LEGAL

Privacy Policy

Effective date: 15 May 2026

This Privacy Policy describes how Lazuli Management (referred to as “Lazuli”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit lazulimanagement.com, submit your property for management, or otherwise interact with us.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the Cyprus Personal Data Protection Law (Law 125(I)/2018), and other applicable data protection rules.

1. Who we are

Lazuli Management is the data controller for personal data collected through this website and through our property management services.

Business name: Lazuli Management
Registered address: Ermou 79, Larnaca, Cyprus, 6022
Email: info@lazulimanagement.com
Phone: +357 96081593

2. What personal data we collect

We collect personal data that you provide to us directly, plus limited technical data collected automatically when you use our website.

Data you provide:

Full name, email address, and phone number when you submit a property via our “Submit your property” form.
Property details (location, type, size, current performance, goals) when you describe your property.
Any free-text information you include in the “Tell us more” field.
Email address if you subscribe to our newsletter.
Any other information you choose to share by email or phone.

Data collected automatically:

IP address (truncated where possible), browser type, device type, operating system, and approximate location based on IP.
Pages visited on lazulimanagement.com, time spent on each page, and how you arrived at the site (referrer).
Cookie identifiers (see our Cookies Policy for details).

We do not collect special categories of data (such as health, biometric, religious, or political data).

3. How we use your data

We use your personal data for the following purposes and legal bases.

Purpose	Legal basis
Responding to your property-submission enquiry and preparing a tailored proposal	Performance of pre-contract steps at your request, plus our legitimate interest in operating our business
Managing your property under a signed agreement (Master Lease or Performance Share)	Performance of the agreement between us
Sending you the Lazuli newsletter	Your consent (you can withdraw at any time)
Improving our website and services through analytics	Our legitimate interest in understanding how visitors use our site; consent for analytics cookies
Complying with tax, accounting, anti-fraud, and other legal duties	Legal obligation

4. Who we share data with

We share your data only with the parties needed to deliver our services, all of whom are bound by confidentiality and data-processing terms.

Booking and listing platforms (Booking.com, Airbnb, TripAdvisor) when we list your property, with the minimum data each platform needs.
Our in-house cleaning, maintenance, design, and guest-experience teams in Cyprus.
Our website host (RunCloud) and our cloud email and storage providers.
Our accountants and legal advisors when there is a legal requirement to do so.
Tax and regulatory authorities when we are legally required to share data.

We do not sell your personal data to third parties. We do not transfer your data outside the European Economic Area unless a valid transfer mechanism is in place (such as Standard Contractual Clauses).

5. How long we keep your data

Data type	Retention period
Property-submission form data (no contract signed)	24 months from your last interaction with us, then deleted
Property-management contract data	Duration of the contract, plus 7 years for tax and accounting compliance
Newsletter subscriber data	Until you unsubscribe, then up to 12 months in a suppression list to honour your unsubscribe
Website analytics data	14 months from collection, then deleted or aggregated
Email correspondence	36 months from the last reply, then archived for legal-defence purposes for a further 4 years

6. Your rights

Under GDPR and Cyprus data-protection law, you have the following rights:

Access: ask us for a copy of the data we hold about you.
Rectification: ask us to correct inaccurate or incomplete data.
Erasure: ask us to delete your data when there is no overriding legal reason to retain it.
Restriction: ask us to pause processing while a dispute or correction is resolved.
Portability: ask for your data in a structured, machine-readable format.
Objection: object to processing that is based on legitimate interest (including direct marketing).
Withdraw consent: withdraw any consent you previously gave (this does not affect processing that already happened).
Complain: lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

To exercise any of these rights, write to info@lazulimanagement.com. We will reply within 30 days.

7. How we protect your data

Our website runs on a managed VPS with TLS encryption, server-level firewalls, and a Web Application Firewall. WordPress core, themes, and plugins are kept up to date. Access to back-end systems requires named accounts and strong passwords, with multi-factor authentication on administrative roles.

Despite our care, no online transmission is fully secure. If a personal-data breach occurs that is likely to cause risk to your rights and freedoms, we will notify both you and the Cyprus Commissioner without undue delay.

8. Children

Lazuli Management does not knowingly collect data from anyone under 16 years of age. If you believe a child has provided us with personal data, contact us and we will delete it.

9. Updates to this policy

We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the most recent revision. Material changes will be highlighted on the homepage for 30 days.

10. Contact

Questions about this policy or your data? Write to info@lazulimanagement.com or post to Lazuli Management, Ermou 79, Larnaca, Cyprus, 6022.