legal

Privacy policy

Last updated: [DATE]

This site collects as little as it can. Here is exactly what we hold, why, and what you can do about it.

Who we are

[LEGAL ENTITY NAME] (“we”) is the data controller for this website, a-anchortech.com.

Registered address
[ADDRESS, Nicosia, Cyprus]
Registration no.
[HE NUMBER]
VAT no.
[VAT NUMBER]
Email
[DATA REQUESTS EMAIL]

We have not appointed a Data Protection Officer; we are not required to. Write to the address above for anything in this policy.

What we collect

Enquiry forms. When you send an enquiry we receive your name, your email address and your message. Optionally, if you choose to tell us, the type of project, a budget range and, on the contact page, the name, size and file type of an attachment. Each form also records the time it was opened and contains a hidden field that only automated spam bots fill in; we use both to discard spam, nothing else.

Server logs. Our hosting provider records the IP address, browser type, requested page and time of each request, as every web server does, for security and to keep the site running.

That is all. We do not run analytics, advertising, tracking pixels, fingerprinting, chat widgets or accounts, and we do not buy or receive data about you from anyone else. See our cookies page.

  • Answering your enquiry and, if it goes further, preparing a proposal: Article 6(1)(b) GDPR, steps at your request before a contract.
  • Keeping the site secure and filtering spam: Article 6(1)(f), our legitimate interest in running a working website, which does not override your interests because the data is minimal and short-lived.

We do not rely on consent for anything on this site, and we do not use your data for marketing, profiling or automated decisions.

Who we share it with

  • Vercel Inc. (USA), which hosts this site and processes the server logs. Vercel is our processor under its Data Processing Agreement; transfers outside the EEA are covered by the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
  • [EMAIL PROVIDER NAME, COUNTRY], which delivers enquiry emails to us as our processor.

We do not sell, rent or share your data with anyone else, and we only disclose it if the law requires us to.

How long we keep it

Enquiries that don’t lead to work
[12] months from our last exchange, then deleted.
Enquiries that become projects
For the life of the engagement and as long afterwards as Cyprus law requires us to keep business records.
Server logs
Retained by Vercel for a short period under its standard log retention, then deleted.

Your rights

Under the GDPR you can ask us to: give you a copy of the data we hold about you; correct it; delete it; restrict how we use it; give it to you in a portable format; or stop using it where we rely on legitimate interest. Email [DATA REQUESTS EMAIL]. We answer within one month and do not charge for this. We may ask you to confirm your identity first.

Complaints

If you think we have handled your data badly, tell us first and we will try to fix it. You also have the right to complain to the Cyprus supervisory authority: Office of the Commissioner for Personal Data Protection, Kypranoros 15, 1061 Nicosia, commissioner@dataprotection.gov.cy, dataprotection.gov.cy.

Changes to this policy

When we change it we update the date at the top. If a change affects what we do with data you have already given us, we will email you.

This policy is governed by the GDPR (Regulation (EU) 2016/679) and the Cyprus Law 125(I)/2018.