LEGAL / YOUR DATA

Privacy Policy.

This notice explains how personal data may be processed when you visit this website or contact us. It is intended to provide information under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR), where applicable.

1. Data controller

Company No. HE479990
Email: info@bbl-cyprus.com

2. Website access and technical data

Our website is served using Cloudflare infrastructure. When you access it, technical information, which may include your IP address, request time, requested page, browser or device information and security-related request metadata, can be processed to deliver the website, protect against abuse and maintain its availability. The legal basis is our legitimate interest in operating a secure website (Article 6(1)(f) GDPR), where applicable.

Cloudflare may act as a service provider and process information through infrastructure outside your country, subject to applicable transfer safeguards. Details of specific infrastructure settings and retention depend on our Cloudflare account configuration.

3. Contact by email

If you send us an email, we process the information you provide, including your email address, message and relevant correspondence, to handle your enquiry, prepare a possible engagement and communicate with you. Depending on the circumstances, the legal basis may be Article 6(1)(b) GDPR (pre-contractual steps), Article 6(1)(f) GDPR (legitimate interest in responding to enquiries), or another applicable basis.

Please do not send unnecessary sensitive personal information in an initial enquiry. Standard email may not provide end-to-end encryption.

4. Website enquiry form

If you submit an enquiry, we process your first and last name, email address, optional telephone number and message to respond to your request. The form is submitted via an endpoint on our website, processed using Cloudflare Pages Functions and forwarded to our company inbox using Resend as our email-delivery provider. The website does not intentionally retain your message in a separate database. Cloudflare processes anti-abuse verification through Turnstile and Resend receives message content and contact details for email delivery. The relevant processors may process data outside the EEA subject to applicable safeguards. Cloudflare Turnstile may use technically necessary browser storage or similar signals for security verification. Legal bases are Article 6(1)(b) GDPR for pre-contractual enquiries and Article 6(1)(f) GDPR for other legitimate business enquiries. Please do not include sensitive personal data or confidential security information. Applicable retention periods, processing locations and international transfer safeguards depend on the final service and mailbox configurations and should be verified before launch.

5. Cookies, analytics and external content

This website does not intentionally deploy analytics, advertising pixels, embedded external media or non-essential cookies through its own HTML, CSS or JavaScript. Cloudflare Turnstile is used for bot protection and may process browser and device signals and use technically necessary storage. Its operation must be assessed under applicable ePrivacy rules. If these practices change, this notice and any required consent mechanisms will be updated.

6. Recipients and international transfers

Technical service providers involved in hosting and email delivery may process data for us according to their respective roles and agreements. We do not sell personal data. Where data is transferred outside the European Economic Area, applicable GDPR transfer requirements must be observed.

7. Retention

We retain enquiries and related correspondence only for as long as reasonably necessary to respond, manage a potential business relationship, meet legal obligations or establish and defend legal claims. Technical hosting records are retained according to the provider's settings and applicable arrangements. Specific periods may vary with the circumstances. Resend may retain transmission-related records according to our agreed settings and its privacy terms.

8. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction of processing or data portability; object to processing based on legitimate interests; and withdraw consent where processing is based on consent. Contact info@bbl-cyprus.com to exercise these rights.

You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus, or another competent supervisory authority.

9. Changes

We may revise this notice to reflect changes in services, systems or legal requirements. The current version will be available on this page.

Last updated: 13 October 2026. Review provider agreements, data transfers, retention and the final Turnstile configuration before public launch.