Website Privacy Notice

Last updated: 26 Sep 2026

1. Introduction

This notice explains how CY Tenancy collects and uses personal data through its website. It applies to website visitors, enquiries and launch sign-ups. Tenancy applications are covered by our separate Applicant Privacy Notice.

2. Who we are

CY Tenancy is the trading name of J.Soteriades Tenancy Services Ltd, a company registered in Cyprus (HE497517), the data controller for personal data collected through this website.

Registered address: 1 Aeropis Street, Strovolos 2057, Nicosia, Cyprus

Privacy contact: privacy@cytenancy.com.cy

3. Data we collect

  • Launch sign-ups: your name, email address, and whether you are a landlord, letting agent or tenant.

  • Enquiries: your name, email address, phone number, and anything you include in your message.

  • Technical data: limited information such as IP address, browser type and general usage data, collected by the systems we use to run the website.

4. Cookies

Cookies are small text files saved on your device when you visit a website.

Essential cookies are always on. They keep the website secure and working, and remember your choice on our cookie banner. They are set by Squarespace, our website provider, and last from the end of your visit up to a few months.

Analytics cookies are only used if you accept them on our cookie banner. They are set by Squarespace and help us understand how visitors use the site, for example which pages are visited and how people found us. We only see overall statistics, not identified individuals. These cookies last from 30 minutes up to 2 years.

Changing your choice: you can withdraw consent at any time by clearing cookies in your browser settings. The cookie banner will then appear again on your next visit.

5. How we use your data

  • To notify you when CY Tenancy launches.

  • To respond to your enquiries.

  • To keep the website secure and working properly.

6. Legal basis

  • Launch sign-ups: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by emailing privacy@cytenancy.com.cy.

  • Enquiries and website operation: our legitimate interests (Article 6(1)(f) GDPR) in responding to genuine enquiries and running a secure website.

7. Who we share data with

We do not sell personal data or share it for marketing. We use trusted service providers under data processing agreements: Squarespace (website hosting and form storage) and Microsoft (business email). Some providers may transfer data outside the European Economic Area, using appropriate safeguards such as Standard Contractual Clauses.

8. How long we keep it

  • Launch sign-ups: until our launch announcement, and no longer than 3 months after, unless you become a client.

  • Enquiries: no longer than 12 months, unless there is a specific reason (for example, an ongoing matter).

9. Your rights

Under the GDPR and Cyprus Law 125(I)/2018, you can:

  • access your data;

  • correct it;

  • delete it;

  • restrict or object to its use;

  • withdraw consent at any time.

We respond within one month. For complex requests we may extend this by two months, and we will tell you why. Requests: privacy@cytenancy.com.cy

You can also complain to the Office of the Commissioner for Personal Data Protection: www.dataprotection.gov.cy

10. Changes

We may update this notice from time to time. The latest version will always be available on our website.