1. How We Collect and Use Your Data
1.1. Terms
In this Privacy and Personal Data Protection Policy (hereinafter referred to as the Policy), any references to “Legarithm”, “we”, “us”, and “our” refer to Legarithm Cyprus Ltd, a limited liability company registered under the laws of Cyprus with registration number HE 465393, and located at Arch. Makarios III Avenue 1-7, Mitsis Building 3, Office 302, 1065 Nicosia.
In the context of this Policy, personal data refers to information relating to an identified or identifiable natural person.
An identifiable person is a natural person who can be identified, directly or indirectly, by reference to one or more factors such as name, identification number, location information, or other unique characteristics related to physical, physiological, psychological, genetic, economic, cultural, or social identity.
1.2. Data Processing Principles
Legarithm is a corporate services firm that values its reputation, so we pay special attention to protecting the personal data of our clients and ensuring full compliance with relevant laws, regulations, and ethical standards, including the EU Regulation 2016/679 (GDPR), providing maximum protection of its integrity. Our main principles of personal data processing include: transparency, confidentiality, legality, fairness, data minimization, accuracy, purpose limitation and security of your data.
This means that we clearly express how, why, and for what purposes we collect and use your data, ensuring that all processing is carried out on lawful grounds; that we only gather information that is necessary, accurate, and up-to-date for our legitimate purposes; and that your information is stored in a secure and protected manner and not retained any longer than necessary. We also take all necessary measures to protect your data from unauthorized access, use, or disclosure.
The basis of the processing depends on its purpose: we process a request you send us at your request before a contract, to answer it and prepare a quote (Article 6(1)(b) GDPR); cookies and similar tools that need your answer run only with your consent (Article 6(1)(a)); and we process the identity documents of a client because the law on money laundering requires it (Article 6(1)(c)).
The two counters that run before you answer the question about cookies, the spam filter and the limit that stops abuse of the forms rest on our legitimate interest (Article 6(1)(f)): we want to know how the site is read and to keep it safe. You can object to this (see 3.1).
Where we rely on your consent (cookies), you can withdraw it at any time in Cookie settings.
1.3. Company Status
In connection with the described actions related to personal data processing, Legarithm acts as the data controller, meaning that we determine the purposes and means of processing your personal data in accordance with personal data protection laws, including the EU Regulation 2016/679 (GDPR), which regulates the protection of natural persons regarding the processing of their personal data and the free movement of such data.
1.4. Purpose of the Policy
The purpose of this Policy is to provide you with clear, transparent, and complete information about the processing of your personal data and the methods Legarithm applies as the data controller.
We do not collect information that is not necessary for achieving the purposes outlined in this policy. Your personal data may be processed for a number of reasons, which include but are not limited to: when you access or interact with our website; when we use your data to perform internal tasks such as testing, data analysis, research, and surveys to improve the website’s functionality and ensure the best user experience. This also includes effective content rendering on our Service. We may also use your personal information to verify your identity and to send you what you requested.
1.5. Scope of the Policy
This Policy applies to all personal data processing activities carried out within the activities of Legarithm. It covers, among other things, the management and maintenance of our website, the processing of requests sent through the forms of the website (a quote, a call back, the checklist), the booking of a call and the messenger links. Additionally, it covers support for Legarithm staff, interactions with clients, service providers, and business partners.
1.6. Changes to this Policy
This Policy may be amended over time due to updates in legislation or changes in our business activities. We recommend you periodically check this page to familiarize yourself with the current version of the Policy. In case of any changes, we will notify you regarding the date of the Policy update.
1.7. Links to External Sites
Our site may contain links to platforms and other websites that Legarithm does not control. Legarithm is not responsible for your data being stored or used on such third-party websites. We recommend that you review the privacy policy of each third-party site that you visit through our website for full information on how your personal data may be used and how it is handled.
2. General Provisions Applicable to All Personal Data Processing Operations Performed by Legarithm
2.1. Data Minimization
The forms on the website say what they collect the data for. We ask only for what we need. The form marks the optional fields; we need the others to answer you.
