Privacy Policy

Last updated: 5 November 2026

1. Who we are

ACLA Auditors Ltd (registration number HE 441954), 80 Ayiou Georgiou Street, 1st floor , 2303 Lakatamia, Nicosia, Cyprus (“we”, “us”) is the controller of personal data collected through this website. Contact: [email protected], tel. +357 22 422 880.

2. What data we collect

• Enquiry form: name, email, phone (optional), company (optional), service of interest and your message.
• Technical data: a one-way pseudonymised value derived from your IP address, used only to limit spam (kept for up to one hour); standard server logs kept by our hosting provider.
• Cookies: see our Cookie Policy.

Please do not send us confidential information (bank details, ID or tax numbers, documents) through the website form.

3. Why we use it and our legal basis

• To respond to your enquiry and take steps before entering into an engagement — Art. 6(1)(b) GDPR.
• To protect the website against spam and misuse — our legitimate interest, Art. 6(1)(f) GDPR.
• To load external content (maps, booking tools) and analytics — only with your consent, Art. 6(1)(a) GDPR. You can withdraw consent at any time via “Cookie settings”.
• If you become a client, we process additional data to meet our legal obligations, including anti-money-laundering client identification — Art. 6(1)(c) GDPR. This is covered by our engagement documents.

4. Who receives your data

Our website hosting and email service providers, acting on our behalf; Google (Maps, Analytics) only if you consent; public authorities where we are required by law. We do not sell personal data or use it for automated decision-making.

5. Transfers outside the EEA

If you consent to Google services, data may be processed in the United States. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission’s standard contractual clauses.

6. How long we keep it

Website enquiries are kept for up to 24 months and then deleted automatically, unless they lead to an engagement — in that case, records are kept for the periods required by law.

7. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing, to data portability and to withdraw consent. To exercise them, contact [email protected]. You can also lodge a complaint with the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy).

8. Security

We use encrypted connections (HTTPS), access controls and data minimisation. No method of transmission over the internet is completely secure, which is why we ask you not to send confidential data through the form.

9. Changes

We may update this policy. The date of the latest version is shown at the top of this page.