Last updated: June 2026

1. Introduction

Associum Ltd is committed to protecting your privacy and ensuring that your personal data is processed lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, use our services or visit our premises.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Cyprus Data Protection Law and any applicable legislation.

2. Data Controller

Associum Ltd
101 Arch. Makarios III Avenue
Commercial Union House, 1st Floor
1071 Nicosia
Cyprus
Telephone: +357 22 340 000
Email: info@associum.com.cy
Website: www.associum.com.cy

3. Personal Data We Collect

Depending on your interaction with us, we may collect:

Personal Identification Information

  • Full name
  • Nationality
  • Job title
  • Company name

Contact Information

  • Email address
  • Telephone number
  • Postal address

Business Information

  • Company registration number
  • VAT number
  • Billing information
  • Business activity details

Website Information

  • IP address
  • Browser information
  • Device information
  • Website usage statistics

Booking Information

  • Meeting room reservations
  • Office viewing appointments
  • Coworking bookings

Virtual Office Information

  • Mail handling records
  • Mail forwarding instructions
  • Courier information
  • Authorised collection representatives

Marketing Information

  • Newsletter subscriptions
  • Marketing preferences

Live Chat Information

  • Name
  • Email address
  • Chat history
  • Technical connection data

Security Information

  • CCTV recordings
  • Visitor registration information
  • Access records where applicable

4. How We Collect Personal Data

We collect personal data:

  • Through website contact forms
  • Through newsletter registrations
  • Through live chat communications
  • Through telephone and email correspondence
  • Through service applications
  • Through virtual office registrations
  • Through meeting room bookings
  • Through office rental enquiries
  • Through visits to our premises
  • Through cookies and analytics technologies

5. Purposes of Processing

We process personal data for the following purposes:

Provision of Services

Including:

  • Serviced office facilities
  • Private office rentals
  • Shared office facilities
  • Coworking services
  • Virtual office services
  • Business address services
  • Mail handling services
  • Mail forwarding services
  • Meeting room bookings

Customer Support

  • Responding to enquiries
  • Providing customer assistance
  • Managing client relationships

Administration

  • Billing and invoicing
  • Contract administration
  • Record keeping

Security

  • Protection of persons and property
  • Access control
  • Incident investigations

Marketing

  • Sending newsletters
  • Service updates
  • Marketing communications

Compliance

  • Compliance with applicable laws
  • Regulatory requirements
  • Anti-money laundering obligations where applicable

6. Legal Basis for Processing

We process personal data on one or more of the following legal grounds:

  • Performance of a contract
  • Compliance with legal obligations
  • Legitimate interests
  • Consent where required

7. CCTV Monitoring

CCTV systems may operate within parts of our premises for security and safety purposes.

The purpose of CCTV monitoring includes:

  • Protection of staff, clients and visitors
  • Protection of company property
  • Prevention and investigation of criminal activity
  • Security incident investigation

Access to recordings is strictly limited to authorised personnel.

Unless required for investigations or legal proceedings, recordings are generally retained for a period not exceeding 90 days.

8. Virtual Office and Mail Handling Services

Clients using virtual office, business address, mail handling or mail forwarding services acknowledge that certain personal and business information may be processed in order to provide these services.

This may include:

  • Sender details
  • Recipient details
  • Collection records
  • Forwarding instructions
  • Delivery confirmations

Such information is processed solely for service delivery and legal compliance purposes.

9. Newsletter Communications

Where you subscribe to our newsletter, we may send:

  • Industry updates
  • Company announcements
  • Service information
  • Marketing communications

You may unsubscribe at any time using the unsubscribe link included in each communication.

10. Live Chat Services

When using our live chat services, we may collect:

  • Name
  • Email address
  • IP address
  • Chat transcripts
  • Information voluntarily provided during the conversation

Chat records may be retained for customer service, quality assurance and business administration purposes.

11. Cookies and Analytics

Our website uses cookies and similar technologies.

These technologies help us:

  • Operate the website
  • Improve user experience
  • Monitor website performance
  • Analyse visitor behaviour
  • Protect website security

Please refer to our Cookie Policy for further information.

12. Sharing Personal Data

We may share personal data with:

  • IT service providers
  • Website hosting providers
  • Cloud service providers
  • Payment processors
  • Security service providers
  • Professional advisers
  • Government authorities where legally required

We do not sell personal data to third parties.

13. International Transfers

Where personal data is transferred outside the European Economic Area, appropriate safeguards will be implemented in accordance with GDPR requirements.

14. Data Retention

Unless a longer retention period is required by law:

  • Website enquiries: 12 months
  • Newsletter subscriptions: until withdrawal of consent
  • Client records: 6 years after termination
  • Accounting records: 6 years
  • Virtual office records: 6 years
  • Mail handling records: 6 years
  • CCTV recordings: up to 90 days

15. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate information
  • Request erasure of personal data
  • Restrict processing
  • Object to processing
  • Request data portability
  • Withdraw consent where consent is the legal basis

Requests may be submitted to: info@associum.com.cy

16. Security Measures

Associum Ltd implements appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

17. Complaints

If you are dissatisfied with how we process your personal data, you may submit a complaint to the Office of the Commissioner for Personal Data Protection of Cyprus.

18. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy from time to time. The latest version will always be available on our website.