Privacy Policy

Introduction

boldstrategist Ltd ("we", "us", "our") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you use our website and services. We are the data controller for the personal data we collect about you.

This policy applies to all personal data we collect through our website, email communications, phone calls, and in-person consultations. By using our services, you agree to the collection and use of information in accordance with this policy.

Data We Collect

We collect various types of personal data to provide and improve our home extension planning services. The data we collect includes information you provide directly to us and information collected automatically when you use our website.

Information You Provide

• Contact details (name, email address, phone number, postal address)
• Project information (extension requirements, budget, timeline)
• Communication records (emails, phone call notes, meeting records)
• Property information (address, current layout, planning history)
• Payment information (billing details for our services)

Information Collected Automatically

• Website usage data (pages visited, time spent, click patterns)
• Technical information (IP address, browser type, device information)
• Cookies and tracking technologies (as detailed in our cookie policy)
• Location data (if you grant permission for location services)

How We Use Your Information

We use the personal data we collect for specific purposes related to providing our home extension planning services. How we use your information depends on the services you use and your preferences.

Service Provision

• Providing consultation and planning services for your home extension project
• Communicating with you about your project progress and requirements
• Preparing architectural plans, planning applications, and project documentation
• Coordinating with contractors and other professionals on your behalf
• Processing payments and maintaining financial records

Business Operations

• Improving our website functionality and user experience
• Analysing service usage to enhance our offerings
• Maintaining business records and compliance with legal obligations
• Protecting against fraud and ensuring website security

Marketing and Communication

• Sending service updates and project-related communications
• Providing information about our services (with your consent)
• Responding to enquiries and providing customer support
• Conducting customer satisfaction surveys

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, their purposes, and how to control them, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract performance: To provide our home extension planning services
• Legitimate interests: To improve our services and website functionality
• Legal obligation: To comply with accounting, tax, and other legal requirements
• Consent: For marketing communications and non-essential cookies (where required)

Data Sharing and Third Parties

We do not sell your personal data to third parties. We may share your information with trusted partners and service providers who assist us in delivering our services, subject to appropriate confidentiality and data protection agreements.

Service Providers

• Architects and planning consultants working on your project
• IT service providers and website hosting companies
• Payment processing services
• Cloud storage and backup services

Legal Requirements

We may disclose your personal data if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our clients or the public.

Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations. Data retention periods vary depending on the type of information and the purpose for which it was collected.

• Project records: Retained for 7 years after project completion for professional liability purposes
• Financial records: Retained for 7 years as required by Cyprus tax law
• Marketing data: Retained until you withdraw consent or we no longer have a legitimate need
• Website analytics: Typically retained for 26 months (Google Analytics default)

Your Rights

Under GDPR and Cyprus data protection law, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing purposes
• Right to withdraw consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure backup and disaster recovery procedures
• Regular monitoring for security breaches

International Data Transfers

Your personal data is primarily processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us about data protection matters, please reach out to us:

Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or your local data protection authority.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.