YOUR INFORMATION. YOUR RIGHTS.
How we handle your information when you browse properties, contact our team or use our support services.
Last updated: 11 September 2026
CyprusMoveProperty.ai is a brand of CyprusMove Limited, a private limited company registered in England and Wales, company number 16541237. CyprusMove Limited is the Data Controller: we determine why and how your personal data is used for our website and services.
UK registered officeCyprus operations office: Vasilika Center, Shop 1, Apostolou Pavlou Ave-Block 1, Paphos 8046, Cyprus.
Controller contact: info@cyprusmove.com · +357 95 152 441.
Data Protection Officer (DPO): Data Privacy Services
info@dataprivacyservices.co.uk. You can contact the DPO directly about this policy, your rights or a concern about our handling of your information.
This notice addresses the UK GDPR and Data Protection Act 2018, as amended, and the EU General Data Protection Regulation (EU GDPR) and applicable Cyprus data protection law where relevant. Applicable electronic communications and cookie rules also apply.
We normally receive information directly from you. We may also receive relevant information from a person acting on your behalf, or from property, legal, insurance and other service partners involved in an introduction or service you request. Public property information is supplied by our listing partners through the property catalogue. If we receive personal data indirectly, we provide the relevant privacy information within the legally required period, normally within one month and no later than our first communication or disclosure.
Fields marked as required are needed to respond to the particular request. Providing information is generally voluntary, but we may be unable to arrange an introduction or quotation without the necessary details. We will explain any contractual or legal requirement before requesting additional documents.
Please do not enter passport copies, bank details, medical information or other sensitive information into public forms or AI chats. If sensitive information is necessary for a service, we will explain the purpose, the appropriate secure channel and the additional legal condition before collecting it. Our services are intended for adults; children’s details should only be supplied by an authorised parent or guardian where needed for an agreed family relocation service.
We use your contact details and requirements to answer questions, identify properties, arrange viewings and coordinate requested support. Our basis is taking steps at your request before a contract, or performing our contract with you. For general enquiries and business contacts, we rely on our legitimate interest in responding and operating our business.
We use relevant details to arrange the partner introduction or quotation you request. This is based on the steps you ask us to take before a contract or our legitimate interest in facilitating your requested introduction. Where a form expressly requests consent to sharing, we rely on that consent for the specified disclosure.
We process technical information and search inputs to deliver website functions, prevent abuse, diagnose faults and protect the service. Our legitimate interests are a reliable and secure website and useful responses to visitor requests. Where consent is required for non-essential storage or tracking, that processing must be based on consent.
We maintain service and transaction records to fulfil contracts, meet applicable accounting or legal duties and handle complaints. Where records are needed to establish, exercise or defend legal claims, we rely on our legitimate interest in protecting our legal position.
The property newsletter is optional and separate from enquiries and services. If you select the newsletter consent box, CyprusMove Limited uses your email address and full name to send property updates, buying guidance and information about client benefits. Our lawful basis is your consent under the UK GDPR and EU GDPR, together with the applicable electronic-marketing rules. We record the signup source, time, consent wording/version and subscription status as evidence of your choice. New subscribers receive a confirmation email and are added as pending until they confirm; existing confirmed audience members can update their property-newsletter preference. You can withdraw consent at any time using the unsubscribe link in each newsletter or by emailing info@cyprusmove.com. Withdrawal does not affect earlier lawful processing or your access to our services. We keep subscription details while you remain subscribed, subject to periodic review, and limited consent and suppression records as needed to demonstrate compliance and respect your choice.
When relying on legitimate interests, we consider the impact on your rights and reasonable expectations. You may object to this processing. If we propose a new use of your information, we will explain it and establish the appropriate lawful basis before proceeding.
Authorised CyprusMove staff and service providers receive information as needed for their role. These may include hosting and website support providers (including Hostinger), email and business systems providers, AI service providers, professional advisers and the DPO. We use Mailchimp (The Rocket Science Group LLC, part of Intuit) to manage newsletter subscriptions and deliver emails. Mailchimp receives your email address, full name, subscription preferences and related consent/delivery records. Property-newsletter signups are labelled property in our CyprusMove Limited audience. Newsletter consent does not authorise unrelated partner marketing.
When you ask for an introduction or support, we may share the necessary details with relevant property agents, developers, landlords, insurance brokers, lawyers, tax advisers, relocation or property-service partners. We limit sharing to what is relevant to your request. Partners who decide independently how to provide their professional services are separate controllers and should provide their own privacy notices.
