1. Introduction
CYAUSE Audit Services Ltd ("the Company", "we", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Cyprus Data Protection Law, Law 125(I)/2018. By using our website and services, you consent to the practices described in this Policy.
2. Data Controller
The Data Controller is:
CYAUSE Audit Services Ltd
Registered office: Themistokli Dervi 41, Hawaii Nicosia Tower, Floor 1, Office 101, 1065, Nicosia, Cyprus
Registration number: ΗΕ 287397
Contact: +357 22 336 309
3. Personal Data We Collect
We may collect the following categories of personal data:
- Identification details: name, email address, home or work address, telephone number.
- Demographic data: age, gender, preferences, interests.
- Technical data: IP address, browser type, access times, referring website addresses.
- Usage data: website pages visited, interactions, cookies and similar technologies.
- Communications data: correspondence with us via email, telephone, or online forms.
4. Special Categories of Data
We do not intentionally collect sensitive personal data (e.g. race, religion, political views) unless explicitly provided by you and with your consent.
5. Legal Basis for Processing
We process personal data only where permitted by law:
- Performance of a contract (Article 6(1)(b) GDPR).
- Compliance with legal obligations (Article 6(1)(c) GDPR).
- Legitimate interests (Article 6(1)(f) GDPR).
- Consent (Article 6(1)(a) GDPR).
6. How We Use Your Data
We use your personal data to:
- Provide and manage our services.
- Process payments and manage client accounts.
- Respond to your enquiries and communications.
- Improve our website and services through analytics.
- Send you updates, offers, or newsletters (with consent).
- Comply with legal obligations (AML, tax, accounting).
7. AI Use in Our Services
We may use Artificial Intelligence (AI) tools to support efficiency in our internal workflows, including email management, analysis, and document processing.
- AI tools are used only under human supervision and do not make autonomous decisions.
- Data processed by AI systems is handled in compliance with GDPR.
- Third-party AI providers act as data processors, and Data Processing Agreements (DPAs) are in place.
- You may request that your data not be processed through AI tools by contacting us.
8. Sharing of Personal Data
We do not sell or rent personal data. We may share personal data only with:
- Trusted third-party service providers (e.g. IT, cloud, analytics, courier services).
- Regulators or public authorities where legally required.
- Business partners with your consent.
All third parties are bound by confidentiality and GDPR-compliant agreements.
9. International Transfers
If data is transferred outside the EEA, we ensure it is protected through:
- Adequacy decisions by the European Commission.
- Standard Contractual Clauses (SCCs).
- Other lawful safeguards.
10. Retention of Data
We retain personal data only as long as necessary:
- Client data: 5 years after termination of relationship (AML rules), extendable to 10 years for high-risk clients.
- Marketing data: until consent is withdrawn.
- Website logs and cookies: as per our Cookie Policy.
After expiry of retention, data is securely deleted or anonymised.
11. Your Rights under GDPR
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict processing.
- Data portability.
- Object to processing (including marketing).
- Withdraw consent at any time.
- Lodge a complaint with the Office of the Commissioner for Personal Data Protection (Cyprus).
12. Security of Your Data
We implement appropriate technical and organisational measures to protect personal data, including encryption, access controls, secure servers, and staff training.
13. Cookies
Our website uses cookies to improve user experience and analytics. You can accept or reject cookies via your browser settings. For more details, see our Cookie Policy.
14. Changes to This Policy
We may update this Policy from time to time. The revised version will be posted on our website with the updated date.
15. Contact Us
For any queries about this Privacy Policy or your personal data, please contact us:
Email: dpo@cyprusaccountants.com.cy
Address: Themistokli Dervi 41, Hawaii Nicosia Tower, Floor 1, Office 101, 1065, Nicosia, Cyprus
Phone: +357 22 336 309