Privacy policy
This policy explains what personal data Zarevo Ltd collects when you visit this website or get in touch with us, why we use it, and the choices and rights you have.
Who we are
Zarevo Ltd is the controller of the personal data described in this policy. We are a private limited company registered in Cyprus, registration number HE [to add], with our registered office at Stasinou 53, 2nd floor, Office 21, 6023 Larnaca, Cyprus.
For any question about this policy or your personal data, email info@zarevo.biz or write to us at the address above.
What we collect
When you contact us
If you email us or use the enquiry form, we receive the details you choose to send: usually your name, company, email address, industry, the services you are interested in and the content of your message. The enquiry form does not store anything on this website. It opens your own email app with your details filled in, and nothing is sent until you send that email yourself.
When you visit the website
Like any website, ours receives technical information each time a page is requested: your IP address, browser and device type, the page requested, the referring page and the date and time. This is processed by our hosting provider to deliver the website and to protect it against abuse and attacks.
We do not use analytics or advertising tools, and we do not build profiles of visitors.
Why we use it and our legal basis
- Replying to your enquiry and preparing a proposal. We rely on taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and on our legitimate interest in responding to business enquiries (Article 6(1)(f)).
- Running and securing the website. We rely on our legitimate interest in providing a website that works and is protected against misuse (Article 6(1)(f)).
- Meeting legal obligations. Where the law requires us to keep or disclose information, we rely on that legal obligation (Article 6(1)(c)).
You do not have to give us any personal data, but we cannot reply to an enquiry without a way to contact you. We do not use automated decision-making or profiling.
Who receives it
We do not sell personal data. We share it only with the service providers who help us run our business, and only as far as they need it:
- Microsoft, which provides our email through Microsoft 365 and hosts the mailbox where enquiries arrive.
- Cloudflare, Inc., which hosts this website and processes visit data on our behalf under its data processing addendum.
- Professional advisers and authorities, such as our lawyers, accountants or a court or regulator, where this is necessary or required by law.
Transfers outside the EU
Cloudflare is based in the United States and may process visit data outside the European Economic Area. Cloudflare is certified under the EU–U.S. Data Privacy Framework, and where that does not apply, transfers are covered by the European Commission’s Standard Contractual Clauses.
Microsoft may also process email data outside the European Economic Area. Microsoft is certified under the EU–U.S. Data Privacy Framework and offers the Standard Contractual Clauses as well. You can ask us for details of the safeguards we rely on.
How long we keep it
We keep enquiries and related correspondence for [24 months] after our last contact with you, unless they lead to a business relationship. In that case we keep them for as long as the relationship lasts and afterwards for as long as the law requires.
Technical visit data is kept by Cloudflare only for the short periods needed to deliver and secure the website.
Cookies
This website does not use cookies for analytics, advertising or tracking, and it does not store anything in your browser. Our hosting provider may set a strictly necessary security cookie to tell people apart from malicious automated traffic. Cookies of this kind do not need your consent, and they are not used to identify or track you.
If we ever add cookies that are not strictly necessary, we will ask for your consent first and update this policy.
Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data erased, for example when we no longer need it;
- restrict how we use your data while a concern is looked into;
- object to our use of your data where we rely on legitimate interests;
- receive data you gave us in a portable format, where applicable.
To use any of these rights, email info@zarevo.biz. We may need to confirm your identity before acting on a request. We will reply within one month, which can be extended by two further months for complex requests, and we will tell you if that happens. Requests are free of charge unless they are clearly unfounded or excessive.
Complaints
If you have a concern about how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the supervisory authority in Cyprus:
Office of the Commissioner for Personal Data Protection
Kypranoros 15, 1061 Nicosia, Cyprus
commissioner@dataprotection.gov.cy · +357 22 818456
gov.cy/dataprotection
You can also complain to the data protection authority in the EU country where you live or work.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make significant changes, we will make that clear on this page.