Privacy Policy

1. Who we are

FIVEFINS SOLUTIONS LTD ("FiveFins", "we") is a company registered in Cyprus, registration number HE439699, registered office: Meropis Street, 14, Ioannou Court, Larnaca, 6058, Cyprus. We are responsible for the personal data described in this policy.

Contact: info@fivefins.digital · +357 96154322

2. What this policy covers

This policy explains what personal data we process when you visit fivefins.digital or contact us by email or phone.

3. Data we process

• When you visit the site: our hosting provider processes the technical data needed to deliver the pages and protect the site. This includes your IP address, browser type, the page requested and the time of the request. We do not use this data to identify you.
• When you contact us: your name, your email address, your phone number if you call, your company if you mention it, and the content of your message.

We do not ask for special categories of personal data. Please do not include sensitive personal information in your enquiry.

4. Why we use it and on what basis

• To deliver and secure the site. This is our legitimate interest in running a working and safe website (GDPR Article 6(1)(f)).
• To reply to your enquiry and discuss a possible engagement. These are steps taken at your request before entering into a contract (Article 6(1)(b)). They also serve our legitimate interest in answering business correspondence (Article 6(1)(f)).

We do not use your data for marketing, we do not sell it, and we do not make automated decisions about you.

5. Cookies, analytics and tracking

The site does not use cookies for analytics, advertising or tracking. It does not load analytics or advertising tools, and fonts and other files are served from our own site. Our hosting provider may set a strictly necessary security cookie if it needs to check that a visit comes from a person rather than an automated program.

6. Who we share it with

• Cloudflare, Inc. hosts the site and protects it from attacks.
• Our email and communication providers receive and store your messages.
• Specialists or advisers we bring into an engagement receive data only with your agreement, and only the data they need.
• Public authorities receive data only where the law requires it.

We do not sell or rent personal data.

7. Transfers outside the EEA

Some of our providers may process data outside the European Economic Area, for example in the United States. Where this happens, we rely on safeguards recognised under the GDPR. These are an adequacy decision (including the EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

8. How long we keep it

• Enquiry correspondence: up to 24 months after our last contact, unless it leads to an engagement.
• If we work together: records we must keep for contractual, accounting and tax purposes are kept for the periods the law requires.
• Technical hosting logs: Cloudflare keeps these for a short period under its own retention rules.

9. Your rights

Under the GDPR you can:

• ask for access to your personal data
• ask us to correct or delete it
• ask us to restrict its use, or object to it
• receive a copy of the data you gave us

To exercise these rights, write to info@fivefins.digital. We will reply within one month. You can also complain to the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

10. Changes to this policy

We may update this policy when our site or services change. The date at the top shows the current version.