PRIVACY POLICY
Last updated: 13 October 2026
1. ABOUT THIS PRIVACY POLICY
Ktoridou Architects (“we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, enquire about our services or work with us on an architectural, interior design, renovation or refurbishment project.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation in Cyprus, including Law 125(I)/2018.
2. WHO WE ARE
Trading name: Ktoridou Architects
Data controller: Elena Ktoridou
Business address: Epaminonda 4, Nicosia 1076
Email: elena@elenaktoridou.com
Website: www.elenaktoridou.com
The data controller is the person or legal entity that determines how and why personal data is processed.
For questions about this Privacy Policy or to exercise your data protection rights, please contact us using the details above.
3. PERSONAL DATA WE COLLECT
The personal data we collect depends on how you interact with us. It may include the following categories.
Identity and contact information
Your name, email address, telephone number, business or residential address, company name and professional role, where relevant.
Enquiry and communication information
Information you provide when contacting us, requesting a consultation, discussing a project or communicating with us by email, telephone or through our website.
Project information
Information relevant to an architectural or design project, which may include the project location, property details, design requirements, plans, photographs, drawings, correspondence and project documentation.
Where project information contains personal data relating to property owners, occupants, neighbours, employees or other individuals, we will process it only as necessary and in accordance with applicable law.
Technical and website information
Depending on the website configuration, we may collect technical information such as your IP address, browser type, device information, pages visited and information about how you interact with our website.
Marketing preferences
If we send newsletters or other marketing communications, we may process your contact details and preferences concerning those communications.
We do not intentionally collect special categories of personal data through our website unless this is necessary for a specific purpose and there is an appropriate legal basis.
4. HOW WE COLLECT YOUR PERSONAL DATA
We may collect personal data directly from you when you:
Contact us by email, telephone or through a website form.
Request information about our services.
Arrange a consultation or discuss a potential project.
Enter into a contract with us or engage us to provide professional services.
Subscribe to communications or interact with our website.
We may also receive relevant personal data from a client, their authorised representative, a project consultant or another professional involved in a project, where appropriate and lawful.
Technical information may be collected automatically through the operation of our website and, where applicable, through cookies or similar technologies.
5. HOW WE USE YOUR PERSONAL DATA
We may use personal data for the following purposes:
To respond to enquiries and requests for information.
To arrange consultations and discuss potential projects.
To prepare proposals, quotations and project documentation.
To provide architectural, interior design, renovation, refurbishment and related services.
To communicate with clients, consultants, contractors and other authorised project participants.
To manage our business relationship with clients and fulfil contractual obligations.
To maintain, secure and improve our website and services.
To send marketing communications where permitted by law.
To comply with legal and regulatory obligations.
To establish, exercise or defend legal claims where necessary.
We will not use personal data for purposes incompatible with those for which it was collected without an appropriate legal basis.
6. LEGAL BASIS FOR PROCESSING
Under the GDPR, we must have a lawful basis for processing personal data. Depending on the circumstances, we rely on one or more of the following:
Contractual necessity: Where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
Legitimate interests: Where processing is necessary for our legitimate business interests, such as responding to professional enquiries, managing business relationships, maintaining website security and administering our operations, provided those interests do not override your rights and freedoms.
Legal obligations: Where processing is necessary to comply with applicable legal or regulatory requirements.
Consent: Where you have given consent for a specific purpose, such as optional website analytics or certain marketing communications, where consent is the appropriate legal basis.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
7. WEBSITE COOKIES AND ANALYTICS
Our website may use cookies and similar technologies to support its operation and, where enabled, to understand how visitors use the site.
Essential technologies may be used where necessary for the website to function. Non-essential analytics or tracking technologies will only be activated with prior consent where required by applicable law.
If Google Analytics 4 or another analytics service is used, it may process technical and usage information such as device details, pages visited and interactions with the website. The precise information collected depends on the service and its configuration.
You may accept or reject optional analytics through the website's cookie consent mechanism and change or withdraw your choice through the available cookie settings.
If our website uses externally hosted fonts or other third-party resources, the relevant provider may receive technical information, including your IP address, when your browser requests those resources.
The cookies, providers and tracking technologies described in this section must reflect the actual configuration of our website.
8. SHARING YOUR PERSONAL DATA
We may share personal data with third parties where necessary and lawful for the purposes described in this Privacy Policy.
These recipients may include:
Website hosting, maintenance and IT service providers.
Email, communication and document-management providers.
Analytics providers, where applicable and with the required consent.
Architects, engineers, interior designers, quantity surveyors and other project consultants.
Contractors, suppliers and other professionals involved in a project, where necessary.
Legal, accounting or other professional advisers.
Public authorities, courts or regulatory bodies where required by law.
We seek to ensure that personal data is shared only to the extent reasonably necessary and that appropriate confidentiality and data protection safeguards are in place.
We do not sell personal data.
9. INTERNATIONAL DATA TRANSFERS
Some of our service providers may process personal data outside Cyprus or the European Economic Area (EEA).
Where personal data is transferred outside the EEA, we will ensure that the transfer complies with applicable data protection law. Depending on the circumstances, this may involve a European Commission adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism.
Further information about applicable safeguards may be requested using the contact details provided in this Privacy Policy.
10. DATA RETENTION
We retain personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including providing our services, managing project records, complying with legal obligations and establishing or defending legal claims.
Retention periods depend on the nature of the information and the circumstances. In determining these periods, we consider:
The duration of our relationship with the relevant individual or client.
The nature and complexity of the project.
Applicable legal, professional, accounting and contractual requirements.
The need to maintain records in connection with potential disputes or legal claims.
When personal data is no longer required, we will take appropriate steps to delete it or otherwise dispose of it securely, subject to any applicable legal retention obligations.
11. DATA SECURITY
We take appropriate technical and organisational measures designed to protect personal data against accidental loss, destruction, alteration, unauthorised disclosure or access.
Access to personal data is limited to individuals and service providers who need it for legitimate business purposes and are subject to appropriate confidentiality obligations.
Although we take reasonable steps to protect personal data, no method of electronic transmission or storage can be guaranteed to be completely secure.
12. YOUR DATA PROTECTION RIGHTS
Subject to the conditions and limitations under applicable law, you may have the right to:
Access: Request confirmation of whether we process your personal data and obtain a copy.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data in certain circumstances.
Restriction: Request that we restrict the processing of your personal data in certain circumstances.
Objection: Object to processing based on legitimate interests and object at any time to processing for direct marketing.
Data portability: Receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, request its transfer to another controller.
Withdraw consent: Withdraw consent where processing is based on consent.
These rights are not absolute and may be subject to legal exceptions.
To exercise your rights, please contact us using the details in Section 2. We may request information to verify your identity before responding.
We will respond within the time limits required by applicable data protection law.
13. RIGHT TO LODGE A COMPLAINT
If you have concerns about how we process your personal data, you may contact us so that we can attempt to address them.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, the supervisory authority responsible for data protection in Cyprus.
Official website: https://www.gov.cy/dataprotection/
14. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites or services. Those websites operate independently and may have their own privacy policies and data practices.
We are not responsible for the privacy practices of third-party websites. We encourage you to review their privacy notices before providing personal data to them.
15. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our services, website, business practices or applicable legal requirements.
The latest version will be published on our website together with its updated date.
If you have any questions about this Privacy Policy or how we handle personal data, please contact us using the details provided in Section 2.