Privacy Policy
Last updated: 3 June 2026
ECOCLEAN CYPRUS
Privacy Policy
Effective Date: 1 June 2026|Version 1.0
This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR) and the laws of the Republic of Cyprus.
This policy covers: personal data collected via our website, quote forms, and booking forms; your rights as a data subject under GDPR; how we use cookies and similar technologies; and how to contact us or lodge a complaint.
1.Who We Are — Data Controller
EcoClean Cyprus is the Data Controller for personal data collected through this website and in connection with our professional cleaning services. Our contact details are:
EcoClean Cyprus
Email:[email protected]
Phone:+357 99 766398
Address: Xylotympou, Cyprus
For data protection queries, please use the subject line "Data Protection Enquiry" when contacting us by email.
2.Personal Data We Collect
We collect and process the following categories of personal data:
2.1Data You Provide Directly
When you submit an online quote request or book a service through our website, you may provide:
Full name
Location / service address (town, area, or full address)
Phone number
Email address
Details about the service requested (e.g., property type, service type)
Any additional information you include in a free-text enquiry field
2.2Data Collected Automatically
When you visit our website, we automatically collect certain technical data through cookies and similar technologies, including:
IP address (anonymised where possible)
Browser type and version
Pages visited and time spent on the Site
Referring URL
Device type and operating system
This data is used for analytics and to improve the performance of our website. Please see Section 10 (Cookie Policy) for full details.
3.How We Use Your Data — Purpose & Legal Basis
We process your personal data for the following purposes and on the following legal bases under GDPR Article 6:
3.1To Provide Our Services (Article 6(1)(b) — Performance of a Contract)
We use your name, location, phone number, and email address to respond to quote requests, confirm bookings, coordinate service delivery, send appointment reminders, and handle any follow-up communication about your service.
3.2To Comply with Legal Obligations (Article 6(1)(c))
We retain certain transaction records to comply with tax, accounting, and other legal obligations applicable under Cyprus and EU law.
3.3Legitimate Interests (Article 6(1)(f))
We may process your data to: (a) improve our services and website; (b) detect and prevent fraud; and (c) send you relevant service updates or follow-up communications after a completed service. You have the right to object to processing based on legitimate interests — see Section 8.
3.4Consent (Article 6(1)(a))
Where we send marketing communications or use non-essential cookies, we will only do so with your explicit prior consent. You may withdraw consent at any time (see Section 8).
4.Marketing Communications
We will only send you promotional emails or messages if you have expressly opted in to receive them. Each marketing communication will include a clear and easy method to unsubscribe or opt out.
We do not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes.
5.Sharing Your Data
We do not sell or rent your personal data to any third party. We may share your data with:
Service providers who assist us in operating our website or delivering our services (e.g., web hosting, email delivery, CRM tools), under strict data processing agreements.
Analytics providers (e.g., Google Analytics) to help us understand how our website is used. Data shared with analytics providers is aggregated or anonymised where possible.
Legal authorities or regulators, where required to do so by law or court order.
Where we use third-party processors, we ensure they are bound by GDPR-compliant data processing agreements and provide adequate safeguards for your data.
6.International Data Transfers
Cyprus is a member state of the European Union. Your data is primarily stored and processed within the EEA. Where we use third-party service providers who process data outside the EEA (for example, where cloud services are hosted in the USA), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or reliance on an adequacy decision.
7.Data Retention
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with our legal obligations:
Quote enquiry data (where no booking followed): retained for up to 6 months, then deleted.
Booking and service records: retained for up to 7 years to comply with tax and accounting requirements under Cyprus law.
Marketing consent records: retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes.
Website analytics data: retained in accordance with the settings of the relevant analytics tool (typically up to 26 months for Google Analytics).
When data is no longer needed, it will be securely deleted or anonymised.
8.Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
Your Right
What It Means
Right of Access
You can request a copy of the personal data we hold about you.
Right to Rectification
You can ask us to correct inaccurate or incomplete data.
Right to Erasure
You can request deletion of your data where there is no lawful basis for us to retain it ("right to be forgotten").
Right to Restriction
You can ask us to restrict processing of your data in certain circumstances.
Right to Data Portability
You can request your data in a structured, machine-readable format for transfer to another controller.
