Privacy Policy
1. Who we are
The data controller is IGMS LTD, company no. HE358799, registered office Aristofanous 20A, 6035 Larnaca, Cyprus; operating address Office 201, Omega Business Center, 18 Stratigou Timagia Avenue, 6047 Larnaca, Cyprus. Data Protection Officer and contact: George Sarris, hello@igms.com.cy.
2. Data we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Client and contact details, billing data | Provide and invoice services; manage the account | Contract; legal obligation (accounting and tax) |
| Company, director and beneficial-owner details, identification | Onboarding checks, sanctions screening, fraud and abuse prevention | Legal obligation; legitimate interests |
| Support tickets, technical logs and IP addresses | Deliver, secure and troubleshoot services; handle abuse reports | Contract; legitimate interests |
| Website and cookie data | Operate and improve the website | Consent (non-essential cookies); legitimate interests |
| Marketing contact details | Send information about our services | Consent or legitimate interests, with an easy opt-out |
3. Who receives data
We share data with service providers and partners who help us deliver the services you order (for example hosting and infrastructure providers and security-testing partners), payment processors, accountants and advisers, and with authorities when the law requires. We require processors to protect data. We do not sell personal data.
4. Transfers outside the EU/EEA
If data is transferred outside the EU/EEA we use a recognised safeguard such as an adequacy decision or standard contractual clauses. You can ask us which safeguard applies.
5. How long we keep data
Only as long as needed for the purpose, and for the periods required by law (for example accounting and tax records and screening records). When the period ends we delete or anonymise the data.
6. Your rights
You may ask to access, correct, erase, restrict or port your data, and may object to processing based on legitimate interests or withdraw consent at any time. Write to hello@igms.com.cy. We verify your identity and reply within one month. You may complain to the Cyprus Commissioner for Personal Data Protection.
7. Security and breaches
We protect data with access control, encryption where appropriate and documented information security management practices. We notify the supervisory authority within 72 hours of becoming aware of a reportable breach and inform affected persons without undue delay where required.
8. Cookies, children and changes
We use essential cookies and, with your consent, analytics cookies; you can change your choice in the cookie settings. Our services are for businesses and not for children. We publish changes to this policy on this page and tell active clients about significant changes.
This document was last updated on Oct 12, 2026