1) Who we are
Cy Web Designs (“we”, “us”, “our”) operates cywebdesigns.com. We are based in Cyprus and act as the data controller for the personal data described in this policy. Contact: info@cywebdesigns.com.

2) What data we collect
• Contact data (when you submit our contact form): name, email, phone (optional), message.
• Usage data: pages viewed, device info, approximate location, and similar analytics events (see “Analytics”).
• Technical logs: IP address and user-agent may be processed by our hosting for security and reliability.

3) How we collect data
• Directly from you via the contact form.
• Automatically via cookies/consent-based analytics (see our Cookies Policy).

4) Why we use your data (purposes)
• To respond to enquiries and provide customer support.
• To operate, secure, and improve our website.
• To measure site performance and understand interest in our services (analytics, only with consent).
• To comply with legal obligations (e.g., security, fraud prevention).

5) Legal bases (GDPR)
• Consent for analytics cookies/measurement (you can withdraw at any time).
• Contract / pre-contractual steps when you contact us to discuss our services.
• Legitimate interests for security, debugging, and preventing abuse.
• Legal obligation where applicable.

6) Analytics & Consent Mode
We use Google Analytics with Consent Mode v2. Until you click “Accept” on our cookie banner, analytics storage is denied and only limited, cookieless pings may occur. If you accept, analytics cookies may be set. You can change your choice anytime via the “Manage cookies” button or your browser settings. See our Cookies Policy for details.

7) Contact form (Web3Forms)
Our contact form submissions are processed by Web3Forms (a third-party form service). They receive the data you submit so we can respond. Web3Forms does not set cookies on our domain. For more on how they process data, please refer to their documentation and privacy terms.

8) Sharing your data
We share data with trusted providers that help us run our website and services (e.g., hosting, analytics, Web3Forms). These providers act under contracts and only process data on our instructions where applicable. We do not sell your data.

9) International transfers
Some providers (e.g., Google) may process data outside the EEA. Where data is transferred internationally, appropriate safeguards (such as EU Standard Contractual Clauses) are used by those providers. By consenting to analytics, you acknowledge such transfers may occur per provider terms.

10) Retention
• Contact enquiries: kept as long as needed to respond and maintain business records (typically up to 24 months, unless a longer period is required for legal/accounting reasons).
• Analytics: retained per Google Analytics settings/limits.
• Technical logs: short-term rotation suitable for security and troubleshooting.

11) Your rights
You have rights under the GDPR, including: access, rectification, erasure, restriction, portability, and objection (including to processing based on legitimate interests), and the right to withdraw consent at any time (for analytics). To exercise these rights, email info@cywebdesigns.com. You also have the right to lodge a complaint with your local supervisory authority (e.g., the Office of the Commissioner for Personal Data Protection in Cyprus).

12) Security
We use reasonable technical and organisational measures to protect personal data. No method of transmission or storage is 100% secure, but we aim to safeguard your information appropriately.

13) Children
Our website is not intended for children and we do not knowingly collect children’s data.

14) Updates
We may update this policy from time to time. We will post changes on this page and revise the “Last Updated” date above.