Last updated: 10 September 2026
CY Property Group (“we”, “us”), 98 Arch. Makariou III Avenue, Larnaca 6017, Cyprus, is the data controller for the personal data described in this policy. You can contact us at or +357 24 041 390.
1. What this policy covers
This policy explains how we process personal data when you contact us or receive messages from us through our website, email, telephone and the WhatsApp Business Platform (operated by Meta Platforms Ireland Ltd).
2. Data we collect
- Contact details: name, telephone number (including your WhatsApp number), email address, postal address.
- Property details: the building or unit you own or occupy, and your relationship to it (owner, tenant, representative).
- Communications: the content of messages you send us and we send you via WhatsApp, email or our contact forms, including any photos, documents or other files you share, and the date and time of each message.
- Billing information: invoices, payments and outstanding balances related to property management services.
3. Why we process your data and on what legal basis
- To provide property management services and respond to your requests (performance of a contract, GDPR art. 6(1)(b)).
- To send you service notifications such as maintenance updates, meeting notices, invoices and payment reminders (contract / legitimate interest, art. 6(1)(b) and (f)).
- To comply with legal and tax obligations (art. 6(1)(c)).
- To send marketing messages via WhatsApp only with your prior consent (art. 6(1)(a)). You can withdraw consent at any time by replying “STOP”.
4. WhatsApp messaging
When you message our WhatsApp business number, or we message you, your phone number and the content of the conversation are transmitted through Meta’s WhatsApp Business Platform and stored on our systems so that our staff can read and reply. WhatsApp messages are end-to-end encrypted in transit; Meta processes them under its own privacy policy. We may send automated replies (for example an acknowledgement or a menu of options). We do not sell or share your WhatsApp data with third parties for their own purposes.
5. Who we share data with
- Service providers who host our systems and messaging tools (including Meta Platforms for WhatsApp, and our hosting provider), bound by data-processing agreements.
- Contractors and suppliers (e.g. maintenance companies) only to the extent needed to carry out work at your property.
- Authorities where required by law.
Some providers may process data outside the EEA. Where this happens we rely on the EU Standard Contractual Clauses or an adequacy decision.
6. Retention
We keep communications and property records for as long as we manage the property and for up to 7 years afterwards, as required by Cypriot tax and accounting law. WhatsApp conversations not linked to an active property file are deleted after 24 months.
7. Your rights
Under the GDPR you have the right to access, rectify, erase or restrict your data, to data portability, and to object to processing based on legitimate interest. To exercise these rights, or to request deletion of your data, see our page or email . You also have the right to lodge a complaint with the Commissioner for Personal Data Protection of Cyprus ().
8. Data deletion
You can ask us to delete your personal data at any time. Send an email to with the subject “Data deletion request”, or reply “DELETE MY DATA” to our WhatsApp business number. We will confirm your request within 5 working days and delete your WhatsApp conversation history, contact details and any files you shared within 30 days, except for records we are legally required to keep (such as issued invoices). The full procedure is described on our page.
9. Security
We use HTTPS, access controls and password-protected systems to protect your data. Only authorised staff can access message history.
10. Changes
We may update this policy from time to time. The current version is always available at this page.