Back to home / Explore services
Privacy Policy
This notice explains how E.L.O Trade Cyprus Ltd. handles personal information when you browse this website or contact us. The site provides business information and enquiries, not online ordering, payment or booking.
1. Who is responsible
E.L.O Trade Cyprus Ltd. is the controller for the website processing described here. Contact us with privacy questions or requests:
- Company registration number: HE357769
- VAT number: CY10357769I
- Email: [email protected]
- Telephone: +357-999-22-060
- Registered address / office: Konstantinou Mourouzi, 1 GEORGIA COURT, 2nd floor Office 201, 4001 Lemesos, Cyprus. One of our operating addresses. Office meetings by prior appointment only.
See our company information and official verification links.
2. Information we handle
- Enquiries: your name, email address, message and any optional telephone, company or service-interest information you provide, together with a reference, submission time and notification status.
- Security and operation: technical request information used by the hosting infrastructure and reCAPTCHA, which can include your IP address, browser details and interactions. Application diagnostics use references, stages and sanitized outcomes rather than copies of enquiry content.
- Preferences: your accepted or rejected Google Analytics choice, notice version and choice date stored in your browser.
- Optional Google Analytics: cookie identifiers, page visits and device/browser information used for traffic reports after opt-in. Aggregated reports do not mean all underlying information is anonymous.
- Cloudflare measurement: separate page-performance and traffic metrics. Cloudflare describes Web Analytics as cookie-free and as not collecting visitors' personal data; its hosting and security services have separate processing practices.
The public form does not accept file uploads. Please send only a non-confidential outline of your enquiry. Arrange a suitable private channel before sharing proprietary specifications or sensitive information. Your name, email, message and acknowledgement of this notice are required to use the form; optional fields can be left blank. You can also contact us directly.
3. Purposes and legal bases
We distinguish processing needed to handle an enquiry from your separate choice about Google Analytics. The form acknowledgement records that you have read this notice; it is not blanket consent to processing or agreement to a supply contract.
| Purpose | Information | Legal basis |
|---|---|---|
| Handle a business enquiry and follow up | Contact details, message and enquiry reference | Our legitimate interest in responding to business communications, Article 6(1)(f) GDPR. Where you request steps towards a contract with you personally, Article 6(1)(b) applies to those steps. |
| Protect the site and operate reliable enquiry intake | Security checks, limited request metadata, diagnostic stages and delivery states | Our legitimate interest in preventing abuse, diagnosing failures and recovering enquiries, Article 6(1)(f), subject to your rights and interests. |
| Remember your analytics preference | Choice, notice version and date in browser storage | Our legitimate interest in respecting and applying your privacy choice, Article 6(1)(f). |
| Measure usage with Google Analytics | Analytics identifiers and website usage | Your consent, Article 6(1)(a). You may refuse or withdraw it without losing access to the site or enquiry form. |
Information may also be retained where a specific legal obligation applies or where necessary to establish, exercise or defend legal claims. An enquiry does not subscribe you to marketing. The European Commission explains the different legal grounds.
4. Service providers and transfers
Authorized people handling enquiries and website operations may access relevant records. Hosting, infrastructure and email providers process information to operate the site, store enquiries and route notifications. Cloudflare provides website infrastructure and may provide performance measurement. Google provides reCAPTCHA for form abuse prevention and, if you opt in, Google Analytics. Advisers or public authorities may receive information where a legal obligation or justified legal claim requires it.
reCAPTCHA can receive technical information and set security-related identifiers when the protected form is used. It is separate from Google Analytics and is not switched off by rejecting analytics. If you prefer not to use the form's Google service, contact us directly by email or telephone. See Google's Privacy Policy, Google's Terms of Service and Cloudflare's Privacy Policy.
Cloudflare's performance beacon may run independently of your Google Analytics choice. According to Cloudflare's Web Analytics documentation, it measures page usage and performance without using visitors' personal data. This does not mean that every infrastructure request or security service is anonymous.
Providers may process information or allow support access outside the European Economic Area. A transfer requires an applicable legal mechanism, such as an adequacy decision covering the recipient or appropriate contractual safeguards, including the European Commission's standard contractual clauses where relevant, together with any necessary additional measures. The mechanism depends on the provider, service and contractual arrangement; a provider's published terms alone do not establish the safeguard applicable to every transfer.
Contact us for information about the arrangements applicable to your data and how to obtain relevant safeguards. See the European Commission's international-transfer guidance. This notice does not claim that data stays exclusively in the EEA or that a provider's certification certifies this website.
5. Storage and retention
Validated enquiries are saved to restricted server-side storage with an outbox before notification is attempted. Notification to the business and confirmation to the sender have separate tracked states. Failed attempts can be retried through the outbox. A saved enquiry or acceptance by a mail server is not a guarantee of delivery to an inbox.
- Website enquiry and outbox records: the default retention is 90 days from submission. Scheduled maintenance removes expired records; a record involved in an active sending attempt is removed after that attempt has been resolved or marked uncertain.
- Application diagnostic logs: the default retention is 30 days. Logs record request references, processing stages and sanitized outcomes, not the enquiry message or routine copies of your contact details. Scheduled maintenance performs retention cleanup.
- Legal holds: a separate, restricted copy of specific records may be retained where necessary for an investigation, legal obligation or claim. This is separate from routine website storage; the reason for continued retention must be reviewed.
- Separate correspondence and business records: email copies, quotations and records of an ongoing engagement are not the website intake store. Their retention depends on the relationship, applicable record-keeping duties and claims; the 90-day intake limit does not promise deletion from every mailbox or business system.
- Infrastructure records and backups: providers' own security logs and backup cycles are separate from the application log policy. Ask us about the arrangements relevant to your request; we do not claim immediate deletion from all provider systems.
- Analytics preferences: the browser choice is versioned and reviewed after 180 days (about six months). A changed notice version or cleared storage can prompt a new choice sooner. Local storage may physically remain until revisiting the site or clearing it.
- Analytics information: Google cookie lifetimes and property-level data retention are separate from the 180-day preference review. See the Cookie Policy inventory; contact us about applicable provider retention settings.
Access restrictions and limited diagnostic data reduce risk but cannot make an internet service completely secure.
6. Your choices and rights
Where applicable, you can request access, correction, erasure, restriction or portability of your personal data. You can object to processing based on legitimate interests for reasons relating to your situation. These rights depend on the circumstances and may be limited by lawful retention obligations or legal claims.
You can withdraw Google Analytics consent at any time using Cookie Preferences. Withdrawal stops future optional measurement by this site's analytics integration; it does not undo past processing or automatically erase data already held by a provider. For a deletion request, contact us.
Send privacy requests to [email protected]. We may request proportionate information to confirm your identity. Where GDPR applies, the normal response deadline is one month; a permitted extension for complex or numerous requests must be explained within that month.
You may complain to a competent data-protection authority, including the Cyprus Commissioner for Personal Data Protection, or the authority in the EU country where you live or work. You do not have to contact us first.
7. Changes to this notice
We will publish changes here with an updated date. Material changes to optional analytics choices will require a new choice where appropriate.