Home › Privacy Policy

Privacy Policy

Effective date: May 10, 2026
Last updated: May 10, 2026

This Privacy Policy explains how Primartech Ltd processes personal data in line with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and the Cyprus Data Protection Law (Law 125(I)/2018).

On this page

Data controller
Personal data we collect
Purposes and legal basis
Recipients
International transfers
Retention
Your rights
Right to lodge a complaint
Cookies

Data controller

Primartech Ltd
Registration: HE 453001
Registered office: 61 Agiou Pavlou Street, Nicosia 1107, Cyprus
Contact: Contact form

Personal data we collect

Identification data: first name, last name, company name
Contact data: business email address, phone number (optional)
Project data: project type, start timing, message content, brand assets, billing information
Technical data: IP address, browser type, operating system, pages visited, referrer

Providing personal data via our contact form is necessary to respond to your inquiry and to enter into a service agreement.

Purposes and legal basis

Purpose

Legal basis (GDPR Art. 6)

Respond to your inquiry and provide a proposal

Pre-contractual measures (Art. 6(1)(b))

Deliver web design services to clients

Performance of contract (Art. 6(1)(b))

Comply with legal obligations (tax, accounting)

Legal obligation (Art. 6(1)(c))

Improve our website through analytics

Consent (Art. 6(1)(a))

Defend our rights in case of dispute

Legitimate interest (Art. 6(1)(f))

Recipients

We share personal data only with processors acting under written contract:

Hostinger International Limited (website and email hosting)
Google LLC (Google Analytics, with consent)
Banking and accounting providers (invoicing, tax compliance)
Legal counsel (when required for the defense of rights)

International transfers

When personal data is transferred outside the European Economic Area, we ensure protection through:

Adequacy decisions of the European Commission, or
Standard Contractual Clauses approved by the European Commission, or
The EU-US Data Privacy Framework.

Retention

Data type

Retention period

Contact form submissions (no project)

12 months

Client project data

Duration of project + 5 years

Invoices and accounting records

7 years (Cyprus tax law)

Website analytics (aggregated)

26 months

Your rights

Under GDPR you have the right to:

Access (Art. 15)
Rectification (Art. 16)
Erasure (Art. 17)
Restriction of processing (Art. 18)
Data portability (Art. 20)
Object (Art. 21)
Withdraw consent (Art. 7)

To exercise these rights, use the contact form. We respond within 30 days.

Right to lodge a complaint

You have the right to lodge a complaint with the Cyprus supervisory authority:

Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
https://www.dataprotection.gov.cy

Cookies

For cookies and tracking technologies, see our Cookie Policy.