Privacy Policy

Information we may process

• Contact and enquiry information you provide, such as your name, email address, telephone number, preferred contact method, project description, budget, and timing.
• Public business information, such as business name, website, business address, category, published business telephone number or email address, and relevant business contact names or roles.
• Research sources, business identity matches, place identifiers, and notes needed to assess the relevance and accuracy of a business record.
• Technical information that hosting or service providers may process when the site is accessed, such as IP address, browser information, request timestamps, and security logs.

Business information may be personal data when it identifies a sole trader or an individual business contact. Please avoid including sensitive personal information in enquiries.

Sources and purposes

Information may come from you, a business's own website, public business listings, or business information services. We may research websites and compare business names, locations, websites, and contact details to verify business identity and reduce mistaken matches.

The purposes are to respond to enquiries, discuss and provide requested services, assess whether our services may be relevant to a business, prepare business-specific demonstrations, maintain accurate records, and protect our services. Any direct marketing must comply with applicable requirements and respect objections.

Depending on the activity and applicable law, processing may rely on legitimate interests for appropriate business research, service improvement, and business-to-business operations, subject to an assessment of those interests against individuals' rights and freedoms; consent where consent is legally required; or compliance with legal obligations where applicable. The appropriate basis is assessed for the particular activity. Public availability does not itself establish consent or permission for every use.

Direct-marketing and contact permissions are handled separately in accordance with applicable law. A basis for business research does not automatically permit marketing contact. We respect objections and opt-outs.

Google Maps Platform and Places API

Business research may use Google Maps Platform, including the Places API, to corroborate business identity against other sources. Requests may include business names, locations, or place identifiers needed for that check.

Google may process requests and associated data under its own Google Privacy Policy, which is incorporated here by reference for the Google features we use. Google Maps features and content are also subject to the Google Maps/Google Earth Additional Terms of Service. Google is responsible for its own processing under its applicable policies.

Purpose limitation and data minimization

Research should be limited to information relevant to the business purposes described above. We limit the fields collected and the detail kept to what is needed for those purposes. Unrelated personal information should not be collected simply because it is publicly accessible. Materially different uses require a separate assessment and any notice required by law.

Retention

Personal and business information is retained only for as long as reasonably necessary for the purposes described in this policy, to comply with legal obligations, to respect suppression/objection requests, and subject to applicable third-party provider retention requirements. Records no longer needed should be deleted or anonymized.

Use and retention of Google Places data follow the applicable Google Maps Platform terms, including storage and caching restrictions. The Prospect Engine uses a data-minimising approach, limiting the information requested and retained to what is needed for the stated purpose and permitted by those terms.

A limited record of a marketing objection may need to be retained to prevent further marketing. Contact us for information about the retention criteria applicable to your record.

Service providers and international transfers

Hosting, email, infrastructure, and research service providers may process information needed to support these activities. Providers acting as processors must operate under appropriate instructions and data protection terms; other providers may process information independently under their own policies. Information may also need to be disclosed where required by law.

The website's enquiry form prepares an email for you to send through your chosen email provider; it does not automatically send the enquiry from a website server. That provider's terms and privacy policy apply when you use it.

Some service providers may process information outside Cyprus or the European Economic Area (EEA). Where applicable, Mav Online Solutions Ltd seeks to use appropriate contractual or other legally recognised safeguards. You can contact us for details of the providers, locations, and safeguards relevant to your information.

Security

Information must be protected by technical and organizational measures appropriate to its sensitivity and use, including limiting access to those who need it, protecting accounts and systems, and handling records securely. No website, transmission method, or storage system can guarantee absolute security.

Your rights and privacy requests

You may request access to information about you, correction of inaccurate details, or deletion of information no longer needed. Depending on applicable law, you may also have rights to restrict processing, object to processing, or receive a portable copy of your data. Where processing actually relies on consent, it may be withdrawn. These rights may be subject to legal conditions.

You may object to the use of your personal data for direct marketing at any time. Following an objection, that data must no longer be processed for direct marketing. Include the business name and contact details concerned so we can identify the record. Only information reasonably needed to verify and handle your request should be requested.

Send privacy, correction, deletion, or marketing-objection requests to mavonlinesolutions@gmail.com, addressed to Mav Online Solutions Ltd. You may also complain to the data protection authority competent for your circumstances.

Changes to this policy

We may update this policy to reflect changes to our activities or applicable requirements. The current version will be available on this page, with additional notice where required.