Privacy Policy

1. Data controller

The controller responsible for processing your personal data within the meaning of Article 4(7) GDPR is:

AuraMedia Agency Ltd
Agiou Tychona 5, 8036 Paphos, Cyprus
Company registration number: HE482460
Email: auramediaagency@outlook.com
Phone: +357 96 255 906

For all privacy-related queries, contact us at the email address above.

2. What personal data we collect

2.1 Information you submit through the contact form

When you submit a brief through our contact form on the homepage, we collect:

• Your name (required)
• Your email address (required)
• Your company name (optional)
• The service you are interested in (optional)
• Your indicated budget range (optional)
• The project description you provide (required)

You may submit additional information voluntarily in the project description field. Please do not include any special-category personal data (Article 9 GDPR) in your message.

2.2 Information collected automatically by our hosting provider

When you visit this website, our hosting provider (see Section 5) processes basic technical information necessary to deliver the site to your browser, including your IP address, browser user-agent, the pages you request, and timestamps. This information is used solely for the secure operation of the site and is not combined with any other data we hold.

2.3 No analytics, no tracking, no cookies

This website uses no analytics services, no tracking pixels, no third-party advertising, and no cookies. No consent banner is required because no consent-requiring technologies are deployed.

3. Purposes and legal bases for processing

Purpose	Legal basis (GDPR)
Responding to your enquiry and preparing a scope, timeline, and quotation	Article 6(1)(b) — performance of a contract or pre-contractual measures at the data subject’s request
Operating, securing, and maintaining this website	Article 6(1)(f) — legitimate interests in providing a functional and secure online presence
Complying with applicable legal obligations (for example, tax record-keeping)	Article 6(1)(c) — compliance with a legal obligation

4. How long we keep your data

• Contact form submissions that lead to a project: retained for the duration of the engagement and deleted no later than 12 months after project closure, unless a longer retention period is required by law (for example, accounting and tax records under Cypriot law are retained for the statutory minimum, currently six years from the end of the relevant tax year).
• Contact form submissions that do not lead to a project: retained for up to 6 months from your last contact with us, then deleted, unless you ask us to delete them sooner.
• Server logs from our hosting provider: retained according to the provider’s standard policy, typically 30 days.

5. Recipients and sub-processors

We do not sell or rent your personal data and we do not share it with third parties for their own purposes. We rely on a small number of carefully selected processors that act on our behalf under written agreements:

• Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) — provides website hosting and edge infrastructure. Vercel may process your IP address and request metadata as a necessary part of delivering the site.
• Microsoft Corporation (One Microsoft Way, Redmond, WA 98052, USA) — provides our business email service (Outlook). Contact-form messages currently arrive in our Microsoft-hosted inbox.

These processors may host or process data outside the European Economic Area, including in the United States. Such transfers are protected by Standard Contractual Clauses adopted by the European Commission and, where applicable, by the certification of the processor under the EU–US Data Privacy Framework.

6. Your rights under the GDPR

Subject to the conditions in the GDPR, you have the right to:

• Access the personal data we hold about you (Article 15)
• Rectify inaccurate or incomplete personal data (Article 16)
• Erase your personal data in certain circumstances (Article 17, the “right to be forgotten”)
• Restrict processing in certain circumstances (Article 18)
• Receive your personal data in a portable, machine-readable format (data portability, Article 20)
• Object to processing carried out on the basis of legitimate interests (Article 21)
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, please email us at auramediaagency@outlook.com. We will respond within one month of receiving your request, in line with Article 12(3) GDPR.

7. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority for AuraMedia Agency Ltd is:

Office of the Commissioner for Personal Data Protection
15 Kypranoros, 1061 Nicosia, Cyprus
Website: www.dataprotection.gov.cy

You may also lodge a complaint with the supervisory authority of the EU Member State in which you reside or in which the alleged infringement took place.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. The website is served over HTTPS. Form submissions are transmitted directly from your browser to our email inbox.

9. Children

This website is not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. The “Last updated” date at the top of this page indicates when the policy was last revised. Material changes will be highlighted on this page or communicated to you directly where practical.

11. Contact

For any questions about this Privacy Policy or how we process your personal data, please contact:

AuraMedia Agency Ltd
Agiou Tychona 5, 8036 Paphos, Cyprus
Email: auramediaagency@outlook.com