Right to Object
You can object to processing based on legitimate interests or for direct marketing purposes.
Right to Withdraw Consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Right to Complain
You have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or any EU supervisory authority.
To exercise any of these rights, please contact us at [email protected] with the subject line "Data Subject Rights Request". We will respond within 30 days. In some cases, we may need to verify your identity before processing your request.
You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection at: www.dataprotection.gov.cy or by calling +357 22 818 456.
9.Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, disclosure, alteration, or destruction. These measures include:
SSL/TLS encryption for data transmitted via our website.
Access controls limiting data access to authorised personnel only.
Regular reviews of our data protection practices.
While we take all reasonable steps to protect your data, no method of transmission over the internet is completely secure. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by GDPR.
10.Cookie Policy
This section forms part of our Privacy Policy and explains in detail how EcoClean Cyprus uses cookies and similar technologies on our website.
10.1What Are Cookies?
Cookies are small text files placed on your device (computer, tablet, or mobile) when you visit a website. They allow the website to recognise your device on subsequent visits, remember your preferences, and collect usage data to help us improve the Site.
10.2Types of Cookies We Use
We use the following categories of cookies:
Strictly Necessary Cookies
These cookies are essential for the Site to function and cannot be switched off. They do not require your consent. They include session management cookies and security tokens used by our quote and booking forms.
Functional Cookies
These cookies allow the Site to remember choices you make (such as your cookie consent preference). They improve user experience but are not essential.
Analytics Cookies
We use Google Analytics to understand how visitors use our Site — which pages are most popular, where visitors come from, and how long they spend on the Site. This data is aggregated and does not personally identify you. Analytics cookies are only set if you have consented.
Marketing / Targeting Cookies
We may use marketing cookies (such as the Meta/Facebook Pixel) to measure the effectiveness of our paid advertising campaigns. These are only set with your explicit consent.
10.3Cookie Details
Cookie Name / Type
Category
Purpose
Duration
Session cookie
Strictly necessary
Maintains your session as you navigate the site
Session (deleted on browser close)
CSRF token
Strictly necessary
Prevents cross-site request forgery on forms
Session
_ga, _gid
Analytics
Google Analytics — tracks page visits and usage patterns (anonymised)
Up to 2 years
_gcl_au
Analytics / Marketing
Google Ads conversion tracking
90 days
Consent cookie
Functional
Remembers your cookie consent choice
12 months
fbq / Meta Pixel
Marketing
Facebook/Meta Pixel — tracks conversions from paid ads (if enabled)
90 days
10.4Managing Your Cookie Preferences
When you first visit our Site, you will be shown a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customise your preferences. You can change your preferences at any time by clearing your browser cookies and revisiting the Site.
You can also control cookies directly through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of our Site. For more information on managing cookies, visit www.allaboutcookies.org.
10.5Third-Party Cookies
Some cookies on our Site are set by third parties (such as Google or Meta) over whom we have no direct control. These third parties operate under their own privacy policies:
Google Privacy Policy: policies.google.com/privacy
Meta (Facebook) Privacy Policy: www.facebook.com/privacy/policy
10.6Do Not Track
Some browsers offer a "Do Not Track" (DNT) setting. Our Site does not currently respond to DNT signals, but we will review this position as industry standards evolve.
11.Children's Privacy
Our Services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it promptly.
12.Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The current version will always be available on our Site, with the effective date prominently displayed. Where changes are significant, we will notify you by email (if we hold your email address) or via a prominent notice on the Site.
Your continued use of our Site after any update constitutes acceptance of the revised Policy.
13.Contact & Complaints
For any questions about this Privacy Policy or to exercise your data rights, please contact:
EcoClean Cyprus — Data Protection Contact
Email:[email protected](Subject: "Data Protection Enquiry")
Phone:+357 99 766398
Address: Xylotympou, Cyprus
If you are not satisfied with our response, you have the right to complain to the Cyprus Commissioner for Personal Data Protection:
Website: www.dataprotection.gov.cy
Telephone: +357 22 818 456
Address: 1 Iasonos Street, 1082 Nicosia, Cyprus
© 2026 EcoClean Cyprus. All rights reserved.