GDPR & Data Rights
Your data rights at tax.com.cy
Rights you have
Request a copy of all personal data we hold about you. We will provide a complete data export within 30 days.
Request correction of inaccurate or incomplete personal data. We will update records within 14 days.
Request deletion of your data where there is no lawful basis to retain it. Note: some data must be retained by law (tax records: 6 years).
Request that we restrict processing of your data in certain circumstances — for example while a dispute is being resolved.
Receive your data in a structured, machine-readable format (JSON or CSV) for transfer to another service.
Object to processing based on legitimate interests. We will cease processing unless we can demonstrate compelling grounds.
How to make a request
To exercise any of the rights above, submit a request using the form below or email privacy@tax.com.cy. We will acknowledge your request within 72 hours and respond fully within 30 days.
We may need to verify your identity before processing a request to ensure we do not release data to the wrong person.
Data we hold about you
When you use tax.com.cy, we may hold the following categories of data about you: account information (name, email, phone, password hash), KYC documents (passport, proof of address), tax profile information (TIC number, VAT number, non-dom status), uploaded documents (payslips, bank statements, tax returns), messages with your Advisor, booking and consultation history, invoice records, usage and activity logs, and marketing consent records.
Data we do NOT hold
Data breach notification
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Cyprus Data Protection Commissioner within 72 hours of becoming aware.
Where the breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly without undue delay.
No data breaches have been recorded since the Platform launched.
Contact and complaints
Data Protection contact: privacy@tax.com.cy
[Company Name]
[Address], Nicosia, Cyprus
If you are not satisfied with our response to a data request or believe we are processing your data unlawfully, you have the right to lodge a complaint with:
Office of the Commissioner for Personal Data Protection
1 Iasonos Street, 1082 Nicosia, Cyprus
Tel: +357 22818456
commissioner@dataprotection.gov.cy