Information may also be disclosed where required by law, to competent authorities, or where necessary for a legal claim. We do not sell your personal data. An introduction is not permission for a partner to use your details for unrelated marketing.
Search tools process the preferences you enter to identify relevant properties. Natural-language property queries are sent to the CyprusMove search service for processing. The residency assistant is provided through CyprusMove’s assistant service and its AI technology providers; your submitted messages are sent to that service to generate a response. Chat history may also be stored in your browser. Include only the information needed for your question.
These tools provide search results and general information. They do not make decisions with legal or similarly significant effects about you, approve finance, determine insurance cover or decide residency eligibility. Ask our team for a human review or clarification. External AI providers’ processing and retention arrangements may differ; contact the DPO for details of the providers and safeguards relevant to your interaction.
Favourites are stored locally in your browser and are not synchronised across devices. You can remove favourites individually or clear your browser’s site data. Clearing site data may also remove saved chat history and preferences. Session and security technologies support forms and protect requests against misuse. The newsletter prompt remembers whether it has been shown during your browser session so it does not repeatedly interrupt you. The delayed prompt appears only on the homepage and Contact Us page. The signup form does not load Mailchimp tracking scripts. Mailchimp processes delivery, bounce and unsubscribe information. Newsletter consent does not by itself authorise non-essential email-open or click tracking; any such tracking requires the applicable separate consent or lawful exemption. Browser settings can restrict storage, although some requested functions may then stop working.
Maps use external mapping resources, including OpenStreetMap tiles. Where videos or other externally hosted resources load, their providers receive technical connection information such as your IP address and browser details. Embedded video services may include YouTube or Vimeo. Their own notices explain their independent processing. Links to other websites take you to services covered by their own privacy policies.
Non-essential cookies or similar technologies require the applicable consent or other lawful exemption; a privacy notice alone does not provide consent. You can ask the DPO about the storage and external services used on a particular page.
Our business operates between the United Kingdom and Cyprus. Service providers, including hosting, communications and AI providers, may process information in other countries. Where a transfer is subject to UK or EU restrictions, an applicable adequacy decision or an appropriate safeguard is required, such as the European Commission’s Standard Contractual Clauses and, for UK transfers where required, the UK International Data Transfer Agreement or UK Addendum. Additional protections are used where the transfer assessment requires them.
Mailchimp may process newsletter information in the United States and other countries. Its Data Processing Addendum includes contractual safeguards for restricted transfers, including EU Standard Contractual Clauses and the UK Addendum where applicable. See Mailchimp’s Data Processing Addendum at https://mailchimp.com/legal/data-processing-addendum/ and Intuit’s privacy statement at https://www.intuit.com/privacy/statement/. Contact our DPO to request information about the destinations and applicable safeguards for your data, including a copy of relevant safeguards subject to necessary confidentiality protections.
We retain personal data only for as long as it is needed for the stated purpose and applicable legal requirements. Retention depends on the nature of your request and whether it leads to an ongoing service:
Information no longer needed is deleted or anonymised, subject to applicable legal holds and backup lifecycles. The DPO can explain the retention criteria applicable to a particular record or consider an erasure request.
Depending on the circumstances and applicable law, you can:
Email info@dataprivacyservices.co.uk or write to our registered office. No special form is required. Our DSAR Policy explains the access request process.
We normally respond within one month. Where the law permits extra time because of complexity or the number of requests, we will explain the extension. We may request proportionate information to confirm your identity. Requests are normally free; any lawful exception, restriction or refusal will be explained, together with your complaint rights.
If you are concerned about our use of your information, contact our DPO at info@dataprivacyservices.co.uk. Please describe your concern and how we can contact you; do not send unnecessary sensitive documents.
We handle concerns under our Data Handling Complaints Process, which explains how to raise a complaint, how it is investigated and how to escalate it.
You also have the right to complain to a relevant supervisory authority. You do not have to obtain our permission or complete our internal process before exercising this right.
Your rights to a judicial remedy remain unaffected.
We use technical and organisational measures appropriate to the information and risks, including access controls and encrypted website connections. No online service can guarantee absolute security. Please use the contact details above to report a privacy or security concern.
We review this notice when our services or processing change. The date above identifies the latest version. Where a change materially affects how your information is used, we will provide additional notice as appropriate.
Our Data Protection Officer is your point of contact for privacy enquiries, rights requests and complaints.
Contact Data Privacy Services ↗