Privacy Policy

We collect only what we need to respond to enquiries and deliver our services:

• Contact form data — name, email address, company name, area of interest, message content and your consent record.
• Correspondence — emails, calls and meeting notes exchanged with you.
• Client engagement data — identification and verification documents, accounting records, invoices, payroll and tax data supplied by you or on your behalf.
• Technical data — IP address, browser type and page requests recorded in standard server logs for security and availability purposes.

• To respond to your enquiry and provide requested information — your consent, and our legitimate interest in responding to business contacts.
• To provide accounting, compliance and advisory services — performance of a contract with you.
• To meet statutory obligations, including tax, VAT, anti-money-laundering and record-keeping requirements — compliance with a legal obligation.
• To secure and maintain our website and systems — our legitimate interest in protecting our infrastructure.

We do not sell personal data. We share it only where necessary with providers that support our operations, each bound by confidentiality and data processing terms:

• Website hosting and delivery infrastructure for this site.
• Email and transactional email providers used to receive and acknowledge enquiries.
• Accounting, payroll and document management platforms used to deliver our services.
• Trusted associates — for example on relocation support or IP Box matters — engaged only where relevant to your instructions.
• Public authorities and regulators where disclosure is required by Cyprus or EU law.

Our providers are located within the European Economic Area or in countries covered by an adequacy decision. Where a transfer outside the EEA is necessary, it is made under the European Commission's Standard Contractual Clauses or an equivalent safeguard.

• Enquiries that do not lead to an engagement — retained for up to 24 months, then deleted.
• Client accounting and engagement records — retained for at least six years from the end of the relevant tax year, as required by Cyprus tax, VAT and company law.
• Anti-money-laundering identification records — retained for five years after the end of the client relationship.
• Server and security logs — retained for a short technical period only.

Subject to legal limits, you have the right to access your personal data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time without affecting prior processing.

To exercise any right, contact info@safinpart.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy).

We apply appropriate technical and organisational measures, including access controls, encrypted transmission, confidentiality obligations for everyone acting on our behalf, and a policy of collecting the minimum data necessary. No transmission over the internet can be guaranteed to be completely secure, so please do not send sensitive documents by unencrypted email without agreeing a secure method with us first.

This website uses only strictly necessary cookies and similar technologies. Full details are set out in our Cookie Policy.

We may update this policy to reflect changes in our services or in applicable law. The current version is always published on this page with its last updated date.