This Privacy Policy describes how
Autovance Business Automation Limited (“Autovance”, “we”, “us”, or “our”), a company registered in Cyprus (Reg. No. HE 476093) with its registered address at Floor 4, Esperidon 5, 2001 Strovolos, Nicosia, Cyprus, collects, uses, and shares information about you when you use our website at
www.autovanceautomation.com and our AI and CRM development services.
1. Information we collect
We may collect the following categories of personal data:
- Identity data: name, job title, company name.
- Contact data: email address, phone number, billing address.
- Technical data: IP address, browser type and version, time zone, browser plug-in types, operating system and platform, and other technology on the devices you use to access our website.
- Usage data: information about how you use our website and services.
- Transaction data: details about payments to and from you and other details of services you have purchased from us.
- Communications data: messages and enquiries you send us by email or through any contact form.
2. How we use your information
We use your personal data for the following purposes:
- To provide and deliver our AI and CRM development services.
- To process payments and manage our contractual relationship with you.
- To communicate with you regarding your project, support requests, or enquiries.
- To send you service-related notices and updates (not marketing, unless you have opted in).
- To comply with legal obligations under EU and Cyprus law.
- To improve and maintain our website and services.
3. Legal basis for processing (GDPR)
We process your personal data under the following lawful bases as set out in the General Data Protection Regulation (EU) 2016/679 (GDPR), which applies in Cyprus:
- Contract performance: processing is necessary to fulfil our contractual obligations to you.
- Legal obligation: processing is necessary to comply with applicable law.
- Legitimate interests: processing is necessary for our legitimate business interests, provided these are not overridden by your rights.
- Consent: where you have given us clear consent to process your data for a specific purpose.
4. Data sharing and third parties
We do not sell your personal data. We may share your data with:
- Third-party service providers (e.g. payment processors, cloud hosting providers) who process data on our behalf under appropriate data processing agreements.
- Software and licensing vendors necessary to deliver your project (e.g. CRM platform providers).
- Professional advisers (lawyers, accountants) bound by confidentiality.
- Regulatory authorities where required by law.
5. International transfers
Some of our third-party service providers may operate outside the European Economic Area (EEA). Where we transfer your data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.
6. Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements. Contract and transaction data is typically retained for 7 years in accordance with Cyprus tax and company law.
7. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- The right to access your personal data.
- The right to rectification of inaccurate data.
- The right to erasure (“right to be forgotten”).
- The right to restrict processing.
- The right to data portability.
- The right to object to processing based on legitimate interests.
- The right to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at the details below. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (
www.dataprotection.gov.cy).
8. Cookies
Our website may use cookies and similar tracking technologies to improve user experience and analyse site traffic. You can control cookie settings through your browser. We will display a cookie consent banner where required by law.
9. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no internet transmission is 100% secure and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. We encourage you to review this page periodically.
