pix.cy is a web design studio based in Cyprus, run by Kyriakos Naziris. We take your privacy seriously and handle all personal data transparently and in compliance with the General Data Protection Regulation (GDPR) and applicable Cyprus law. This policy explains what we collect, why we collect it, and how you can control your data.

What We Collect and Why

We collect personal data in three main situations:

Contact form: When you send us an enquiry we collect your name, email address, and message content so that we can reply to you.
Client projects: During a project we may collect business details, contact information, VAT numbers, payment data, and project files needed to deliver the contracted work.
Website visits: Our hosting provider Cloudflare logs technical information such as IP addresses and browser type for security and performance purposes. We use cookieless analytics, so no tracking cookies are placed on your device.

How We Use Your Data

We use the information we hold to:

Reply to enquiries and prepare project proposals
Deliver contracted services and communicate progress
Process invoices and payments
Maintain accounting and tax records as required by Cyprus law
Improve our website and services through aggregated analytics

Legal Basis for Processing

We process your data on one or more of the following lawful bases:

Consent — when you voluntarily contact us or share information
Contract performance — to fulfil work you have commissioned
Legitimate interests — for security, analytics, and improving our service
Legal obligation — for tax, accounting, and regulatory compliance

Who We Share Data With

We do not sell your data. We work with the following third-party processors, each bound by data processing agreements:

Google Workspace — email and file storage
Cloudflare — website hosting and security
Cyprus-based accountants — tax filing and compliance

How Long We Keep Your Data

Contact enquiries: 12 months from the date of contact
Client project files: duration of the project plus 6 years
Financial and invoicing records: 6 years (Cyprus tax law)
Analytics data: up to 12 months

Your Rights

Under GDPR you have the right to access, correct, delete, restrict processing of, or object to the use of your personal data. To exercise any of these rights, contact us at hello@pix.cy. We will respond within 30 days. If you are unhappy with how we handle your data you also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection.

Security

We protect your data using HTTPS encryption across all pages, two-factor authentication on all accounts holding client data, and access limited strictly to those who need it to deliver your project.

International Transfers

Some of our service providers (such as Google) are based outside the European Economic Area. Where data is transferred internationally, we rely on Standard Contractual Clauses approved by the European Commission to ensure your data remains protected.

Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with a revised date. Continued use of our services after any change constitutes acceptance of the updated policy.

Contact

For any questions about this policy or how we handle your data, please email hello@pix.cy.

Privacy Policy