Website Privacy Notice

Last updated: 20 Sep 2026

 1. Introduction

This notice explains how CY Tenancy collects and uses personal data through its website. It applies to website visitors, enquiries and launch sign-ups. Tenancy applications are covered by our separate Applicant Privacy Notice.

2. Who we are

CY Tenancy is the trading name of J.Soteriades Tenancy Services Ltd, a company registered in Cyprus (HE497517), the data controller for personal data collected through this website.

Registered address: 1 Aeropis Street, Strovolos 2057, Nicosia, Cyprus

Privacy contact: privacy@cytenancy.com.cy

3. Data we collect

  • Launch sign-ups: your name, email address, and whether you are a landlord, letting agent or tenant.

  • Enquiries: your name, email address, phone number, and anything you include in your message.

  • Technical data: limited information such as IP address, browser type and general usage data, collected by the systems we use to run the website.

4. Cookies

We use essential cookies needed for the website to work. Analytics cookies are only used if you accept them through our cookie banner.

5. How we use your data

  • To notify you when CY Tenancy launches.

  • To respond to your enquiries.

  • To keep the website secure and working properly.

6. Legal basis

  • Launch sign-ups: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by emailing privacy@cytenancy.com.cy.

  • Enquiries and website operation: our legitimate interests (Article 6(1)(f) GDPR) in responding to genuine enquiries and running a secure website.

7. Who we share data with

We do not sell personal data or share it for marketing. We use trusted service providers under data processing agreements: Squarespace (website hosting and form storage) and Microsoft (business email). Some providers may transfer data outside the European Economic Area, using appropriate safeguards such as Standard Contractual Clauses.

8. How long we keep it

  • Launch sign-ups: until our launch announcement, and no longer than[3 months after, unless you become a client.

  • Enquiries: no longer than 12 months, unless there is a specific reason (for example, an ongoing matter).

9. Your rights

Under the GDPR and Cyprus Law 125(I)/2018, you can:

  • access your data;

  • correct it;

  • delete it;

  • restrict or object to its use;

  • •withdraw consent at any time.

We respond within one month. For complex requests we may extend this by two months, and we will tell you why. Requests: privacy@cytenancy.com.cy

You can also complain to the Office of the Commissioner for Personal Data Protection: www.dataprotection.gov.cy

10. Changes

We may update this notice from time to time. The latest version will always be available on our website.