Privacy Policy

Last Updated: September 20, 2025

StatWorks
23 Arch. Kyprianou Avenue
3036 Limassol, Cyprus

StatWorks is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your information in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.

1. Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily provide to us when you:

• Complete contact forms or inquiry submissions
• Request consultation or statistical services
• Subscribe to newsletters or updates
• Communicate with us via email or phone
• Participate in surveys or feedback requests

This information may include your name, email address, phone number, organization details, project descriptions, and any other information you choose to provide.

1.2 Automatically Collected Information

When you visit our website, we may automatically collect certain technical information:

• IP address and geographic location
• Browser type and version
• Operating system information
• Pages visited and time spent on pages
• Referring website or source
• Date and time of access
• Device information and screen resolution

1.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

2. How We Use Your Information

We process your personal data for the following purposes, based on legitimate interests and legal obligations:

• Service Delivery: To respond to inquiries, provide statistical consulting services, and fulfill contractual obligations
• Communication: To send you information about our services, respond to questions, and provide customer support
• Business Operations: To maintain records, process payments, and manage client relationships
• Website Improvement: To analyze usage patterns, improve functionality, and enhance user experience
• Marketing: To send promotional materials about our services (only with your explicit consent)
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Security: To protect against fraud, unauthorized access, and maintain data security

3. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for a contract we have with you or to take steps at your request before entering into a contract
• Legal Obligation: Processing is necessary for compliance with legal obligations
• Legitimate Interests: Processing is necessary for our legitimate business interests, except where overridden by your data protection rights

4. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Service Providers: Third-party companies that provide hosting, analytics, email delivery, and other technical services on our behalf
• Professional Advisors: Lawyers, accountants, or other professional consultants when necessary
• Legal Authorities: When required by law, legal process, or to protect rights and safety
• Business Transfers: In connection with any merger, sale of company assets, or acquisition

All third parties with access to your personal data are contractually obligated to protect it and use it only for the specified purposes.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Inquiry Data: Retained for up to 2 years after last contact
• Client Project Data: Retained for 7 years for contractual and legal purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Website Analytics: Aggregated data retained for 26 months

After the retention period expires, we securely delete or anonymize your personal data.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal data:

• Encryption of data in transit using SSL/TLS protocols
• Secure data storage with access controls and authentication
• Regular security assessments and vulnerability testing
• Employee training on data protection and confidentiality
• Incident response procedures for potential data breaches
• Regular backups with secure storage

While we strive to protect your personal data, no method of transmission over the internet is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

8. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions recognizing equivalent data protection
• Binding Corporate Rules for international organizations

9. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last Updated" date. We encourage you to review this policy regularly to stay informed about how we protect your data.

11. Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Office of the Commissioner for Personal Data Protection (Cyprus)
1 Iasonos Street
1082 Nicosia, Cyprus
Phone: +357 22 818 456
Website: www.dataprotection.gov.cy

You also have the right to lodge a complaint with the supervisory authority in your country of residence or workplace if you are located within the EU.