Legal

Privacy Policy

Last updated: 9 April 2026

1. Who We Are

Sunshine Luxury Villas (“we”, “us”, “our”) is a luxury real estate agency specialising in premium properties in Paphos, Cyprus. We are committed to protecting your personal data and your right to privacy in accordance with the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR 2016/679), and the Data Protection Act 2018.

Data Controller: Sunshine Luxury Villas
Email: enquiries@sunshineluxuryvillas.com
Phone: +44 (0) 1803 261111

2. Data We Collect

We may collect and process the following categories of personal data:

  • Identity data: first name, last name
  • Contact data: email address, telephone number
  • Financial data: budget range (as provided voluntarily)
  • Enquiry data: the content of messages or requests you submit
  • Technical data: IP address, browser type, device type, pages visited, and cookies (see our Cookie Policy)
  • Communications data: your preferences for receiving marketing from us

We do not collect any special categories of personal data (such as health, race, or religion).

3. How We Collect Your Data
  • When you complete and submit an enquiry form on our website
  • When you contact us by phone, email, or WhatsApp
  • When you visit our website (automatically via cookies and analytics tools)
  • When you download a guide or request a property shortlist
4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Legitimate interests: to respond to your property enquiry and provide our services
  • Contractual necessity: where we are providing services you have requested
  • Consent: for marketing communications where you have opted in
  • Legal obligation: where we are required to comply with a legal duty
5. How We Use Your Data
  • To respond to your property enquiry and provide you with relevant listings
  • To send you a private property shortlist matching your requirements
  • To provide information about residency programmes and investment opportunities
  • To send marketing communications where you have given consent
  • To improve our website and services through analytics
  • To comply with legal and regulatory obligations
6. Data Sharing

We do not sell your personal data. We may share your data with:

  • Partner estate agents in the Paphos network, where necessary to identify suitable properties on your behalf and only with your knowledge
  • Email service providers (Brevo/Sendinblue) used to send transactional communications
  • Legal and professional advisers as required to provide our services
  • Regulatory authorities where required by law

All third parties are required to handle your data securely and in accordance with applicable data protection law.

7. International Transfers

As we operate in Cyprus (EU), some data may be transferred to or processed within the European Economic Area (EEA). Where data is transferred outside the UK or EEA, we ensure adequate safeguards are in place in accordance with UK GDPR and EU GDPR requirements.

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including:

  • Enquiry data: up to 3 years from last contact, unless you ask us to delete it sooner
  • Marketing data: until you withdraw consent
  • LLegal and financial records: up to 7 years as required by law
9. Your Rights

Under UK GDPR and EU GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”) where applicable
  • Restrict processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Object to processing based on legitimate interests or for direct marketing
  • Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at enquiries@sunshineluxuryvillas.com. We will respond within 30 days.

10. Right to Complain

If you are based in the UK, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or by calling 0303 123 1113.

If you are based in the EU/Cyprus, you may also contact the Commissioner for Personal Data Protection of Cyprus at dataprotection.gov.cy.

11. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of transmission over the internet is 100% secure and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page will reflect the most recent update. We encourage you to review this policy periodically.

13. Contact Us

For any questions about this Privacy Policy or how we handle your data, please contact us at:
enquiries@sunshineluxuryvillas.com
+44 (0) 1803 261111