Legal
This policy explains what we collect when you use paphosadvisor.com, why, where it is stored, who sees it and how long we keep it. The short version: we only share your details with a partner firm after you have said yes to that introduction.
The short version
We collect what you type into our forms (name, email, phone, your answers), the page you sent it from and any campaign (UTM) tags in the link.
Form submissions are stored in our website database (PostgreSQL, hosted on Railway). Emails are sent through Resend.
Google Analytics 4 and advertising pixels load only after you accept them in the cookie banner. Essential cookies (your consent choice, admin login) do not need consent.
We never pass your details to a lawyer, tax adviser or other partner without your explicit consent for that specific introduction.
We keep enquiry data for 24 months from our last contact, unless you become a client. You can ask us to delete it sooner.
You have rights under the UK GDPR and the EU GDPR, and you can complain to the UK ICO or the Cyprus Commissioner for Personal Data Protection.
Paphos Advisor runs paphosadvisor.com and is the data controller for the personal data described in this policy. That means we decide why and how your data is used, and we are responsible for looking after it.
Paphos Advisor is a founder-led relocation information and introduction service based in Paphos, Cyprus. To reach us about anything in this policy, including a data rights request, use the email address on our contact page and put “Privacy” in the subject line.
This policy covers the website, our forms and tools, our emails and any introductions we make. It does not cover the websites or services of partner firms. Once you are introduced to a partner and choose to work with them, that firm is responsible for your data under its own privacy notice.
We only collect what we need to answer you and to run the site. We do not buy personal data and we do not sell it.
We do not ask for passport numbers, bank details, tax reference numbers or health information in our forms. Please do not send them to us. A partner firm will ask for what it needs directly, under its own terms.
We only share your details with a partner firm (for example a lawyer, tax adviser, accountant, estate agent or insurance broker) when you have explicitly asked for that introduction. We record your consent with the enquiry.
When you agree, we share your name, contact details and the parts of your answers that the partner needs to understand your situation. We do not share anything else. Each introduction needs its own consent: agreeing to a tax adviser introduction does not mean we will also pass you to an estate agent.
Once introduced, the partner is an independent controller of the data you give them. Some partners pay us a referral fee if you become their client. This never changes what you pay and is explained on our referral disclosure page.
You can withdraw consent before an introduction is made by replying to any of our emails. If an introduction has already been made, we will tell the partner you have withdrawn, but you will also need to contact them directly about data they already hold.
These providers act as our processors. They may only use your data to provide their service to us.
| Service | What it does for us | Data involved |
|---|---|---|
| Railway | Hosts our website and the PostgreSQL database behind our content management system (CMS) | Form submissions, answers, tracking fields, admin accounts |
| Resend | Sends transactional email: your confirmation or auto-reply, and the notification to us | Your name, email address and the content of the enquiry |
| Cloudflare R2 | Stores the website’s images and media files | Media files only. Form submissions are not stored here |
| Google (Google Analytics 4 and Google Tag Manager) | Measures site usage, only after consent | Cookie IDs, pages viewed, device data, approximate location |
| Meta (Meta Pixel) | Measures advertising, only after consent and only if we are running Meta ads | Cookie IDs, page visits, form completion events |
| Scheduling tool, if you book a call | Handles bookings when you choose a call slot | Name, email, chosen time |
The list above reflects the services we use as of 27 September 2026. If we add a provider that handles personal data, we will update this page.
Several of our providers are based in, or use infrastructure in, the United States. When personal data leaves the UK or the European Economic Area, we rely on a recognised safeguard: an adequacy decision (including the EU-US Data Privacy Framework and its UK extension, where the provider is certified), the EU Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum.
You can ask us for more detail about the safeguard used for a particular provider.
Essential cookies keep the site working: one remembers your cookie choice, and one keeps our own team logged in to the admin area. They do not track you.
Google Analytics 4, Google Tag Manager and any advertising pixel do not load until you accept them in the cookie banner. If you reject them, or ignore the banner, they stay off. You can change your mind at any time. The full list is in our cookie policy.
Under the UK GDPR and the EU GDPR you have the right to:
We do not make decisions about you based solely on automated processing. The plan wizard suggests guides and partner types, but a person reviews every enquiry before any introduction.
To use any of these rights, email us using the address on our contact page. We may ask you to confirm your identity. We reply within one month. There is no fee unless a request is clearly unfounded or excessive.
Please contact us first so we can try to put things right. You also have the right to complain to a data protection regulator:
If you live elsewhere in the EU, you can also complain to the supervisory authority in your own country.
We use encrypted connections (HTTPS) across the site. Access to the CMS and the lead database is limited to named admin accounts. Our providers apply their own technical and organisational security measures. No system is perfectly secure, so if we ever discover a breach that is likely to put your rights at risk, we will tell you and the relevant regulator as the law requires.
This website is for adults planning a move. We do not knowingly collect data from anyone under 18. If you tell us about your children (for example their ages or school stage) to get school or area advice, we use it only for that purpose and keep it under the same rules as the rest of your enquiry.
We update this policy when our services or the law change. The date at the top of the page shows when it was last reviewed. If a change affects how we use data you have already given us, we will tell you by email before it takes effect.
Related pages: cookie policy, terms of use, referral disclosure and all legal information.
