Privacy Policy

Effective Date: 20 May 2026 Last Updated: 20 May 2026

This Privacy Policy explains how Olias Homes Ltd (“Olias Homes”, “we”, “us”, or “our”) collects, uses, shares and protects personal data when you visit our website at oliashomes.com (the “Site”), enquire about our properties, download our property guide, subscribe to our newsletter, or otherwise interact with us.

We are a property developer based in Paphos, Cyprus, designing, building and selling residential properties (villas and apartments) on the Paphos coast. We are committed to protecting your personal data and processing it lawfully, fairly and transparently in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Cyprus Law on the Protection of Natural Persons with regard to the Processing of Personal Data and the Free Movement of Such Data (Law 125(I)/2018).

If you do not agree with this Privacy Policy, please do not use the Site or share your personal data with us.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:

Olias Homes Ltd Eleftheriou Venizelou 56 8021 Paphos Republic of Cyprus

Email (general): [email protected] Email (privacy and data subject requests): [email protected] Telephone: +357 26 222 288 Sales: +357 97 677 000 Website: https://oliashomes.com

For any question about this Policy or your personal data, please write to us at [email protected] or by post at the address above.

2. What Personal Data We Collect

We collect personal data in three main ways: information you give us, information we collect automatically when you use the Site, and information we receive from third parties.

2.1 Information You Give Us

We collect personal data you provide voluntarily when you:

Submit our contact form or property enquiry form
Request a viewing (virtual or in-person)
Download our Olias Homes Property Guide
Subscribe to our newsletter
Contact us by email, telephone, WhatsApp or postal mail
Reserve, purchase or express interest in one of our properties
Engage with us during sales, marketing or events

The categories of personal data we may collect in these contexts include:

Identification data: first name, last name
Contact data: email address, telephone number, postal address, country of residence
Enquiry data: the property you are interested in, your budget, your intended use (primary residence, holiday home, investment), preferred viewing dates, language preference
Correspondence data: the contents of your messages to us (emails, WhatsApp messages, contact-form submissions, call notes)
Transactional data: where you proceed to reserve or purchase a property, additional information required to enter into a reservation agreement, sale-and-purchase contract and to comply with our legal obligations (see section 2.4 below)

2.2 Information We Collect Automatically

When you visit the Site, we and our service providers automatically collect certain technical information using cookies and similar technologies, including:

IP address and approximate location (country/city level)
Browser type and version, operating system, device type and screen resolution
Referring URL and the pages you visit on the Site
Date, time and duration of your visit
Clicks, scrolls and other interactions with Site content
Log data and diagnostic information

For details of the specific cookies we use and how to manage them, please see our Cookie Policy.

2.3 Information From Third Parties

We may receive personal data about you from:

Social media platforms (Instagram, Facebook, YouTube, LinkedIn) when you interact with our pages or click our ads — limited to the information those platforms make available to us under your privacy settings
Google Maps and Google Analytics in connection with your use of the Site
Real estate agents, partners and referrers who pass on enquiries about our properties with your knowledge
Publicly available sources such as company registries, where this is necessary for due diligence

2.4 Information Required to Complete a Property Purchase

If you decide to reserve or purchase a property from us, we are legally required to collect additional information to comply with Cyprus and EU anti-money-laundering (“AML”), know-your-customer (“KYC”) and tax obligations. This may include:

Copy of passport or national identity document
Proof of address (e.g. recent utility bill or bank statement)
Source-of-funds documentation
Tax identification number(s)
Bank account details for payment
Information about the source of your wealth, where required
Politically Exposed Person (PEP) status declarations

This information is processed strictly for legal compliance and for performing our contract with you. We share this information only with the parties listed in section 5 (e.g. our lawyers, banks, the Department of Lands and Surveys, tax authorities).

We do not knowingly seek “special categories” of personal data (such as health, religion, ethnic origin, political opinions or biometric data). Please do not send us such data unless we specifically ask for it.

3. Why We Use Your Personal Data and Our Legal Bases

Under GDPR, we may only process your personal data when we have a lawful basis. The table below sets out our purposes and the corresponding legal bases.

Purpose	Personal data used	Legal basis (GDPR)
Responding to your enquiries (contact form, email, phone, WhatsApp)	Identification, contact, enquiry and correspondence data	Article 6(1)(b) — steps taken at your request prior to entering a contract; or Article 6(1)(f) — our legitimate interest in answering enquiries
Sending you our property guide after download	Contact data	Article 6(1)(b) — performance of your request
Arranging and conducting property viewings	Identification, contact, enquiry data	Article 6(1)(b) — pre-contractual steps
Sending you marketing emails, newsletters and property updates	Contact data, engagement data	Article 6(1)(a) — your consent (you can withdraw at any time)
Negotiating, entering into and performing reservation and sale-and-purchase contracts	All data in sections 2.1 and 2.4	Article 6(1)(b) — performance of a contract
Complying with AML, KYC, tax, real-estate licensing and other legal obligations	KYC documents, transaction data	Article 6(1)(c) — legal obligation
Operating, securing and improving the Site (analytics, performance, fraud prevention)	Technical and usage data	Article 6(1)(f) — our legitimate interest in running a secure and useful website; Article 6(1)(a) — consent for non-essential cookies
Defending or bringing legal claims	Any relevant data	Article 6(1)(f) — our legitimate interest in protecting our legal rights
Managing after-sales support and warranty claims	Customer and contract data	Article 6(1)(b) — performance of our contract with you

Where we rely on legitimate interests, we have carried out a balancing exercise and concluded that our interests are not overridden by your rights and freedoms. You have the right to object to processing based on legitimate interests at any time (see section 8).

