Privacy Policy
Last updated: January 2026
1. Introduction
Cymply ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information when you use our website and services.
We comply with the General Data Protection Regulation (GDPR) and Cypriot data protection legislation.
2. Data Controller
Cymply Ltd is the data controller responsible for your personal data.
Contact: privacy@cymply.cy
3. What Data We Collect
| Data Type | Purpose | Legal Basis |
|---|---|---|
| Business Information (name, address, phone) | Display in directory to help users find businesses | Legitimate interest |
| User Account Data (email, name) | Account creation and management | Consent / Contract |
| Reviews and Ratings | Help users make informed decisions | Consent |
| Usage Data (pages visited, clicks) | Improve our services | Legitimate interest |
| Business Claim Data | Verify business ownership | Consent / Contract |
4. Business Data Sources
We collect business information from:
- Publicly available websites and social media
- Government business registries
- Other public directories
- Direct submissions from business owners
We only collect publicly available business information that businesses have already made public for commercial purposes.
5. Your Rights (GDPR)
Under GDPR, you have the following rights:
- Right of Access: Request a copy of your data
- Right to Rectification: Correct inaccurate data
- Right to Erasure: Request deletion of your data
- Right to Restrict Processing: Limit how we use your data
- Right to Data Portability: Receive your data in a portable format
- Right to Object: Object to processing based on legitimate interest
To exercise these rights, contact us at privacy@cymply.cy
6. Business Owner Rights to Removal
If you are a business owner and wish to have your business removed from our directory, you may:
- Email removal@cymply.cy with your request
- Use our Claim Your Business form to request removal
We will process removal requests within 14 business days.
7. Cookies
We use essential cookies for the functioning of our website. We may also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.
8. Data Retention
We retain business data for as long as it remains publicly available and relevant. User account data is retained until account deletion is requested. We may retain certain data for legal compliance purposes.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- SSL/TLS encryption for data in transit
- Secure cloud hosting with regular backups
- Access controls and authentication
10. Third-Party Services
We may use third-party services for:
- Hosting (Vercel/Cloudflare)
- Analytics (privacy-focused analytics)
- Maps (Google Maps API)
These services have their own privacy policies.
11. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.
12. Contact Us
For any privacy-related questions or requests:
- Email: privacy@cymply.cy
- For business removal: removal@cymply.cy
Data Protection Officer
Contact our DPO at dpo@cymply.cy