Privacy Policy
This policy explains how Stelios Nicolaou, trading under the Cyprus-registered business name YCONSULT (website brand: YCONSULT Hospitality Academy; registered business name supplied by the operator) (referred to as “YCONSULT”, “we” or “us”), established in the Republic of Cyprus, processes personal data through yconsultglobal.com and related enquiries.
1. Who is responsible
The data controller is Stelios Nicolaou, trading as YCONSULT (YCONSULT Hospitality Academy), Republic of Cyprus. Contact: [email protected]. Registered business address and registration number: YCONSULT, Onisilou 2, Block 4, Apartment 413, 7081 Larnaca, Republic of Cyprus.
2. Information we collect
- Contact details you provide: name, email, organisation, position and optional telephone number.
- Enquiry details: event type, preferred date, location, audience size, objectives and messages you choose to share.
- Technical information necessary to operate and protect the site, which may include IP addresses, browser details, server logs and security events.
- Academy launch-interest registrations (name, email and optional interests) where you expressly request updates.
3. Purposes and lawful bases
- Responding to enquiries and preparing proposals: legitimate interests in handling business correspondence, or steps requested before entering a contract.
- Operating and securing the website: legitimate interests in site reliability and security.
- Keeping records where required: compliance with applicable legal obligations.
- Academy launch announcements: consent when you actively opt in through the Academy priority-list form; making a separate business enquiry does not subscribe you.
We do not use your enquiry details to make solely automated decisions producing legal or similarly significant effects.
4. Who may receive information
Information may be processed by service providers necessary for website hosting, security, email, enquiry handling and technical support. Google Workspace is used for business email and Cloudflare is selected for DNS, website hosting through Cloudflare Pages, and security. Formspree is used to receive and process website enquiries and Academy launch-interest registrations. Formspree notification emails are delivered through Google Workspace. These integrations must be tested before public launch. We do not sell personal information.
5. International transfers
Google Workspace, Cloudflare, and the future form provider may involve processing outside Cyprus or the European Economic Area. Where required, appropriate safeguards, such as adequacy decisions or standard contractual clauses, will be relied upon. Details depend on the final providers selected.
6. Retention
We retain personal data only as long as necessary for the purpose collected, subject to applicable law. Our proposed schedule is: enquiries that do not result in an engagement, up to 12 months after the last substantive contact; active client communications, for the duration of the engagement and a documented period thereafter based on legitimate business needs and applicable limitation periods; contracts, invoices and financial records, for the period required by Cyprus tax, accounting and other applicable law; optional launch-interest subscribers, until unsubscribe or periodic inactivity review (no later than 24 months without meaningful engagement); and security logs, for the hosting provider’s operational period, subject to provider settings and legal necessity. We review records at least annually and delete or anonymise information when no longer needed. Records may be retained longer where a legal claim, investigation or statutory duty requires it. These are policy choices, not universal EU statutory periods. Records related to an eventual contract may be kept longer where required by law or necessary to resolve disputes.
7. Your rights
Subject to applicable conditions, you may request access, correction, deletion, restriction, portability, or object to certain processing. Where consent is the lawful basis, you may withdraw it at any time without affecting prior lawful processing. Contact [email protected]. You may also complain to the Office of the Commissioner for Personal Data Protection in Cyprus.
8. Cookies and embedded content
See our Cookie Policy. Optional analytics, marketing tools or third-party media will not be activated without an appropriate consent mechanism where legally required.
9. Changes
We may update this policy as our services and systems develop. The effective date shown above will be revised when changes are published.