Where we rely on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How Long We Keep Your Personal Data

We retain your personal data only for as long as necessary for the purposes for which it was collected, and in line with our retention obligations under Cyprus law:

Enquiries that do not lead to a purchase: up to 24 months from your last interaction, after which we delete or anonymise the data
Newsletter subscribers: until you unsubscribe, plus a short retention period for record-keeping
Cookie and analytics data: as set out in our Cookie Policy
Reservation and sale-and-purchase contracts and related transaction records: for the duration of the contract and for at least 7 years after its termination, in line with Cyprus tax law (Article 30A of the Assessment and Collection of Taxes Law) and Companies Law
AML/KYC records: 5 years from the end of the business relationship, as required by the Prevention and Suppression of Money Laundering Activities Law (Law 188(I)/2007, as amended)
Records needed to defend legal claims: for the duration of any applicable limitation period under Cyprus law (generally up to 6 years, longer for certain claims)

When we no longer need your data, we will delete it or anonymise it so it can no longer be linked to you.

5. Who We Share Your Personal Data With

We do not sell your personal data. We share it only with the following categories of recipients, and only to the extent necessary:

Our personnel (employees and contractors) who need access to perform their roles, under confidentiality obligations
Professional advisers — lawyers, notaries, accountants, tax advisers and auditors, in connection with property transactions, compliance and dispute resolution
Banks and payment service providers — to receive deposits and purchase payments and to verify identity for AML purposes
Cyprus public authorities — including the Department of Lands and Surveys, the Tax Department, the Council for the Registration of Real Estate Agents, and other regulators, where required by law
IT and hosting providers — including our website host, email provider, CRM and form-handling services, who process data on our behalf under written agreements
Analytics, advertising and marketing providers — Google (Google Analytics, Google Tag Manager, Google Maps), Meta (Facebook/Instagram) and similar platforms, as further described in our Cookie Policy
Communication tools — including WhatsApp (Meta Platforms Ireland Ltd) when you choose to contact us via WhatsApp
Construction and design partners — only where necessary to coordinate your purchase, build customisations or after-sales matters
Real estate agents and referrers — where you were introduced to us through one of them
Potential buyers/investors of our business — in the event of a merger, acquisition or restructuring, in which case data will be transferred under appropriate safeguards
Courts, law enforcement and regulators — where we are required to do so by law or to defend our legal rights

All third parties that process personal data on our behalf do so under written contracts that meet the requirements of Article 28 GDPR.

6. International Transfers

Some of our service providers (notably Google and Meta) are based outside the European Economic Area (“EEA”), including in the United States. When we transfer personal data outside the EEA, we ensure that one of the following safeguards is in place:

The country has an adequacy decision from the European Commission (e.g. transfers to organisations certified under the EU-US Data Privacy Framework)
We use Standard Contractual Clauses approved by the European Commission
Another lawful transfer mechanism under Chapter V GDPR applies

You can request a copy of the relevant safeguards by contacting us at [email protected].

7. How We Protect Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include:

HTTPS/TLS encryption for data transmitted through the Site
Access controls limiting personal data to staff who need it
Secure storage of contracts and KYC documents
Confidentiality obligations on our staff and contractors
Vendor due diligence for our service providers
Regular review of our security practices

No method of transmission over the internet or method of electronic storage is completely secure. If you have any reason to believe your interaction with us is no longer secure, please contact us immediately at [email protected].

8. Your Rights

If you are located in the EEA, the UK or Switzerland, you have the following rights in relation to your personal data:

Right of access — to obtain confirmation of whether we process your data and a copy of it
Right to rectification — to have inaccurate or incomplete data corrected
Right to erasure (“right to be forgotten”) — to ask us to delete your data, subject to legal retention obligations
Right to restriction — to ask us to limit how we use your data in certain circumstances
Right to object — to processing based on our legitimate interests, including direct marketing
Right to data portability — to receive your data in a structured, commonly used and machine-readable format, and to transmit it to another controller, where applicable
Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
Right not to be subject to automated decision-making that produces legal or similarly significant effects — we do not carry out such automated decision-making
Right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at [email protected]. We may ask you to verify your identity before we act on your request. We will respond within one month, with the possibility of extending by up to two further months for complex requests.

If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus:

Address: Iasonos 1, 1082 Nicosia, Cyprus Postal Address: P.O. Box 23378, 1682 Nicosia Telephone: +357 22 818 456 Email: [email protected] Website: https://www.dataprotection.gov.cy

You may also lodge a complaint with the data protection authority of your country of residence.

9. Marketing Communications

If you have given us your consent, or if you are an existing customer and we consider it permitted under applicable law, we may send you marketing emails about our properties, news and events.

You can opt out of marketing communications at any time by:

Clicking the “unsubscribe” link in any marketing email we send you
Emailing us at [email protected]

Opting out of marketing does not stop us from sending you service messages (for example, replies to your enquiries, contract-related communications, or after-sales support).

10. Children

The Site is not intended for children under the age of 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at [email protected] and we will take steps to delete it.

11. Third-Party Links

The Site may contain links to third-party websites, social media platforms or services. We are not responsible for the privacy practices or content of those third parties. We encourage you to read their privacy policies before providing them with any personal data.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated version will be indicated by a new “Last Updated” date at the top of this Policy. Material changes will be brought to your attention by a prominent notice on the Site or, where appropriate, by email.

We encourage you to review this Privacy Policy periodically.

13. Contact Us

If you have any questions, comments or complaints about this Privacy Policy or how we handle your personal data, please contact us:

Olias Homes Ltd Eleftheriou Venizelou 56, 8021 Paphos, Cyprus

Email: [email protected]