PRIVACY

Privacy Policy

Last updated: 17 September 2026

This Privacy Policy explains how Auditit Ltd collects and uses personal data when you visit auditit.cy, submit an enquiry or contact us through the website. Personal data is information that identifies you or can be linked to you.

It covers website visitors and prospective clients. If you engage us for professional services, we will provide any additional privacy information relevant to that engagement.

1 Who is responsible for your information

Auditit Ltd is the controller responsible for the personal data described in this policy. Auditit Ltd is a Cyprus company with registration no. HE492855, licensed and regulated by the Institute of Certified Public Accountants of Cyprus (ICPAC) for the provision of audit, accounting and fiduciary services (license no. Α1559).

Contact address: 36 Kypranoros Street, 5th floor, 1061 Nicosia, Cyprus.
Email: info@auditit.cy
Website: https://auditit.cy

You can contact us at this email address with questions about this policy or to exercise your data protection rights.

2 Information we collect

When you use our enquiry form, we collect your name, email address, selected service areas and any telephone number or message you choose to provide. Name, email and at least one service choice are required; you may select “Not sure yet”. Telephone and message are optional. Without the required information, the form cannot be submitted.

If you contact us by email or telephone, we also process the information you share and the correspondence needed to handle your request. Please provide only information relevant to your enquiry. Do not send identity documents, bank details or sensitive personal information through the general enquiry form.

When you visit the website, our hosting and security providers may process technical information such as your IP address, browser and device details, requested pages, referral information, and the date and time of your visit. This supports website delivery, troubleshooting and protection against misuse.

3 Why we use your information

We use enquiry information to understand your request, respond to you and discuss relevant services. Where you ask us to take steps towards a contract with you, the lawful basis is Article 6(1)(b) GDPR. For general enquiries or enquiries on behalf of an organisation, we rely on our legitimate interest in communicating with prospective clients and managing business enquiries under Article 6(1)(f).

We process technical and security information on the basis of our legitimate interest in operating a reliable website and preventing spam, fraud and abuse. We may also process information to meet an applicable legal obligation under Article 6(1)(c), or to establish, exercise or defend legal claims where justified by our legitimate interests.

Where a particular use requires consent, we will ask for it separately. Submitting an enquiry does not subscribe you to marketing communications. We do not use website enquiry data for decisions based solely on automated processing that have legal or similarly significant effects on you.

4 Anti-Money Laundering and Regulatory Compliance

Where an enquiry results in a prospective or actual client relationship, we may be required to collect and process identification information, beneficial ownership information, source of wealth and source of funds information, sanctions screening information and other information required for customer due diligence purposes.

Such processing is necessary to comply with applicable anti-money laundering, counter-terrorist financing, sanctions and professional regulatory requirements and is performed pursuant to Article 6(1)(c) GDPR (compliance with a legal obligation).

We may verify information using independent and reliable sources and may be required to provide information to competent authorities where required by law.

5 Who can receive your information

Access is limited to people who need the information to handle your enquiry or support our operations. Relevant information may be processed by providers of website hosting, form handling, email, IT support and security services. Webflow provides our website hosting and form infrastructure. Enquiries are handled through our business email systems, including info@auditit.cy.

Service providers acting as processors must handle information on our instructions and under appropriate contractual safeguards.

Where necessary, we may also disclose information to professional advisers, insurers, auditors, courts, law enforcement authorities, regulators and public authorities in order to comply with applicable legal or regulatory obligations, protect legal rights, prevent fraud or comply with professional standards.

As a regulated professional firm, such disclosures may include the Institute of Certified Public Accountants of Cyprus (ICPAC), the Cyprus Public Audit Oversight Board (CyPAOB), MOKAS, the Cyprus Tax Department, the Registrar of Companies and other competent supervisory or governmental authorities where disclosure is required by applicable law.

We do not sell personal data.

6 Information Obtained from Other Sources

In connection with professional services, regulatory compliance and due diligence obligations, we may obtain personal data from sources other than the individual concerned.

Such sources may include our clients, company registries, beneficial ownership registers, public databases, professional advisers, financial institutions, government authorities, counterparties and publicly available sources.

The categories of information obtained depend on the nature of the engagement and applicable regulatory requirements.

7 International processing

Some service providers process personal data outside the European Economic Area, including in the United States. Webflow states that it stores customer and website visitor data in the United States.

Where a transfer takes place, the applicable protection may be an EU adequacy decision or appropriate safeguards such as the European Commission’s Standard Contractual Clauses. Webflow’s Data Processing Addendum sets out its transfer arrangements. You may contact us for information about the safeguards relevant to your data and how to obtain a copy.

Further information: Webflow Privacy FAQs and Webflow Data Processing Addendum.

8 How long we keep information

For enquiries that do not lead to a client engagement, we normally retain your enquiry and related correspondence for up to 12 months after our last substantive contact. We then delete or anonymise the information, unless a specific legal obligation or the establishment, exercise or defence of legal claims justifies keeping it longer.

