Draft for review. This policy is drafted to align with the GDPR and Cyprus Law 125(I)/2018. Every bracketed placeholder must be completed with Kypravo's real details and the final text reviewed by a Cyprus-qualified lawyer before publishing.

1. Who we are

Kypravo HR & Workforce Consulting Ltd. ("Kypravo", "we", "us", "our") is a private limited liability company registered in the Republic of Cyprus under registration number HE 456789, with its registered office at 34 Arch. Makarios III Avenue, 4th Floor, 1065 Nicosia, Cyprus. Kypravo is a licensed Private Employment Agency operating under the Private Employment Agencies Law, No. 8(I)/97 as amended (Licence No. Pending — to be issued by the Department of Labour, Department of Labour, Ministry of Labour and Social Insurance).

For the purposes of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law Providing for the Protection of Natural Persons with Regard to the Processing of Personal Data and for the Free Movement of Such Data of 2018 (Law 125(I)/2018), Kypravo is the data controller for the personal data described in this policy.

2. What personal data we collect

  • Contact details you provide via our forms: name, email address, phone number, company name and job title.
  • Candidate data: CV/resume content, employment history, qualifications, references, nationality and work-authorisation status where relevant to a work-permit application, and any other information you choose to submit with your application.
  • Employer/client data: company details, vacancy requirements, and communications relating to a search assignment.
  • Technical data: IP address, browser/device information, and cookie identifiers as described in our Cookie Policy.

3. Why we process your data and our legal basis

  • To respond to enquiries and provide recruitment, staffing, EOR/payroll, HR advisory, and work-permit support services — necessary for the performance of a contract or to take steps prior to entering into one (Article 6(1)(b) GDPR).
  • To assess candidates against vacancies and share relevant candidate information with prospective employer clients — based on your consent (Article 6(1)(a) GDPR), which you provide when submitting an application.
  • To comply with our obligations as a licensed Private Employment Agency and with Cyprus employment, immigration, and tax law — necessary for compliance with a legal obligation (Article 6(1)(c) GDPR).
  • To send newsletter/marketing updates — based on your consent, which you may withdraw at any time.
  • To maintain the security and proper functioning of this website — our legitimate interest (Article 6(1)(f) GDPR), balanced against your rights.

4. Who we share your data with

We share candidate data with prospective employer clients only where relevant to a specific vacancy and, in the case of speculative applications, only with your consent. We may share data with regulatory authorities where required by law (including the Department of Labour, the Civil Registry and Migration Department, and the Social Insurance Services in connection with work-permit applications), with our IT and hosting providers acting as data processors under a data processing agreement, and with professional advisers (legal, accounting) where necessary. We do not sell personal data to third parties.

5. International transfers

Where we transfer personal data outside the European Economic Area — for example when placing a candidate with an employer outside the EEA, or where our service providers are located outside the EEA — we do so only on the basis of an adequacy decision of the European Commission, or subject to appropriate safeguards such as the European Commission's Standard Contractual Clauses, in accordance with Chapter V of the GDPR.

6. Data retention

We retain candidate CVs and related data for as long as you remain an active candidate in our talent pool, and in any event no longer than [24 months] from your last interaction with us, unless you ask us to delete it sooner or a longer period is required by Cyprus employment, tax, or immigration law. Employer/client data is retained for the duration of our commercial relationship and for the statutory retention periods that apply to Cyprus companies under tax and company law.

7. Your rights

Under the GDPR and Law 125(I)/2018, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request erasure of your data ("right to be forgotten"); restrict or object to certain processing; request data portability; and withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal. To exercise any of these rights, contact us at privacy@kypravo.com or info@kypravo.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus.

8. Children's data

Our services are directed at adults seeking or offering employment. In line with the age of digital consent set by Cyprus law, we do not knowingly collect personal data from individuals under 14 years of age without parental consent.

9. Contact

For any questions about this Privacy Policy or how we handle your data, contact Kypravo HR & Workforce Consulting Ltd. at info@kypravo.com or by post at our registered office listed above.

This policy was last updated on 29 July 2026 and may be revised from time to time; material changes will be notified on this page.