Privacy Policy

Last updated: January 2026

1. Data Controller

UltimateWorkz Cyprus ("we", "us", or "our") is the data controller responsible for your personal data. We are a digital marketing and web design agency operating from Cyprus, serving clients across Cyprus, the European Union, and internationally.

Contact: For any privacy-related enquiries, please email us at hello@ultimateworkz.cy.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Contact Information: Name, email address, phone number, and business name provided through our contact forms, questionnaires, or direct communications.
  • Project Information: Details about your business, project requirements, preferences, and any materials you provide for service delivery.
  • Communication Records: Correspondence via email, WhatsApp, or other channels related to enquiries, proposals, and ongoing projects.
  • Technical Data: IP address, browser type, device information, and browsing behaviour collected automatically when you visit our website.
  • Analytics Data: Anonymised usage statistics to understand how visitors interact with our website.

3. Lawful Bases for Processing

Under Article 6 of the General Data Protection Regulation (GDPR), we process your personal data based on the following lawful grounds:

  • Contract Performance: Processing necessary to deliver the services you have requested or to take pre-contractual steps at your request.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our services, marketing our agency, and maintaining business relationships, provided these do not override your fundamental rights.
  • Consent: Where you have given explicit consent for specific processing activities, such as receiving marketing communications.
  • Legal Obligation: Processing necessary to comply with legal or regulatory requirements under Cyprus and EU law.

4. How We Use Your Data

We use your personal data for the following purposes:

  • Responding to enquiries and providing quotes or proposals
  • Delivering contracted services including web design, SEO, content creation, and marketing
  • Managing client relationships and project communications
  • Processing payments and maintaining financial records
  • Sending relevant updates about your project or our services
  • Marketing communications (only with your consent)
  • Improving our website and service offerings through analytics
  • Complying with legal and regulatory obligations

5. Cookies and Analytics

Our website uses cookies and similar technologies to enhance your browsing experience and collect anonymised analytics data. We use tools similar to Google Analytics to understand website traffic patterns and user behaviour.

Where possible, we configure analytics tools to anonymise IP addresses and limit data retention. You can manage cookie preferences through your browser settings. Essential cookies required for website functionality cannot be disabled.

6. Data Sharing and Processors

We may share your personal data with trusted third-party service providers who assist us in operating our business. These include:

  • Hosting Providers: Cloud infrastructure services that host our website and client projects.
  • Analytics Services: Tools that help us understand website performance and user behaviour.
  • Communication Tools: Email and messaging platforms used for client correspondence.
  • Payment Processors: Secure payment services for processing invoices and transactions.

All third-party processors are contractually bound to process data only on our instructions and in compliance with GDPR requirements. We do not sell your personal data to third parties.

7. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). Where data is transferred internationally, we ensure appropriate safeguards are in place, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Adequacy decisions recognising equivalent data protection standards
  • Binding corporate rules for intra-group transfers

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including:

  • Enquiry Data: Retained for up to 2 years if no engagement proceeds, to handle follow-up communications.
  • Client Project Data: Retained for the duration of the project plus 7 years thereafter for legal and accounting purposes.
  • Marketing Data: Retained until you withdraw consent or unsubscribe.
  • Analytics Data: Typically retained in anonymised form for up to 26 months.

9. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.
  • Right to Restrict Processing: Request limitation of processing in certain circumstances.
  • Right to Data Portability: Receive your data in a structured, commonly used format for transfer to another controller.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@ultimateworkz.cy. We will respond to your request within one month.

10. Right to Complain

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with a supervisory authority. In Cyprus, this is the Commissioner for Personal Data Protection:

Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
Website: www.dataprotection.gov.cy

11. Security Measures

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications, secure hosting infrastructure, access controls, and regular security reviews.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when revisions were last made. We encourage you to review this policy periodically.

13. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact:

UltimateWorkz Cyprus
Email: hello@ultimateworkz.cy