Restaurants Cyprus / Legal
Privacy Policy
How we handle your information and respect your privacy rights.
Last updated
22 September 2026
Need a little clarity?
Email our team
This policy explains how CREATEAGENCY LTD, the operator of Restaurants Cyprus, handles personal data when you browse our website, contact us, submit a restaurant listing or use our services.
It covers the information we collect, why we use it and how to exercise your privacy rights under the EU General Data Protection Regulation (GDPR) and applicable Cyprus law. Information about cookies and similar technologies is set out in our separate Cookie Policy.
Section 01
Who We Are
Restaurants Cyprus is an online restaurant discovery, advertising, marketing, and visibility platform operated by:
CREATEAGENCY LTD
Company Registration No.: HE 483989
VAT No.: CY60267355M
Address:
13 Amazoniou, SOFOKLEOUS
8025, Cyprus
Email: info@restaurantscyprus.com
CREATEAGENCY LTD is the data controller responsible for personal data processed through Restaurants Cyprus unless otherwise stated.
Section 02
Information We Collect
Depending on how you interact with Restaurants Cyprus, we may collect:
- Contact information – such as your name, email address, telephone number, and business details.
- Restaurant information – including restaurant details, contact information, submitted content, menus, images, and other listing information.
- Subscription and billing information – including subscription details, transaction records, and invoicing information.
- Payment information – payments may be processed through third-party payment providers. We do not directly store full payment-card details.
- Communication data – including enquiries, support requests, forms, and correspondence with us.
- Technical and usage data – such as IP address, browser/device information, pages visited, interactions, referral sources, and website performance data.
- Marketing and consent preferences – including newsletter preferences and cookie choices.
Section 03
How We Use Personal Data
We may process personal data to:
- Provide and administer Restaurants Cyprus services.
- Create and manage restaurant listings and subscriptions.
- Process payments and maintain transaction records.
- Respond to enquiries and provide support.
- Communicate with restaurants and customers.
- Maintain the security and functionality of the Platform.
- Analyse and improve website performance and user experience.
- Measure marketing and advertising performance.
- Send marketing communications where legally permitted.
- Detect or prevent misuse, fraud, or security incidents.
- Meet accounting, tax, regulatory, and other legal obligations.
We do not use personal data for purposes incompatible with those for which it was collected unless permitted by applicable law.
Section 04
Legal Basis for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases:
- Contractual necessity – where processing is necessary to provide a subscription, listing, or requested service.
- Legitimate interests – where necessary to operate, secure, administer, and improve Restaurants Cyprus, provided those interests are not overridden by your rights.
- Consent – where you have given consent, including for certain marketing communications and non-essential cookies.
- Legal obligations – where processing is required to comply with applicable law, accounting, tax, regulatory, or legal requirements.
Where processing is based on consent, you may withdraw that consent at any time.
Section 05
Cookies
Our website uses cookies and similar technologies. Please read our Cookie Policy for information about cookie categories, third-party services and the choices available to you.
Where these technologies involve personal data, this Privacy Policy also applies.
Section 06
Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet contractual, accounting, tax, regulatory, security, and legal requirements.
Retention periods depend on the type of information and purpose of processing.
For example:
- Customer and subscription information may be retained for the duration of the business relationship and an appropriate period afterwards.
- Transaction, invoice, and accounting information may be retained for periods required by applicable law.
- Enquiry and communication records may be retained for as long as reasonably necessary to respond and maintain appropriate business records.
- Marketing information may be retained until you unsubscribe, withdraw consent, or it is no longer reasonably required.
- Cookie and analytics data may be retained according to the relevant technology’s applicable retention period.
Data may be deleted or anonymised when it is no longer reasonably required, subject to applicable legal obligations.
Section 07
Sharing Personal Data
We do not sell or rent personal data.
Where necessary, information may be shared with trusted third-party service providers that support our operations, including providers of:
- Website hosting and infrastructure
- Payment processing
- Email and communications
- Website analytics
- Advertising and marketing technology
- IT, security, and technical services
- Accounting or professional services
Personal data may also be disclosed where required by law, regulation, court order, or a competent authority, or where reasonably necessary to establish, exercise, or defend legal rights.
Where required by applicable data protection law, appropriate contractual and organisational safeguards are used when third parties process personal data on our behalf.
Section 08
International Data Transfers
Some service providers may process personal data outside Cyprus or the European Economic Area (EEA).
Where personal data is transferred internationally, we use appropriate safeguards where required by applicable law. Depending on the circumstances, these may include:
- European Commission adequacy decisions;
- Standard Contractual Clauses;
- or other lawful transfer mechanisms permitted under GDPR.
Section 09
Data Security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.
These may include encrypted website connections, access controls, secure infrastructure, authentication measures, and reputable third-party service providers.
However, no website, transmission method, or electronic storage system can guarantee absolute security.
Section 10
Your GDPR Rights
Subject to applicable law, you may have the right to:
- Access personal data held about you.
- Request correction of inaccurate or incomplete information.
- Request deletion of personal data in certain circumstances.
- Request restriction of processing.
- Object to certain processing.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent.
- Lodge a complaint with a competent data protection authority.
To exercise your rights, contact:
We may ask for proportionate information to confirm your identity where necessary. We respond to privacy-rights requests without undue delay and normally within one month. If a request is complex or we receive several requests, the GDPR permits an extension of up to two further months; we will explain any extension within the first month.
You may object at any time to the use of your personal data for direct marketing. Where processing is based on consent, withdrawing it does not affect processing that was lawful before withdrawal.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.
Section 11
Marketing Communications
Where legally permitted, we may send information about Restaurants Cyprus, our services, platform updates, or relevant offers.
Where consent is required, marketing communications will only be sent after the appropriate consent has been obtained.
You may unsubscribe or withdraw consent at any time using the unsubscribe mechanism provided in relevant communications or by contacting:
Withdrawing marketing consent does not affect necessary service, billing, administrative, or legal communications.
Section 12
Third-Party Websites
Restaurants Cyprus may contain links to restaurant websites, booking platforms, maps, social media platforms, and other third-party services.
These websites operate independently and have their own privacy practices.
CREATEAGENCY LTD is not responsible for how independent third parties process personal data when you leave Restaurants Cyprus or interact directly with their services.
Section 13
Changes to This Policy
We may update this Privacy Policy to reflect changes to our services, technologies, business operations, or legal requirements.
The latest version will be published on Restaurants Cyprus with an updated revision date.
Where required by applicable law, we will provide additional notice or request consent for material changes affecting how personal data is processed.
Section 14
Contact & Data Controller
For questions, privacy requests, or concerns regarding this Policy or the processing of personal data, contact:
CREATEAGENCY LTD
Operator of Restaurants Cyprus
Company Registration No.: HE 483989
VAT No.: CY60267355M
Address:
13 Amazoniou, SOFOKLEOUS
8025, Cyprus
Email: info@restaurantscyprus.com
Website: restaurantscyprus.com