Privacy Policy

Last updated: 2026-10-04

1. Who we are

The data controller for this website is L. Soteriou Cyprus Ltd, trading as ApostilleCyprus, 4 Iacovou Patatsou, Shop 1-2, 2000 Strovolos, Nicosia, Cyprus. Phone: +357 22 338888, email: info@apostillecyprus.com.cy.

2. What data we process

  • Messages you send us on WhatsApp, Viber or by phone or email: your name, phone number, the content of your message and any documents you send.
  • Documents you give us for certification, which may contain personal data (e.g. civil status, academic or company information).
  • Website usage data, only if you consent: pages visited, device/browser information and approximate location, via Google Analytics 4 and Google Tag Manager.
  • Marketing data, only if you consent: Meta Pixel events used to measure and improve our Facebook/Instagram advertising.

This website has no contact form and does not ask you to create an account.

3. Why we process it and legal basis

  • To answer your enquiry and provide the service you request — performance of a contract or steps before entering a contract (Art. 6(1)(b) GDPR).
  • To comply with legal obligations such as accounting and tax records — legal obligation (Art. 6(1)(c)).
  • Analytics and marketing cookies — your consent (Art. 6(1)(a)), which you can withdraw at any time via “Cookie settings” in the footer.

4. Who receives your data

Government authorities, embassies, consulates and certified translators, only as needed to complete your request. Technology providers acting on our behalf: Vercel Inc. (website hosting), Google Ireland Ltd (analytics, if you consent), Meta Platforms Ireland Ltd (advertising measurement, if you consent). If you contact us on WhatsApp or Viber, the messaging provider (WhatsApp Ireland Ltd / Viber Media S.à r.l.) processes your messages under its own privacy policy.

5. International transfers

Some providers may transfer data outside the EEA (for example to the USA). Such transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.

6. How long we keep data

Enquiry messages: as long as needed to handle your request and any follow-up. Service and invoicing records: as long as required by Cyprus tax and accounting law. Copies of your documents are not kept longer than needed to complete the service. Analytics data: up to 14 months. Your cookie choice: 12 months.

7. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time without affecting prior processing. To exercise your rights, contact us using the details above.

You also have the right to lodge a complaint with the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus — www.dataprotection.gov.cy.

8. Security

The site is served only over HTTPS. Physical documents are handled by our staff with care and kept confidential.

9. Changes

We may update this policy; the date at the top shows the latest version.