Privacy Policy

Halios Estates (“we”, “us”, “our”)
Effective Date: 11/10/2025
Last Updated: 11/10/2025

1. Introduction

Halios Estates is a property-development company based in Nicosia, Cyprus. We design, build and market high-quality residential and commercial real-estate projects in Cyprus (and abroad). Halios Estates+2Halios Estates+2
We are committed to protecting and respecting your personal data in accordance with the European Union General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018 on the Protection of Natural Persons with regard to the Processing of Personal Data.
This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you engage with us — for example, when you visit our website, register interest in a development, purchase a property, or otherwise interact with us.

2. Data Controller

We are the data controller responsible for the processing of your personal data under this policy.

3. Personal Data We Collect

We may collect and process the following categories of personal data:
Identification & contact data: full name, company name (if applicable), address, email address, telephone number.
Transactional and contractual data: information relating to your enquiry, site visits, property purchase, payment schedules, contract documents, title/ownership details.
Project-related data: details of the property or development you are interested in, your preferences, correspondence with our team, site visits, architectural or bespoke design services.
Usage data: when you use our website or digital services, we may collect IP address, browser type, device information, pages visited, time and date of visit, referral URL.
Marketing & communications data: your preferences for receiving marketing communications, newsletters, events invitations (only if you have opted in).
Legal/compliance data: any identification documents required to fulfil contractual obligations, KYC/AML checks (where applicable), correspondence in respect of legal claims, disputes or regulatory compliance.

4. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:
To enable you to make enquiries, view, select, and purchase property from us
Legal basis: Performance of a contract (Article 6(1)(b) GDPR)
To manage our contractual obligations with you, including payments, title transfers, warranties, and after-sales services
Legal basis: Performance of a contract and compliance with legal obligations (Articles 6(1)(b) and 6(1)(c))
To send you information relating to your property interest or project updates
Legal basis: Our legitimate interests in maintaining customer relationships and ensuring clear communication (Article 6(1)(f))
To send you marketing communications, such as newsletters, promotional emails, or event invitations that you have opted in to receive
Legal basis: Your consent (Article 6(1)(a))
To comply with legal or regulatory requirements, including tax obligations, building regulations, and anti-money-laundering checks
Legal basis: Compliance with legal obligations (Article 6(1)(c))
To improve our website, monitor usage, and maintain security through analytics and system monitoring
Legal basis: Our legitimate interests in operating and improving our business (Article 6(1)(f))

5. Disclosure of Personal Data

We may share your personal data with third parties in the following circumstances:
With lawyers, notaries, conveyancers, land-registry or title-registration offices in connection with the purchase, transfer or legal title of property.
With banks, financial institutions or payment processors to manage payments and financing.
With our subcontractors or service providers (architects, engineers, interior designers, contractors) involved in the development, construction or design of your property.
With IT providers, hosting partners, analytics providers necessary for our website and system operation.
With regulatory or governmental authorities (e.g., for tax, AML, building-permit compliance) when required by law.
In connection with a sale, merger or reorganisation of our business, your personal data may be transferred to the new owner under appropriate safeguards.
We do not sell your personal data to unrelated third parties for marketing purposes without your express consent.

6. International Transfers

Should we transfer personal data outside the European Economic Area (EEA) (for example, to a service provider located abroad), we will ensure that the transfer is subject to appropriate safeguards such as the EU Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms to maintain an adequate level of protection.

7. Data Retention

We will retain your personal data only as long as necessary to fulfil the purposes for which we collected it and to comply with our legal obligations, after which we will securely delete or anonymise the data. Typical retention periods might include:
Contract and transactional records: up to 10 years (for tax, audit or warranty obligations).
Marketing data: until you withdraw consent or opt out.
Website analytics/usage data: retained in anonymised or aggregated form where feasible.

8. Your Rights

Under the GDPR and Cyprus Law 125(I)/2018, you have rights concerning your personal data, including:

The right to request access to the personal data we hold about you.
The right to request correction of inaccurate or incomplete data.
The right to request erasure of your data (“right to be forgotten”) subject to legal and contractual obligations.
The right to restrict processing of your data.
The right to object to processing based on legitimate interests.
The right to data portability (where processing is based on consent or contract and carried out by automated means).
The right to withdraw consent at any time (where processing is based on consent).
The right to lodge a complaint with the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection.

To exercise your rights, please contact us at info@haliosestates.com

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction or damage. Access to personal data is restricted to our employees, contractors or agents who need it to perform their duties.

10. Cookies and Website Tracking

Our website may use cookies or other tracking technologies to enhance user experience, analyse site usage and improve functionality. You can control the use of cookies through your browser settings and/or by opting out of non-essential cookies. More detailed information about our cookie practice can be found in our Cookie Policy (if applicable).

11. Changes to This Policy

We may update this Privacy Policy from time to time (for example, in response to changes in our business or legal requirements). The updated policy will be posted on our website with a revised “Last Updated” date. We recommend you review it periodically.

12. Contact Us