Privacy Policy

Last updated: 15th March 2026

Data Controller Information

RevenueNavigator Ltd is the data controller for the personal data we process. Our company is registered in Cyprus with registration number HE379158. You can contact us using the details provided in the contact information section below.

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you visit our website. The types of data we collect include:

Information You Provide

• Contact information (name, email address, phone number, postal address)
• Business information (company name, industry, project details)
• Communication preferences and enquiry details
• Any other information you choose to provide in forms or communications

Automatically Collected Information

• IP address and device information
• Browser type and version
• Pages visited and time spent on our website
• Referring website and search terms used
• Cookie data and similar tracking technologies

How We Use Your Information

We use the personal data we collect for the following purposes, based on legitimate business interests and your consent where required:

• To respond to your enquiries and provide our consulting services
• To communicate with you about your projects and our services
• To improve our website functionality and user experience
• To analyse website usage and performance through analytics
• To comply with legal obligations and protect our legitimate interests
• To send relevant marketing communications (with your consent)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about the cookies we use, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for marketing communications or cookie usage
• Contract: To perform our consulting services and fulfil contractual obligations
• Legitimate interests: To operate our business, improve our services, and ensure website security
• Legal obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your data only in the following circumstances:

• With trusted service providers who assist us in operating our website and business (subject to confidentiality agreements)
• When required by law or to protect our legal rights
• In connection with a business transfer, merger, or acquisition (with appropriate safeguards)
• With your explicit consent for specific purposes

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this privacy policy or as required by law. Specifically:

• Contact enquiries: 3 years from last communication
• Client project data: 7 years after project completion for legal and business purposes
• Marketing data: Until you withdraw consent or request deletion
• Website analytics data: 26 months (Google Analytics standard retention)

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data (subject to legal obligations)
• Restriction: Request limitation of processing in certain circumstances
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdraw consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within one month of receipt.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and staff training on data protection
• Secure hosting and backup procedures

International Data Transfers

As we operate from Cyprus (an EU member state), your data is processed within the European Economic Area (EEA). If we need to transfer data outside the EEA, we will ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to individuals under the age of 16, and we do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate consent, we will delete such information promptly.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website with a new "last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or have concerns about how we handle your personal data, please contact us:

Supervisory Authority

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with the relevant supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.