If an enquiry leads to a client engagement, relevant information becomes part of the engagement records and is subject to the retention arrangements explained for that service. Technical and security records are kept for the period needed to operate and protect the website, taking account of the provider’s retention settings and any incident requiring investigation.

Records relating to clients and former clients may be retained for longer periods where required by applicable legislation, professional standards, audit regulation, anti-money laundering legislation, tax legislation, contractual requirements, limitation periods or the establishment, exercise or defence of legal claims.

Retention periods are determined by reference to the category of information concerned and the regulatory requirements applicable to the relevant service. Deletion arrangements cover relevant copies held in Webflow, our email systems and other business records. Backup copies expire under the relevant backup retention cycle. Cookie and similar storage durations are described in the cookie information below.

9 Professional Confidentiality

Information provided to us may be subject to professional confidentiality, professional privilege and regulatory record-keeping obligations applicable to audit, accounting, tax and advisory service providers.

Such obligations may affect the manner in which information is processed, retained and disclosed and may restrict our ability to delete information where retention is required by law or professional regulation.

10 Your rights

Depending on the circumstances and the applicable legal conditions, you can ask us to:

• Confirm whether we process your personal data and provide access to it.
• Correct inaccurate or incomplete information.
• Erase information or restrict how it is used.
• Provide a portable copy of information where the right to data portability applies.

You may object to processing based on legitimate interests because of your particular situation. Where we rely on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. You may object to direct marketing at any time.

Contact info@auditit.cy to make a request. We may need proportionate information to verify your identity. We normally respond within one month; where the GDPR permits an extension, we will explain the reason and timing.

You may complain directly to the Commissioner for Personal Data Protection in Cyprus, or to another competent supervisory authority. You do not need to contact us first.

Cyprus authority: www.dataprotection.gov.cy | commissioner@dataprotection.gov.cy

11 Cookies and similar technologies

Cookies are small files stored on your device. Similar technologies can also store or access information through your browser. Strictly necessary technologies may support website delivery, security and features you request, such as submitting an enquiry.

Cookies and similar technologies

Last verified: 17 September 2026

This website currently uses only strictly necessary technologies required to maintain its security, manage website traffic and protect the enquiry form against automated or fraudulent submissions.

We do not currently use analytics, advertising, marketing, preference or personalisation cookies. During our most recent technical review, we did not identify information being stored by the website in local storage, session storage or IndexedDB.

Technologies currently used

The _cfuvid cookie is marked HttpOnly, Secure and SameSite=None. These attributes help protect the cookie from unauthorised access and ensure that it is transmitted securely.

Webflow provides the website’s hosting, page-delivery and form infrastructure. Our technical review did not identify any Webflow analytics cookies or browser-storage entries being created during ordinary use of the public website. Personal information submitted through the enquiry form is addressed separately in this Privacy Policy.

Further information about Cloudflare’s use of security cookies is available in Cloudflare’s cookie documentation.

Consent and cookie controls

Because the website currently uses only technologies that are strictly necessary for security and for providing services requested by visitors, these technologies are used without prior opt-in consent where permitted by applicable law.

Visitors can configure their browser to block or delete cookies. However, blocking strictly necessary security cookies may affect the availability, security or proper operation of parts of the website, including the enquiry form.

If we introduce analytics, advertising or other optional technologies in the future, we will update this section and, where required, introduce an appropriate consent mechanism before those technologies are activated.

We review our use of cookies and similar technologies periodically and will update this inventory whenever the website’s services or third-party providers change.

If optional analytics or other non-essential technologies are used, we will explain their purposes and ask for consent before activating them. You will be able to reject them or change your choice through Cookie settings. Refusing optional cookies will not prevent you from browsing the website or submitting an enquiry.

You can also manage cookies through your browser settings. Blocking necessary cookies may affect some functions. Browser settings do not replace the consent choices provided for optional technologies.

12 Protecting your information

We use technical and organisational measures appropriate to the information we handle, including secure website connections using HTTPS and access controls. No online system or transmission method can be guaranteed completely secure. If an enquiry requires confidential documents, contact us first so that an appropriate method of sharing can be agreed.

13 Digital contact card and external services

The CGM page lets you download Constantinos Mitsingas’s business contact details. Saving the contact does not require you to submit your own contact details or give us access to your address book. Visiting the page and requesting the file may still generate the technical records described above.

Downloading or viewing the contact card does not require registration, submission of personal information or access to contacts stored on your device. Any processing associated with accessing the page is limited to the technical information described in this Privacy Policy.

If you follow a link to an external website or service, that provider’s privacy information applies to its own processing.

14 Changes to this policy

We may update this policy when our website, services or data handling practices change. The current version and its last-updated date will appear on this page. Where required, we will provide a further notice or seek fresh consent.