Privacy Policy

Delmar Properties is a licensed real estate agency registered and operating in Cyprus (Registration No. 1352, Licence No. 688). Our registered office is at Λεωφόρος Πρωταρά 285, Shop 3-4, Paralimni 5291, Cyprus. We are the data controller for all personal data collected through this website and our services. For all data-related enquiries, you can contact us at: info@delmarproperties.cy

When you interact with our website or services, we may collect the following categories of personal data: • Contact details: full name, email address, phone number, and country of residence • Enquiry information: property preferences, budget range, transaction type (buy/rent/sell), preferred districts, and any details you include in your message • Property search behaviour: the properties you view, save, or compare on our website (stored locally in your browser) • Technical data: IP address, browser type, device type, and pages visited (collected automatically via server logs) • Communication records: emails, WhatsApp messages, and call notes logged by our agents in our CRM We do not collect payment card information or sensitive personal data (as defined under GDPR Article 9).

We use your personal data for the following purposes: • Responding to property enquiries and connecting you with the right agent — our legitimate interest and the basis of our contractual relationship • Matching your requirements with suitable properties from our portfolio • Maintaining accurate client and lead records in our internal CRM system • Sending you property updates, market reports, or relevant listings where you have consented or where we have a legitimate interest • Complying with legal obligations (e.g. anti-money laundering checks required under Cyprus law) • Improving our website and services through aggregated, anonymised usage analysis We will never sell your personal data or use it for automated decision-making that produces legal effects.

We process your personal data on the following legal grounds (GDPR Article 6): • Contractual necessity: to respond to your enquiry and provide real estate services • Legitimate interests: to maintain business records, improve our services, and communicate with prospective clients • Consent: where we send you optional marketing communications or newsletters (you may withdraw consent at any time) • Legal obligation: to comply with applicable Cyprus and EU law

We do not sell, rent, or trade your personal data to third parties. We share data only where necessary: • Email service providers: we use Resend (a transactional email platform) to send enquiry confirmation emails. Resend processes email addresses on our behalf under a data processing agreement. • Legal advisors and lawyers: where you are proceeding with a property transaction and have consented to a referral • Regulatory authorities: where required by law (e.g. MOKAS — the Cyprus anti-money laundering unit) • Cloud infrastructure: our database is hosted on Supabase (EU West region), which is subject to appropriate data transfer safeguards All third-party processors are contractually required to protect your data and use it only for the purposes we specify.

We retain personal data for as long as necessary to fulfil the purpose for which it was collected: • Enquiry data (no transaction): 2 years from the date of last contact • Client and transaction records: 7 years from completion of the transaction (required by Cyprus tax law) • Newsletter subscribers: until you unsubscribe • Server logs: 90 days After the applicable retention period, data is securely deleted or anonymised.

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights: • Right of access: you may request a copy of the personal data we hold about you • Right to rectification: you may ask us to correct inaccurate or incomplete data • Right to erasure: you may request deletion of your personal data (subject to legal retention obligations) • Right to data portability: you may request your data in a structured, commonly used format • Right to restrict processing: you may ask us to limit how we use your data in certain circumstances • Right to object: you may object to processing based on legitimate interests or for direct marketing • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing To exercise any of these rights, email us at info@delmarproperties.cy. We will respond within 30 days. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

Our website uses cookies. Please see our separate Cookie Policy at /cookies for full details of the cookies we use and how to manage them.

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include: • Encrypted connections (HTTPS/TLS) for all data transmissions • Access controls limiting data access to authorised staff only • Regular security reviews of our systems and third-party processors • Passwords hashed using bcrypt with 12 rounds No method of transmission over the internet is 100% secure. If you have concerns about a potential data breach, please contact us immediately at info@delmarproperties.cy.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Where changes are material, we will notify you via email (if we hold your address) or a prominent notice on our website.