Privacy Notice

Who is responsible

The controller of your personal data is BCT IT Consulting Ltd, a company registered in Cyprus (registration number HE 499977), with its registered office at Galateias, 2-4, 8046, Paphos, Cyprus.

For any question about this notice or your personal data, contact us at [email protected].

Data we collect

Enquiry form: the information you give us directly, being your full name, company name, work email address, optional phone number, the service you are interested in and the project details you write. The form asks you not to send passwords, payment details or confidential documents. Please do not include special categories of personal data (such as health data) in your message.

Messages you send us: if you email or phone us, we keep the details you provide and our correspondence with you.

Technical data: like all web servers, our hosting and content-delivery infrastructure automatically processes IP addresses and request information (for example browser type, pages requested, date and time) to deliver the site and keep it secure.

Cookie choices: if you make a cookie choice, it is stored in your browser so the site can remember it. See our Cookie Policy.

Why we use your data and our legal bases

To respond to your enquiry and discuss a possible engagement: we process your enquiry details because you ask us to take steps before entering into a contract (Article 6(1)(b) GDPR) and because we have a legitimate interest in responding to business enquiries (Article 6(1)(f)).

To operate, secure and improve the website and to prevent abuse and spam: legitimate interest (Article 6(1)(f)).

To keep records and meet legal, tax and accounting obligations, and to establish, exercise or defend legal claims: legal obligation (Article 6(1)(c)) and legitimate interest.

Optional analytics or similar technologies, if ever enabled: only with your consent (Article 6(1)(a)), which you can withdraw at any time.

Where we rely on legitimate interest, you may object to the processing as described in the section on your rights.

Who receives your data

We use service providers who process data on our behalf under appropriate agreements: our server hosting provider; Cloudflare (content delivery, DNS and security, processing visitor IP addresses and requests); and our email service provider, which delivers enquiries to our mailbox.

We may disclose data where required by law, by a court or by a competent authority, or to our professional advisers under a duty of confidentiality. We do not sell your personal data and do not use enquiries for advertising.

International transfers

Some of our providers, including Cloudflare, may process data outside the European Economic Area. Where that happens, we rely on an appropriate transfer mechanism under the GDPR, such as an adequacy decision or the European Commission's standard contractual clauses. You may contact us for more information about the safeguards used.

How long we keep your data

Enquiry details are kept for as long as needed to handle your enquiry and any resulting engagement, and are then deleted or anonymised once they are no longer needed for that purpose or for our legal, tax and accounting obligations or the defence of legal claims.

Technical logs are kept by our infrastructure providers for a limited period for security and operation.

Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), access controls and server hardening. No method of transmission over the internet is completely secure, which is why we ask you not to send passwords, payment details or confidential documents in an initial enquiry.

Providing your data and automated decisions

The fields marked as required in the enquiry form are needed for us to be able to respond. If you do not provide them we cannot process your enquiry.

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on you.

Your rights

Under the GDPR you have the right to: access your personal data; have inaccurate data corrected; have your data erased; restrict our processing; receive your data in a portable format; object to processing based on legitimate interest; and withdraw consent at any time where processing is based on consent (withdrawal does not affect processing carried out before).

To exercise a right, email [email protected]. We may ask you to verify your identity. We aim to respond within one month, which may be extended where permitted by law. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

Complaints

You have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy). You may also complain to the authority in the EU member state where you live or work. We would appreciate the chance to resolve your concern first, so please contact us.

Children

This website is intended for businesses and is not directed at children. We do not knowingly collect personal data from children.

Links to other websites

This website may link to third-party websites. We are not responsible for their content or privacy practices, and we encourage you to read their privacy notices.

Changes to this notice

We may update this notice from time to time. The date of the latest update is shown at the top of this page. Significant changes will be made visible on the website.