Privacy Policy

Last updated: September 2026

1. Who we are

C2C Global Management Limited is a Cyprus-based real estate and property management company. We sell and let our own properties in Cyprus, and we provide property management and rental management services to property owners.

For the personal data described in this policy, we act as the data controller.

2. Personal data we collect

We only ask for what we need to answer your enquiry or to run a property. Depending on your relationship with us, this can include:

  • Contact details — name, email address, telephone and WhatsApp number.
  • Identification — nationality, proof of address, and where a sale, purchase or tenancy requires it, identity document details.
  • Enquiry details — what you are looking for, your budget and anything you choose to tell us.
  • Property and tenancy data — the property concerned, rent, deposits, maintenance requests, and check-in or check-out records.
  • Applicant information — references, and employment or income confirmation for tenancy applications.
  • Financial data — bank details and payment records for rent, deposits, management fees or invoices.
  • Communications — emails, WhatsApp messages, call notes and viewing notes.
  • Technical data — IP address, browser, device and the pages you visit on this website.
  • Preferences — whether you would like to hear from us about properties or services.

3. How we collect your data

  • Directly from you — enquiry forms on this website, phone calls, WhatsApp, email, viewings and any agreement you sign with us.
  • From third parties — referencing agencies, banks, lawyers and notaries, property portals and our own records.
  • Automatically — cookies and similar technologies when you browse this website.

4. Why we use your data, and our lawful basis

  • To answer your enquiry and arrange viewings — steps taken at your request before entering into a contract.
  • To perform a contract with you — a sale, purchase, tenancy or management agreement.
  • To meet legal obligations — anti-money-laundering, tax and tenancy rules that apply in Cyprus.
  • For our legitimate interests — running, protecting and improving our business, keeping proper records and preventing fraud.
  • With your consent — marketing messages and any non-essential cookies. You can withdraw consent at any time.

5. Who we share your data with

  • Members of our own team who need the information to do their work.
  • Lawyers, notaries, banks, accountants and tax advisers involved in a sale, purchase or tenancy.
  • Referencing and credit-check providers for tenancy applications.
  • Maintenance contractors, utility providers and insurers dealing with a managed property.
  • Property portals, photographers and marketing partners where a property is advertised.
  • IT, hosting and email providers that keep our systems running.
  • Public authorities, courts and regulators where we are legally required to respond.

We do not sell your personal data, and we do not pass it to unrelated companies for their own marketing.

6. Transfers outside the EEA

Our providers are mainly inside the European Economic Area. Where a provider sits outside it, we only transfer personal data with appropriate safeguards in place, such as the European Commission's standard contractual clauses or a country covered by an adequacy decision.

7. How long we keep your data

We keep personal data only for as long as we need it:

  • Enquiries that do not lead anywhere — up to 12 months.
  • Sale, tenancy and management records — the length of the relationship, plus six years for tax and legal purposes.
  • Financial and accounting records — the statutory retention period.
  • Anti-money-laundering records — five years after the end of the relationship.
  • Marketing preferences — until you unsubscribe or ask us to remove you.

8. Your rights

Under data protection law you have the right to:

  • see the personal data we hold about you;
  • ask us to correct data that is inaccurate or incomplete;
  • ask us to delete data we no longer need;
  • restrict or object to how we use your data;
  • receive your data in a portable format;
  • withdraw consent at any time, without affecting processing that already took place lawfully.

To use any of these rights, write to info@c2ccy.com. We answer within one month. If you are not satisfied with our response, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dpa@dataprotection.gov.cy).

9. Cookies

We use a small number of cookies so that this website works properly, and — where you allow it — analytics cookies to understand which pages are useful. You can block or delete cookies in your browser settings; some parts of the site may then work less well.

10. How we protect your data

Access is limited to team members who need it, we rely on secure systems, passwords and backups, and we work with providers under contracts that protect your data. No online system is completely secure, so please avoid sending identity documents or bank details by ordinary email — we will suggest a safer route where one is needed.

11. Children

Our services are intended for adults. We do not knowingly collect personal data from anyone under 18.

12. Changes to this policy

We may update this policy when the way we work, or the law, changes. The date at the top of this page shows the current version. If a change is significant, we will make it clear on this website.

13. Contact us

Questions about this policy, or about the personal data we hold, are welcome at info@c2ccy.com, by phone or WhatsApp on +357 96 945 888, or by post to Makariou III, 151, Pervolia Residences, 7560 Larnaca, Cyprus.

This page describes our general practice in everyday language. It is not legal advice, and it does not replace the terms of any agreement you sign with us.