Privacy Policy

AA AVANEST LTD · HE 493156 · Republic of Cyprus

1. Who we are and scope of this Policy

1.1 The data controller is AA AVANEST LTD, company registration number HE 493156, established in the Republic of Cyprus.

1.2 Registered/contact address: 20 Charalampou Mouskou, ABC Business Center, 1st Floor, Flat/Office 106, 8010 Paphos, Cyprus. Email: info@avanestcy.com.

1.3 This Policy applies to website visitors, prospective and existing clients, business representatives, suppliers, professionals and other people who communicate with AVANEST.

1.4 AVANEST provides independent product research, supplier comparison, organisation and presentation of options for individuals and professionals. Where expressly agreed, we may also coordinate approved third-party services.

1.5 We do not sell personal data.

2. Personal data we may collect

2.1 Identity and contact data, such as name, company name, role, email address, telephone/WhatsApp number, city, area and service address when needed.

2.2 Request and space information, such as your needs, budget, timing, preferences, measurements, photographs, short videos, floor plans and practical access details.

2.3 Service and transaction records, such as options researched, suppliers considered, quotations, written approvals, changes, delivery information, complaints and request history.

2.4 Billing records for AVANEST’s own fee, including invoice details, amount, VAT where applicable, payment status and limited bank-reference information. We do not request card PINs, online-banking passwords or authentication codes.

2.5 Technical data may include IP address, browser/device information, access date, security logs and pages requested, as generated by our hosting and security providers.

2.6 Please do not send unnecessary sensitive information. Before sending photographs or videos, remove visible identity documents, security codes, number plates and images of people where they are not needed.

3. How we collect data

3.1 We collect data directly when you complete a form, email or call us, send supporting material, request a quotation, approve options or submit a complaint.

3.2 We may receive necessary information from a person authorised by you, a family member, a business representative, property owner or manager, supplier or approved professional.

3.3 Professional supplier information may be obtained from official websites, public registers and business directories.

3.4 We may create internal request references, notes, comparison tables, presentations and approval records while providing the service.

4. Why we use personal data

4.1 To respond to enquiries, assess requests, prepare a Service Proposal and define the scope, fee and next steps.

4.2 To research products and suppliers, compare prices and specifications, assess measurements, prepare organised options and present estimated or total costs.

4.3 To record choices and written approvals and avoid unauthorised purchases or misunderstandings.

4.4 To contact shops, suppliers and approved professionals about price, availability, technical details, delivery, installation, warranties, returns or issue resolution.

4.5 To manage AVANEST’s invoices, accounting, payments, legal obligations, complaints, disputes and protection of legal rights.

4.6 To operate and secure the website and forms, prevent misuse, troubleshoot errors and maintain backups.

4.7 We do not use personal data for solely automated decisions that produce legal or similarly significant effects.

5. Legal bases

5.1 Contract and pre-contract steps: assessing your request, preparing a proposal, communicating with you and delivering the agreed research, comparison, organisation or coordination service.

5.2 Legal obligations: tax, accounting, invoicing, regulatory requests and compliance with applicable law.

5.3 Legitimate interests: running the business effectively, securing systems, documenting agreements, preventing fraud, handling complaints and protecting legal rights, provided your interests and rights do not override those interests.

5.4 Consent: where required for optional marketing, non-essential cookies or publication of identifiable testimonials or material. Consent may be withdrawn at any time without affecting earlier lawful processing.

6. Who may receive personal data

6.1 Shops and suppliers may receive limited information needed to obtain a quotation, confirm availability, arrange delivery or resolve a problem.

6.2 Where coordination is approved, transporters, assemblers, installers, technicians, cleaners or other professionals may receive the contact, address and access details necessary for the specific task.

6.3 Technical providers may process information for website hosting, forms, email, cloud storage, backups and security. The website is intended to be hosted by Netlify, and form submissions may be processed and stored through Netlify’s systems.

6.4 Photographs and videos are sent separately by email and are not uploaded through the website request form.

6.5 Accountants, auditors, lawyers, insurers, banks and payment providers may receive data where necessary for their professional function.

6.6 Courts, tax, regulatory, police or other competent authorities may receive data where required by law.

6.7 We disclose only information that is reasonably necessary for the particular purpose.

7. International transfers

7.1 Some technology, email, cloud or security providers may process data outside the European Economic Area.

7.2 Where a restricted international transfer occurs, we rely on a lawful safeguard such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted by data-protection law, together with supplementary measures where appropriate.

7.3 You may ask us for information about relevant countries, recipients and safeguards.

8. How long we keep data

8.1 Initial enquiries that do not become a service are normally kept for up to 12 months after the last meaningful communication.

8.2 The core file of a completed or discontinued service may normally be kept for up to six years, subject to legal and claims requirements.

8.3 Photographs, videos and detailed working files relating to a space are normally kept for the duration of the service and up to 12 months afterwards, unless a longer period is legally necessary.

8.4 Invoices, receipts and tax/accounting records are kept for at least the period required by applicable law.

8.5 Complaint, dispute and legal-claim records may be kept until final resolution and for the applicable limitation period.

8.6 When retention is no longer necessary, data is securely deleted, destroyed, restricted or anonymised.

9. Security

9.1 We use proportionate technical and organisational measures, including access restrictions, secure accounts, software updates, backups, careful sharing and minimisation of data.

9.2 No internet or email system is completely risk-free. Please use secure channels and avoid sending payment credentials or unnecessary sensitive data.

9.3 Suspected loss, unauthorised disclosure or misdirected information should be reported immediately to info@avanestcy.com.

10. Your data-protection rights

10.1 Subject to the conditions in applicable law, you may request information, access, correction, deletion, restriction, portability or object to processing.

10.2 You may withdraw consent where processing is based on consent and may object at any time to direct marketing.

10.3 Send requests to info@avanestcy.com, preferably including your name, request reference and the right you wish to exercise.

10.4 We may request proportionate proof of identity or authority to protect your information.

10.5 We normally respond within one month. This may be extended by up to two further months for complex or numerous requests, as permitted by the GDPR.

10.6 You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus or another competent supervisory authority.

11. Cookies and similar technologies

11.1 The current website does not intentionally use Google Analytics, Meta Pixel, advertising cookies or other non-essential tracking tools.

11.2 Essential technical functions may be used for site security, form operation, language preference during the browsing session and protection against malicious use.

11.3 A consent banner is not displayed while no non-essential cookies or equivalent tracking technologies are active.

11.4 If non-essential analytics, embedded content or marketing tools are added later, we will update this Policy and request consent before activation where required.

12. Questions and complaints

12.1 Contact: AA AVANEST LTD, HE 493156, 20 Charalampou Mouskou, ABC Business Center, 1st Floor, Flat/Office 106, 8010 Paphos, Cyprus; info@avanestcy.com.

12.2 AVANEST has not appointed a Data Protection Officer because it does not currently consider that a statutory appointment is required. Data-protection matters are handled through the contact above.

12.3 You may contact the Cyprus data-protection authority directly, whether or not you have first contacted AVANEST.

13. Changes to this Policy

13.1 We review this Policy when our services, forms, providers, retention periods, cookies, international transfers or legal obligations change.

13.2 The current version will be published on the website. Material changes will be communicated in an appropriate way where required.

13.3 A new incompatible purpose will require a new notice and an appropriate legal basis or consent where necessary.

Effective date and last updated: 28 July 2026.