Skip to main content
Effective Date: June 20, 2025

Privacy Policy

1. Introduction

This Privacy Policy outlines how we collect, store, use, and protect your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and Cyprus’s national data protection laws.

2. Who We Are

Panpro Ltd
Registered address: 44 Demokratias Avenue, 8028 Paphos, Cyprus
Email: contact@panpro.cy
Telephone: (+357) 96 559 403

We are the data controller of the personal data you provide to us.

3. What Data We Collect

We collect data only when necessary, and always for a clear, lawful purpose. This may include:

  • Personal data: Name, email address, phone number, country of residence
  • Business data: Company name, registration number, VAT number, shareholder info
  • Service data: Documents and details necessary for tax filings, audits, or incorporation services
  • Technical data: IP address, browser type, and access logs from our website
  • Due diligence data: Identification documents and beneficial ownership declarations required by AML legislation

We do not collect special category (sensitive) data unless legally obligated to do so.

4. Why and How We Use Your Data

We process your data for the following purposes:

  • To respond to your enquiries and provide you with our services
  • To prepare contracts, accounting records, and legal filings
  • To fulfil regulatory obligations, including anti-money laundering (AML) and tax compliance
  • To ensure the security and maintenance of our website
  • To improve the relevance and quality of our services through anonymous analysis

All data processing is carried out under lawful bases: either your consent, contractual necessity, legal obligation, or our legitimate interest as a professional service provider.

5. Data Storage and Security

Your data is stored securely in encrypted systems located within the European Economic Area (EEA). We use multi-layered security protocols, including:

  • SSL encryption on all site and email communications
  • Secure data storage on GDPR-compliant platforms
  • Restricted access policies for authorised personnel only
  • Regular audits and password-protected systems

We retain your data only for as long as necessary. Tax-related documents are stored for a minimum of 7 years as required under Cyprus law. Once no longer required, your data is securely deleted or anonymised.

6. Data Disclosure and Third Parties

We may share data with third parties only when:

  • Required by Cyprus law or tax authorities
  • Necessary to fulfil your contract with us (e.g. through registered agents, legal advisers, or auditors)
  • Involves secure storage or processing via GDPR-compliant platforms (such as encrypted cloud solutions)

Every third party we engage is contractually bound to uphold confidentiality and data protection standards equal to ours. We never sell, lease, or disclose your information for advertising or third-party marketing purposes.

7. Your Rights Under GDPR

You have the right to:

  • Request access to the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (where applicable)
  • Object to or restrict processing under certain conditions
  • Withdraw consent for non-essential processing at any time
  • File a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy)

All requests will be handled within 30 days. To make a request, contact info@panpro.cy.

8. Cookies and Tracking

Our website uses only essential cookies and basic analytics to:

  • Secure our forms from spam and abuse
  • Understand which pages are visited most often
  • Improve site performance and usability

We do not use tracking pixels, third-party ad cookies, or behavioural profiling tools. You may disable cookies through your browser settings without affecting site access.

9. International Data Transfers

Wherever possible, we keep your data within the EEA. If international transfer is required (e.g. when using certain cloud-based tools), we ensure the receiving country has adequate data protection regulations or we implement Standard Contractual Clauses.

10. Updates to This Policy

We may update this policy from time to time to reflect changes in the law or our operations. The latest version will always be available on this page. If we make material changes, we’ll notify you directly if we hold your contact details.