Privacy Policy

1. Who we are

M2 Estates is the data controller for the personal data described in this Privacy Policy.

Contact: info@m2-estates.com
Telephone: 700 87 033
Office: Neas Engomis 33, DOMS Business Center, 2409, Engomi, Cyprus

2. Personal data we collect

Depending on how you use the website, we may collect:

• Contact information, such as your name and telephone number when you request a call back or make an enquiry.
• Technical and usage information, such as IP address, browser and device information, pages viewed, approximate location, referral information and interactions with the website.
• Cookie and consent information, including your cookie preferences and consent choices.
• Information received through third-party services used on the website, including analytics, advertising and embedded map services.

3. How and why we use personal data

We process personal data for the following purposes:

• To respond to enquiries, call-back requests and requests for information about our properties or services.
• To take steps at your request before entering into a possible business relationship or transaction.
• To operate, secure, maintain and improve our website.
• To understand website performance and visitor behaviour through analytics, where you have provided the required consent.
• To measure and improve advertising campaigns and audiences through marketing technologies, where you have provided the required consent.
• To comply with applicable legal and regulatory obligations.

Depending on the processing activity, the legal basis may be your consent, steps taken at your request before entering into a contract, compliance with a legal obligation, or our legitimate interests in operating our business and responding to enquiries.

4. Contact forms

Our website includes forms that allow you to request a call back. These forms currently ask for your name and telephone number. We use this information only for handling your enquiry, communicating with you and taking any requested follow-up steps.

Form submissions may be processed and stored through Webflow, the platform used to host and operate this website.

5. Cookies and similar technologies

We use CookieYes to manage cookie consent and preferences. Necessary cookies may be used where required for the website to function. Non-essential cookies and similar technologies, including analytics and advertising technologies, are used only in accordance with your consent choices.

You can change or withdraw your cookie preferences at any time.

Cookie Settings

6. Analytics and advertising

We use Google Analytics to understand how visitors use the website and to help improve its performance and content. Google Analytics may process technical and usage information such as device information, online identifiers and interactions with the website.

We also use the Meta Pixel to measure website activity related to advertising and to understand the effectiveness of campaigns. These technologies may use cookies or similar identifiers and are subject to your consent preferences where required.

7. Embedded content and Google Maps

Some pages include embedded Google Maps content to display our location. When this content is loaded, Google may receive technical information such as your IP address and browser or device information, and may use cookies or similar technologies in accordance with its own privacy terms and your consent settings.

8. Who may receive your data

We may share personal data with service providers that support the operation of our website and business, including website hosting and form processing providers, analytics providers, advertising platforms, mapping providers and technical service providers. These providers process data only for relevant service purposes and subject to applicable contractual and legal requirements.

We may also disclose personal data where required by law, regulation, court order or a competent public authority.

9. International data transfers

Some of our service providers may process personal data outside Cyprus or outside the European Economic Area. Where personal data is transferred internationally, we rely on applicable legal transfer mechanisms and safeguards where required by data protection law.

10. Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including responding to enquiries, maintaining appropriate business records, resolving disputes and meeting legal or regulatory requirements. Retention periods may vary depending on the type of information and the reason it is processed.

11. Data security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

12. Your data protection rights

Subject to the conditions and limitations of applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Request restriction of processing.
• Object to certain processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time where processing is based on consent, without affecting processing carried out before withdrawal.

To exercise your rights, contact us at info@m2-estates.com. We may need to verify your identity before completing a request.

13. Complaints

If you believe that your personal data has been processed in a way that does not comply with applicable data protection law, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus. We would also welcome the opportunity to address your concern directly first.

14. Third-party websites

Our website may contain links to third-party websites or services. Their privacy practices are governed by their own privacy notices, and M2 Estates is not responsible for how those third parties process personal data.

15. Changes to this Privacy Policy

We may update this Privacy Policy when our website, services, technologies or legal obligations change. The latest version will be published on this page and the “Last updated” date will be revised accordingly.