Privacy Policy

Last updated: 6 August 2026

In summary: this is a public information website with a secure enquiry form. The form does not create a separate website database. Enquiries are delivered to the Centre by email, and limited technical information may be recorded in server and security logs.

1. Who is responsible for your personal data?

The controller is Argyris Argyrou, operating the Centre for Accounting Tuition.

Privacy contact details

Telephone
+357 97549716
Postal address
11 Pefkou Street, Lakatamia 2311, Nicosia, Cyprus

2. What does this policy cover?

This policy covers personal data processed when you visit accountingtuition.net, submit the website enquiry form, or correspond with the Centre about possible tuition.

When tuition is arranged, additional records may be required, including registration, attendance, fees, assessments, progress reports, lesson communications and parent or guardian details. Those records will be addressed in a separate Student and Parent Privacy Notice provided at or before enrolment.

3. What personal data may be processed?

Information that you provide

  • your full name;
  • your email address;
  • your telephone number, when you choose to provide it;
  • the subject or category of your enquiry;
  • the contents of your message and later correspondence; and
  • the date and time of the correspondence.

Technical website information

Standard web-server and security logs may record an IP address, date and time, requested page or resource, response status, browser or device information, referring page, and information needed to identify abnormal, abusive or malicious requests.

Information that should not be submitted

The enquiry form does not ask for health information, identity-document numbers, bank details, passwords, criminal-record information or other sensitive personal data. Please do not include such information in the public form.

4. Why is the information used?

Answering an enquiry

To understand, answer and manage your enquiry and, where applicable, to take steps at your request before entering into a tuition arrangement.

Legal basis: Article 6(1)(b) GDPR.

General communication

To deal with general questions, organise follow-up and administer prospective-student communications.

Legal basis: Article 6(1)(f) GDPR—legitimate interests.

Website and email security

To operate the website, prevent spam and abuse, investigate errors and security events, and protect the website, email system and users.

Legal basis: Article 6(1)(f) GDPR—legitimate interests.

Legal compliance and claims

To comply with a binding legal obligation or to establish, exercise or defend legal claims where this becomes necessary.

Legal basis: Article 6(1)(c) and, where applicable, Article 6(1)(f) GDPR.

The Centre does not ask you to consent to this Privacy Policy merely in order to submit an enquiry. A privacy policy provides information about processing; it is not itself a consent form. Consent will be requested separately only if a future activity genuinely requires it, such as optional direct marketing or non-essential tracking technology.

5. Which information is required?

The enquiry form requires a name, email address, enquiry category and message so that the Centre can understand and answer the enquiry. A telephone number is optional. You are not legally required to use the form and may contact the Centre by telephone or email instead. Without enough contact and enquiry information, the Centre may be unable to respond.

6. How is an enquiry handled?

The form is transmitted over HTTPS to a contact handler on the Centre's server. The handler checks the submission and sends it through the Centre's email system to a.argyrou@accountingtuition.net. The form does not create a separate website database of enquiries.

The message is nevertheless stored as email correspondence in the Centre's mailbox. Limited technical information may also appear in website, mail and security logs. The Centre does not sell personal data.

7. Who may receive the information?

Personal data may be processed or received, only where necessary, by:

  • the Centre and persons specifically authorised to assist it;
  • website-hosting, virtual-server, data-centre, network, email, backup and information-security providers;
  • professional advisers, where their assistance is necessary; and
  • public authorities, courts or law-enforcement bodies where disclosure is legally required.

The Centre presently administers its own website and email systems on rented virtual-server infrastructure. Infrastructure is supplied principally through EDIS Global (EDGBL Ltd.). Service providers acting as processors must use the information only to provide the relevant service and subject to applicable data-protection obligations.

8. Transfers outside the European Economic Area

The Centre uses European hosting infrastructure, including infrastructure in Switzerland. Switzerland is recognised by the European Commission as providing an adequate level of protection for personal data.

If a provider or subprocessor transfers personal data to another country outside the European Economic Area or a country covered by an adequacy decision, the Centre will permit the transfer only where a lawful GDPR safeguard applies, such as the European Commission's Standard Contractual Clauses together with supplementary measures where necessary. You may contact the Centre for current information about an applicable transfer safeguard.

9. How long is information kept?

  • Enquiries that do not lead to tuition: ordinarily reviewed for deletion no later than 12 months after the last relevant correspondence.
  • Website access, error and security logs: normally retained for no longer than 30 days, unless particular information must be preserved to investigate an incident, prevent abuse or comply with law.
  • Enquiries that lead to tuition: necessary correspondence may become part of the relevant student or administrative record and will then be governed by the retention information provided at or before enrolment.
  • Legal or security matters: relevant information may be retained for longer only where this is necessary and documented.

10. Cookies, analytics and advertising technology

As at the date of this policy, the website does not intentionally use analytics, behavioural-advertising pixels or other non-essential tracking technologies, and it does not intentionally set non-essential cookies. A cookie-consent banner is therefore not used.

The Centre may advertise through external advertising services without placing their tracking code on this website. Should non-essential cookies, analytics, conversion tracking, embedded media or similar technology be introduced, the technology will be blocked until any consent required by Cyprus electronic-communications law has been obtained. This policy and the website's consent controls will be updated before that technology is activated.

12. Children and young students

The Centre's services may be relevant to students under 18. Privacy information intended for a child will be written clearly and appropriately for the child's age. A student under 14 should ask a parent or guardian to make the initial online enquiry.

The Cyprus age of 14 is specifically relevant where an information-society service offered directly to a child relies on the child's consent. It is not a universal legal basis for every educational or student record. Where tuition for a minor is arranged, the Centre will provide a separate Student and Parent Privacy Notice and identify the appropriate legal basis for each type of record.

13. Your data-protection rights

Depending on the circumstances and legal basis, you may have the right to:

  • receive information about how your personal data are used;
  • request access to your personal data;
  • request correction of inaccurate or incomplete information;
  • request erasure where the legal conditions are met;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • receive or transmit certain data in a portable format where the right applies;
  • withdraw consent at any time where processing is based on consent; and
  • lodge a complaint with a supervisory authority and seek a judicial remedy.

The Centre does not use enquiry information for automated decision-making or profiling. Rights requests may be sent to the contact details in section 1. The Centre will normally respond without undue delay and within one month, subject to the GDPR rules on extensions, identity verification and manifestly unfounded or excessive requests.

14. Security

The Centre uses proportionate technical and organisational measures intended to protect personal data, including encrypted web transmission, access controls, system maintenance, limited collection, anti-abuse controls, protected backups where appropriate, and procedures for identifying and responding to incidents. No internet or email system can be guaranteed to be completely secure.

15. Complaints

Please contact the Centre first so that the matter can be examined promptly. You also have the right to lodge a complaint with the Cyprus supervisory authority:

Office of the Commissioner for Personal Data Protection

Kypranoros 15, 1061 Nicosia, Cyprus
Postal address: P.O. Box 23378, 1682 Nicosia, Cyprus
Telephone: +357 22818456
Email: commissioner@dataprotection.gov.cy
Visit the Commissioner's website

16. Changes to this policy

This policy will be reviewed when the website, enquiry process, service providers or legal requirements change. Material changes will be reflected on this page by changing the “Last updated” date and, where appropriate, by providing a more prominent notice.