Privacy Policy

1. Controller

Arvora Developments Ltd, 28 Amathountos Avenue, 4532 Limassol, Cyprus, is the data controller for the personal data described here. For any privacy matter, write to info@arvora.com.cy with “Privacy” in the subject line.

2. What we collect

We keep collection deliberately narrow and ask only for what a property conversation needs.

• Identity and contact details: name, email, phone, country and preferred language.
• Enquiry details: the development or area you are interested in, budget range, timeline, purpose (home or investment), and anything you write in a message.
• Buyer and reservation records: the documentation required for a reservation, contract of sale and anti-money-laundering checks, collected only if you proceed.
• Technical and usage data: IP address, device and browser type, referring source, pages viewed and interactions, collected through analytics and tag management.
• Marketing preferences: consents, subscription status, opens and clicks on our updates.

3. Why we use it, and our legal basis

We rely on legitimate interests to answer enquiries, qualify and manage them in our sales pipeline, and protect the site from misuse.

We rely on contract performance to progress reservations, contracts of sale, handover and after-sales care.

We rely on consent for marketing emails and for non-essential analytics and advertising measurement — you may withdraw consent at any time.

We rely on legal obligation for tax records, anti-money-laundering and title-related requirements in Cyprus.

4. Who we share it with

We do not sell personal data. We share it only with processors and professionals that help us deliver the service, each under contract and limited to what they need: our CRM and lead-routing platform, email delivery and newsletter providers, analytics and tag management, advertising measurement platforms, hosting and infrastructure, and the lawyers, accountants, banks, architects and contractors involved in a specific transaction. Full details are in our data policy.

Where a provider processes data outside the European Economic Area, we rely on adequacy decisions or the European Commission's standard contractual clauses.

5. How long we keep it

Enquiries that do not proceed are kept for up to 24 months from the last contact, then deleted or anonymised. Marketing subscribers are kept until they unsubscribe, plus a short suppression record so we do not contact them again. Buyer, contract and accounting records are kept for the periods required by Cyprus law, generally at least seven years after completion.

6. Your rights

Under the GDPR you can ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, port it to another provider, or stop marketing to you. You can also object to profiling used to prioritise enquiries.

Send requests to info@arvora.com.cy. We respond within one month and never charge for a first request. If you are not satisfied, you may complain to the Office of the Commissioner for Personal Data Protection in Cyprus.

7. Cookies and tracking

We use a small number of essential cookies to make the site work, and — only with your consent — analytics, tag management and advertising measurement cookies that help us understand which pages and developments generate genuine interest. You can change or withdraw your choice at any time through your browser settings or by contacting us.

8. Security and children

Access to enquiry data is restricted to the people who need it, transmitted over encrypted connections and held in access-controlled systems. Our services are not directed at children, and we do not knowingly collect their data.