Your Privacy Matters

Data Controller

A NIKO LAOS CONSULTING LTD, 192 Ledras Street, Nicosia, Cyprus (Registration: HE 485344). Contact: info@estia-invest.com, +357 95 133 748.

What Data We Collect

We collect the personal data you provide through our forms and, in a few cases, technical data needed to run the website:

• Forms: name, phone number, email address and property details; in the contact form also the message you write to us, which is stored with your enquiry and forwarded to our team by e-mail.
• Calculator and eligibility check: additionally the age and gender (calculator only) of the person who would live in the property, which may be you or someone you enquire for, and optionally the age of that person's partner; whether the property is owned, the value range, the purposes you select and the calculated or eligibility result. If you enter data about another person, please make sure they agree.
• Seller and investor registrations: additionally your free-text notes; for investors also investor type, company registration number, investment capacity and country.
• Partner form: additionally company, professional role and city.
• Customer file: identification and title documents (copies of passports or identity cards, residence certificates, title deeds) and further documents that you give us or that we prepare during the consultation (signed agreements, valuations, photos, other property documents). We may receive such documents before an agreement is signed; we keep them in your customer file.
• Technical data: when you submit a form we process your IP address for a short time to limit automated abuse (rate limiting).
• Campaign parameters: if you reach us through a link with campaign parameters (UTM), your browser keeps them together with the referring page and the first page you opened for the duration of your visit. When you submit the calculator, they are saved with your enquiry so that we know which campaign led to it.
• Usage data through cookies, only with your consent.

Legal Basis

We process your data on the following legal bases:

• Your consent (GDPR Art. 6(1)(a)).
• The performance of a consultancy agreement with you (Art. 6(1)(b)).
• Our legitimate interests (Art. 6(1)(f)): providing you with property valuation services and identifying our contracting parties; keeping a record of our correspondence with you; keeping our website secure (short-term processing of IP addresses for abuse prevention and error monitoring); knowing which campaigns lead to enquiries (campaign parameters, referring page and landing page saved with the enquiry); understanding how our website is used through cookie-free, aggregated usage statistics.

How We Use Your Data

To respond to your inquiries, provide property valuations, prepare equity release offers, and send relevant information about our services (if opted in).

Data Retention

• Enquiry data, including the campaign parameters saved with it: 3 years after last contact, unless you request earlier deletion.
• Identification documents: for as long as the business relationship lasts, and for five years thereafter.
• Contract and accounting records: kept for the statutory retention periods, accounting records for six years.
• Other documents in the customer file (valuations, photos, signed agreements, other property documents): for as long as the business relationship lasts, and for five years thereafter. If no agreement is signed, we delete them together with your enquiry data, 3 years after last contact or earlier on request.
• Rate-limiting IP entries: minutes.
• Error monitoring data: 90 days.
• Cookie-free usage statistics: up to 12 months.

Third Parties

Your data may be processed by the following providers:

• Vercel: hosting and cookie-free website analytics (page views and usage events such as calculator district and property type).
• Supabase: database.
• Upstash: rate limiting of form submissions (IP address, kept for minutes only).
• Sentry: error monitoring (technical data of failed requests, which may include your IP address and error details; form contents, cookies and user identifiers are removed). Sentry processes this data on servers in the European Union (Germany).
• Google Analytics: website analytics, with your consent.
• Resend: transactional e-mail.
• Google Drive: storage of customer documents.
• Google Workspace (Gmail): our company e-mail. Every form notification and the e-mails you exchange with our team are kept there; automatic e-mails such as confirmations are sent via Resend. Authorised members of our team can see these e-mails next to your enquiry in our customer system; the system reads them from Gmail when the enquiry is opened and does not store a copy.
• Cal.com: appointment booking, only if you open the scheduler. Opening it already transmits your IP address and browser data to Cal.com; in addition, the name, e-mail address and time slot you enter there, under Cal.com's own privacy notice.
• Anthropic (AI provider): typed notes of our staff in the customer system.

Providers in the USA are bound by the EU-US Data Privacy Framework or EU standard contractual clauses.

Your Rights

Under GDPR, you have the right to: access, rectification, erasure, data portability, restriction of processing, and objection. You may file a complaint with the Cyprus Data Protection Commissioner.

Postal Communications

When you request our information package by post, we collect your postal address solely for the purpose of sending the requested materials. We retain this address for 12 months following your last interaction with us, after which it is deleted unless you have become a customer or explicitly requested ongoing communication. You can opt out at any time by emailing info@estia-invest.com.

Contact

For any data protection inquiries: info@estia-invest.com