Privacy Policy

Last updated: 26 October 2026

1. Introduction

Cymply ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect information when you use our website and services.

We comply with the General Data Protection Regulation (GDPR) and Cypriot data protection legislation.

2. Data Controller

G&S CYMPLY LTD (company registration number HE 493525), Keratidou 14, Office 2, Peyia 8560, Cyprus, is the data controller responsible for your personal data.

Contact: privacy@cymply-cy.com

3. What Data We Collect

Data Type	Purpose	Legal Basis
Business Information (name, address, phone)	Display in directory to help users find businesses	Legitimate interest
User Account Data (email, name)	Account creation and management	Consent / Contract
Reviews and Ratings	Help users make informed decisions	Consent
Usage Data (pages visited, clicks, country)	Improve our services	Legitimate interest
Business Claim Data	Verify business ownership	Consent / Contract
Content reports (your name, email address, the reason and explanation you give, the review reported, your account id if signed in)	Assess reports of unlawful content or content that breaks our Terms, reply with our decision, keep a record of how reports were handled	Legal obligation (Regulation (EU) 2022/2065, Articles 16–17) / Legitimate interest
Moderation records (the original content, what was changed or removed, the reason, the moderator, the date, the author's account id)	Tell authors why their content was changed, handle complaints and legal requests, prove what was published and when	Legal obligation (Regulation (EU) 2022/2065, Article 17) / Legitimate interest

4. Where Our Business Information Comes From

The business information on Cymply comes from these sources:

Online map and place databases: Google Maps Platform and OpenStreetMap (© OpenStreetMap contributors, Open Database License).
Published on-duty pharmacy lists, for the pharmacies shown on our Emergency page.
The businesses themselves. Owners add and correct their details, opening hours and photos, in their dashboard or by writing to us.
Cymply members. Signed-in members write reviews, upload photos and suggest corrections.

This information can include a business's name, address, location, phone number, website, opening hours, rating, reviews and photos. Where a business is run by a sole trader, some of it is personal data. We publish it on the basis of our legitimate interest, and that of the people who use Cymply, in helping people find and contact local businesses (Article 6(1)(f) GDPR). You can ask us for our assessment of these interests.

Your choices. If a listing concerns you, you can ask us which source its information comes from, ask us to correct it, or object to it and ask us to remove it: email privacy@cymply-cy.com (see also section 6). Signed-in members can also suggest corrections with "Suggest Edit" on the listing. You can also lodge a complaint with the Commissioner for Personal Data Protection, Kypranoros 15, 1061 Nicosia, Cyprus (www.gov.cy/dataprotection).

5. Your Rights (GDPR)

Under GDPR, you have the following rights:

Right of Access: Request a copy of your data
Right to Rectification: Correct inaccurate data
Right to Erasure: Request deletion of your data
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interest
Right to Withdraw Consent: Where we rely on your consent, you can withdraw it at any time; this does not affect processing before the withdrawal
Right to Complain: Lodge a complaint with the Commissioner for Personal Data Protection, Kypranoros 15, 1061 Nicosia, Cyprus (www.gov.cy/dataprotection)

To exercise these rights, contact us at privacy@cymply-cy.com

If you reported content, or your content was moderated, you can also ask us for a copy of the related record and ask us to correct it.

6. Business Owner Rights to Removal

If you are a business owner and wish to have your business removed from our directory, you may:

Email removal@cymply-cy.com with your request
Use our Claim Your Business form to request removal

We will process removal requests within 14 business days.

7. Reviews, Reports and Other People's Data

Reviews are public. Do not include private information about any person in a review — see section 6 of our Terms of Service. If a review contains your private information, use the "Report" link under the review or email support@cymply-cy.com; we remove such content once we are aware of it.

When you report a review, we use your name and email address only to handle the report and reply to you. When we moderate a review, we email its author the reasons; that email goes to the address on their account.

8. Cookies

We use essential cookies for the functioning of our website. We may also use analytics cookies to understand how visitors use our site. You can control cookies through your browser settings.

Marketing and Analytics Cookies: We use cookies and similar technologies (like pixels and tags) provided by third parties such as Google and Meta. These help us analyze platform traffic, measure the effectiveness of our campaigns, and serve relevant advertisements to you on other platforms. You can opt out of non-essential cookies at any time via our cookie consent settings.

9. Data Retention

We retain business data for as long as it remains publicly available and relevant. User account data is retained until account deletion is requested. We may retain certain data for legal compliance purposes.

Content reports are kept for 3 years from the date the report is resolved. Moderation records are kept for 3 years from the date of the decision; the original text of a removed review stays in the moderation record for that period even though it is no longer shown on Cymply. If you delete your account, your reviews are anonymised and the moderation record of a review moderated before deletion is kept for the period above under your account id only.

10. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

SSL/TLS encryption for data in transit
Secure cloud hosting with regular backups
Access controls and authentication

11. Third-Party Services

We use these third-party services:

Hosting (Vercel/Cloudflare) and database (MongoDB Atlas)
Image hosting (Cloudinary)
Sign-in (Firebase Authentication, by Google)
Payments (Stripe)
Email (Google Workspace and Resend)
Analytics and advertising measurement: Google Tag Manager, Google Analytics and the Meta Pixel (see section 12)
Web fonts (Google Fonts)
Map and place data: Google Maps Platform (see section 4)
Google Maps: our directions and map links open Google Maps, which then receives your request

Some of these providers process personal data outside the European Union, mainly in the United States. These transfers rely on an adequacy decision of the European Commission (for the United States, the EU-US Data Privacy Framework, for certified providers) or on the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards at privacy@cymply-cy.com.

These services have their own privacy policies.

12. Tracking Technologies and Third-Party Analytics

We use third-party tracking technologies, including Google Tag Manager, Google Analytics, and the Meta Pixel, to understand how users interact with our platform, improve our services, and deliver personalized advertising. These tools may collect data such as your IP address, device identifiers, browser type, and your interactions with our app (e.g., page views, button clicks). This data may be shared with these third-party providers. You have the right to object to this tracking and can manage your preferences through our cookie consent banner or your device/browser settings.

13. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.

14. Contact Us

For any privacy-related questions or requests:

Email: privacy@cymply-cy.com
For business removal: removal@cymply-cy.com