2.2. Transfer of Your Data to Third Parties
We do not transfer your personal data to third parties for direct marketing purposes.
Your data may be transferred to technical service providers chosen based on their experience and reliability, who act on our behalf and according to our instructions. These may include IT subcontractors, hosting providers, server suppliers, etc. We allow these providers to use your personal data only to the extent necessary for providing services on our behalf or for fulfilling legal requirements. We also enter into data protection agreements (DPAs) with our providers to ensure the security of your data.
We use external platforms: Google Tag Manager, Google Analytics and Google Ads (Google Ireland Limited, Ireland, and Google LLC, USA), the Meta pixel (Meta Platforms Ireland Limited, Ireland), the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company, Ireland), Contentsquare (Content Square SAS, France), Mouseflow (Mouseflow ApS, Denmark), Ahrefs Web Analytics (Ahrefs Pte. Ltd., Singapore) and, for the requests you send through the forms of the website, NetHunt CRM (NetHunt Inc., USA) and Resend (Plus Five Five, Inc., USA), which sends the checklist you ask for; those of them that store information on your device or read information from it run only after you allow them. Two of them run before you answer the question about cookies, and neither sets a cookie or reads one: Ahrefs Web Analytics, which counts page views, and Google's tags for Google Analytics and Google Ads, which load with every permission set to denied and send Google signals without cookies. To arrange a call that you book through the website we use Google Calendar and Google Meet (Google Ireland Limited, Ireland, and Google LLC, USA); the calendar opens in the booking block after you send the request, or in a new tab when you press its button.
If you have allowed statistics cookies and you press a WhatsApp, Telegram or email link on our site, we give your visit a short reference code (for example “ref 7KQ2M”), which is added at the end of the message you then send us. With the code we keep, for three months, the page you were on, its language, the site and the campaign that brought you to us, the first page of your visit, which of the three links you pressed and a random identifier of your browser. We keep no name, address or message with it. We use it to see which pages lead to conversations. When your message arrives with the code, we add these details to the record of that conversation in our CRM and keep them with it. A request always carries the page it was sent from; with statistics allowed it also carries the site that brought you, the first page of your visit and the campaign labels. A copy of each request stays on our server for 90 days after it reaches our CRM; a request that did not reach our CRM, and a message that our filter takes for spam, stay there for 30 days. If you refuse statistics cookies, no code is made and the links open without it. To suggest the dialling code of a phone field, our server reads the country that Cloudflare gives for your connection; it is not stored.
Legarithm may disclose your information to third parties only if required by law, government decree, or court decision, or if such disclosure is necessary for the protection of our rights.
2.3. Data Security
Legarithm is committed to protecting your personal data from potential destruction, distortion, unauthorized access, or disclosure. To achieve this, Legarithm takes appropriate technical and organizational measures, taking into account the nature of the data and the risks associated with their processing, to ensure the security and confidentiality of your personal data, including preventing its unauthorized access and illegal use. These include protection measures at both the organizational and technical level, as well as contractual guarantees that we enter into with service providers when data is transferred. Furthermore, we regularly conduct reviews and impact assessments regarding data confidentiality. We also continuously review our privacy policies and practices to ensure their compliance with the best data security standards.
3. Your Rights
3.1. Your Rights Over Your Data
Under the GDPR you have the right to:
- access the personal data we hold about you and get a copy of it;
- have inaccurate data corrected;
- have your data deleted;
- restrict the processing of your data;
- object to the processing of your data;
- receive your data in a structured, commonly used format and have it passed to another controller (data portability);
- withdraw your consent at any time; this does not affect the processing done before you withdrew it.
Some of these rights apply only in the cases the GDPR sets.
3.2. How to Use Your Rights
Write to info@legarithm.io. We answer within one month.
3.3. Complaints
If you think we process your data unlawfully, you can complain to the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy) or to the data protection authority of the country where you live or work.
