Privacy & Cookie Policy
Privacy & Cookie Policy
Last updated: 10 August 2026
This Privacy & Cookie Policy explains how CREATEAGENCY LTD, operating Restaurants Cyprus (“Restaurants Cyprus”, “we”, “our”, “us”), collects, uses, stores, and protects personal data when you visit restaurantscyprus.com, contact us, submit information, or use our services.
We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (GDPR) and applicable laws of the Republic of Cyprus.
1. Who We Are
Restaurants Cyprus is an online restaurant discovery, advertising, marketing, and visibility platform operated by:
CREATEAGENCY LTD
Company Registration No.: HE 483989
VAT No.: CY60267355M
Address:
13 Amazoniou, SOFOKLEOUS
8025, Cyprus
Email: info@restaurantscyprus.com
CREATEAGENCY LTD is the data controller responsible for personal data processed through Restaurants Cyprus unless otherwise stated.
2. Information We Collect
Depending on how you interact with Restaurants Cyprus, we may collect:
Contact information – such as your name, email address, telephone number, and business details.
Restaurant information – including restaurant details, contact information, submitted content, menus, images, and other listing information.
Subscription and billing information – including subscription details, transaction records, and invoicing information.
Payment information – payments may be processed through third-party payment providers. We do not directly store full payment-card details.
Communication data – including enquiries, support requests, forms, and correspondence with us.
Technical and usage data – such as IP address, browser/device information, pages visited, interactions, referral sources, and website performance data.
Marketing and consent preferences – including newsletter preferences and cookie choices.
3. How We Use Personal Data
We may process personal data to:
Provide and administer Restaurants Cyprus services.
Create and manage restaurant listings and subscriptions.
Process payments and maintain transaction records.
Respond to enquiries and provide support.
Communicate with restaurants and customers.
Maintain the security and functionality of the Platform.
Analyse and improve website performance and user experience.
Measure marketing and advertising performance.
Send marketing communications where legally permitted.
Detect or prevent misuse, fraud, or security incidents.
Meet accounting, tax, regulatory, and other legal obligations.
We do not use personal data for purposes incompatible with those for which it was collected unless permitted by applicable law.
4. Legal Basis for Processing
Depending on the circumstances, we process personal data on one or more of the following legal bases:
Contractual necessity – where processing is necessary to provide a subscription, listing, or requested service.
Legitimate interests – where necessary to operate, secure, administer, and improve Restaurants Cyprus, provided those interests are not overridden by your rights.
Consent – where you have given consent, including for certain marketing communications and non-essential cookies.
Legal obligations – where processing is required to comply with applicable law, accounting, tax, regulatory, or legal requirements.
Where processing is based on consent, you may withdraw that consent at any time.
5. Cookies & Tracking Technologies
Restaurants Cyprus uses cookies and similar technologies to operate the website, remember preferences, understand website usage, and, where consent has been provided, measure or support advertising.
Essential Cookies
These cookies are necessary for core website functionality, security, consent management, and other essential services. They cannot generally be disabled through our cookie-management system where they are strictly necessary.
Functional & Preference Cookies
These may remember choices or settings and provide enhanced website functionality.
Analytics Cookies
With your consent where required, analytics technologies may help us understand how visitors use Restaurants Cyprus and improve website performance and content.
These may include services such as Google Analytics where implemented.
Marketing Cookies
With your consent where required, marketing technologies may be used to measure advertising performance, understand campaign activity, or deliver relevant advertising.
These may include services provided by platforms such as Google and Meta where implemented.
6. Managing Cookie Preferences
When you first visit Restaurants Cyprus, you may be presented with a cookie consent tool allowing you to accept, reject, or manage non-essential cookies.
Non-essential cookies requiring consent will only be used where the required consent has been obtained.
You may change or withdraw your cookie preferences through the cookie-management controls available on the website.
You may also control cookies through your browser settings, although disabling certain cookies may affect website functionality.
7. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet contractual, accounting, tax, regulatory, security, and legal requirements.
Retention periods depend on the type of information and purpose of processing.
For example:
Customer and subscription information may be retained for the duration of the business relationship and an appropriate period afterwards.
Transaction, invoice, and accounting information may be retained for periods required by applicable law.
Enquiry and communication records may be retained for as long as reasonably necessary to respond and maintain appropriate business records.
Marketing information may be retained until you unsubscribe, withdraw consent, or it is no longer reasonably required.
Cookie and analytics data may be retained according to the relevant technology’s applicable retention period.
Data may be deleted or anonymised when it is no longer reasonably required, subject to applicable legal obligations.
8. Sharing Personal Data
We do not sell or rent personal data.
Where necessary, information may be shared with trusted third-party service providers that support our operations, including providers of:
Website hosting and infrastructure
Payment processing
Email and communications
Website analytics
Advertising and marketing technology
IT, security, and technical services
Accounting or professional services
Personal data may also be disclosed where required by law, regulation, court order, or a competent authority, or where reasonably necessary to establish, exercise, or defend legal rights.
Where required by applicable data protection law, appropriate contractual and organisational safeguards are used when third parties process personal data on our behalf.
9. International Data Transfers
Some service providers may process personal data outside Cyprus or the European Economic Area (EEA).
Where personal data is transferred internationally, we use appropriate safeguards where required by applicable law. Depending on the circumstances, these may include:
European Commission adequacy decisions;
Standard Contractual Clauses;
or other lawful transfer mechanisms permitted under GDPR.
10. Data Security
We implement reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or misuse.
These may include encrypted website connections, access controls, secure infrastructure, authentication measures, and reputable third-party service providers.
However, no website, transmission method, or electronic storage system can guarantee absolute security.
11. Your GDPR Rights
Subject to applicable law, you may have the right to:
Access personal data held about you.
Request correction of inaccurate or incomplete information.
Request deletion of personal data in certain circumstances.
Request restriction of processing.
Object to certain processing.
Request data portability where applicable.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with a competent data protection authority.
To exercise your rights, contact:
We may need to verify your identity before processing certain requests.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus.
12. Marketing Communications
Where legally permitted, we may send information about Restaurants Cyprus, our services, platform updates, or relevant offers.
Where consent is required, marketing communications will only be sent after the appropriate consent has been obtained.
You may unsubscribe or withdraw consent at any time using the unsubscribe mechanism provided in relevant communications or by contacting:
Withdrawing marketing consent does not affect necessary service, billing, administrative, or legal communications.
13. Third-Party Websites
Restaurants Cyprus may contain links to restaurant websites, booking platforms, maps, social media platforms, and other third-party services.
These websites operate independently and have their own privacy practices.
CREATEAGENCY LTD is not responsible for how independent third parties process personal data when you leave Restaurants Cyprus or interact directly with their services.
14. Changes to This Policy
We may update this Privacy & Cookie Policy to reflect changes to our services, technologies, business operations, or legal requirements.
The latest version will be published on Restaurants Cyprus with an updated revision date.
Where required by applicable law, we will provide additional notice or request consent for material changes affecting how personal data is processed.
15. Contact & Data Controller
For questions, privacy requests, or concerns regarding this Policy or the processing of personal data, contact:
CREATEAGENCY LTD
Operator of Restaurants Cyprus
Company Registration No.: HE 483989
VAT No.: CY60267355M
Address:
13 Amazoniou, SOFOKLEOUS
8025, Cyprus
Email: info@restaurantscyprus.com
Website: restaurantscyprus.com