only with your consent) and Ahrefs (cookieless statistics) provide website analytics.
Where service delivery requires it, for example an audit carried out by a licensed Cyprus audit firm, we share the minimum necessary and tell you first.
Transfers outside the EU
Some of these providers, or their sub-processors, process data in the United States or other countries outside the European Economic Area. Where they do, the transfer relies on the EU–US Data Privacy Framework for certified companies or on the European Commission’s standard contractual clauses.
How long we keep it
We keep an enquiry for as long as we are discussing it with you. If you become a client, we keep your records for the period Cyprus law requires for anti-money-laundering, tax and accounting purposes after the relationship ends. If you do not become a client, we keep the enquiry only while it may still be useful for answering follow-up questions, and you can ask us to delete it at any time. Server logs are kept for a short period and then overwritten.
Your rights
Under the GDPR you may ask for access to your data, correction, deletion, restriction or a copy in a portable format, and you may object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. Write to kalimera@kyprio.io; we answer within one month.
You also have the right to complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus: dataprotection.gov.cy.