**Effective date: 15 May 2026**
This Privacy Policy describes how Lazuli Management (referred to as “Lazuli”, “we”, “us”, or “our”) collects, uses, and protects your personal data when you visit lazulimanagement.com, submit your property for management, or otherwise interact with us.
We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR), the Cyprus Personal Data Protection Law (Law 125(I)/2018), and other applicable data protection rules.
1. Who we are
Lazuli Management is the data controller for personal data collected through this website and through our property management services.
- Business name: Lazuli Management
- Registered address: Ermou 79, Larnaca, Cyprus, 6022
- Email: info@lazulimanagement.com
- Phone: +357 96081593
2. What personal data we collect
We collect personal data that you provide to us directly, plus limited technical data collected automatically when you use our website.
**Data you provide:**
- Full name, email address, and phone number when you submit a property via our “Submit your property” form.
- Property details (location, type, size, current performance, goals) when you describe your property.
- Any free-text information you include in the “Tell us more” field.
- Email address if you subscribe to our newsletter.
- Any other information you choose to share by email or phone.
**Data collected automatically:**
- IP address (truncated where possible), browser type, device type, operating system, and approximate location based on IP.
- Pages visited on lazulimanagement.com, time spent on each page, and how you arrived at the site (referrer).
- Cookie identifiers (see our Cookies Policy for details).
We do not collect special categories of data (such as health, biometric, religious, or political data).
3. How we use your data
We use your personal data for the following purposes and legal bases.
| Purpose | Legal basis |
|---|---|
| Responding to your property-submission enquiry and preparing a tailored proposal | Performance of pre-contract steps at your request, plus our legitimate interest in operating our business |
| Managing your property under a signed agreement (Master Lease or Performance Share) | Performance of the agreement between us |
| Sending you the Lazuli newsletter | Your consent (you can withdraw at any time) |
| Improving our website and services through analytics | Our legitimate interest in understanding how visitors use our site; consent for analytics cookies |
| Complying with tax, accounting, anti-fraud, and other legal duties | Legal obligation |
4. Who we share data with
We share your data only with the parties needed to deliver our services, all of whom are bound by confidentiality and data-processing terms.
- Booking and listing platforms (Booking.com, Airbnb, TripAdvisor) when we list your property, with the minimum data each platform needs.
- Our in-house cleaning, maintenance, design, and guest-experience teams in Cyprus.
- Our website host (RunCloud) and our cloud email and storage providers.
- Our accountants and legal advisors when there is a legal requirement to do so.
- Tax and regulatory authorities when we are legally required to share data.
We do not sell your personal data to third parties. We do not transfer your data outside the European Economic Area unless a valid transfer mechanism is in place (such as Standard Contractual Clauses).
5. How long we keep your data
| Data type | Retention period |
|---|---|
| Property-submission form data (no contract signed) | 24 months from your last interaction with us, then deleted |
| Property-management contract data | Duration of the contract, plus 7 years for tax and accounting compliance |
| Newsletter subscriber data | Until you unsubscribe, then up to 12 months in a suppression list to honour your unsubscribe |
| Website analytics data | 14 months from collection, then deleted or aggregated |
| Email correspondence | 36 months from the last reply, then archived for legal-defence purposes for a further 4 years |
6. Your rights
Under GDPR and Cyprus data-protection law, you have the following rights:
- Access: ask us for a copy of the data we hold about you.
- Rectification: ask us to correct inaccurate or incomplete data.
- Erasure: ask us to delete your data when there is no overriding legal reason to retain it.
- Restriction: ask us to pause processing while a dispute or correction is resolved.
- Portability: ask for your data in a structured, machine-readable format.
- Objection: object to processing that is based on legitimate interest (including direct marketing).
- Withdraw consent: withdraw any consent you previously gave (this does not affect processing that already happened).
- Complain: lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).
To exercise any of these rights, write to **info@lazulimanagement.com**. We will reply within 30 days.
7. How we protect your data
Our website runs on a managed VPS with TLS encryption, server-level firewalls, and a Web Application Firewall. WordPress core, themes, and plugins are kept up to date. Access to back-end systems requires named accounts and strong passwords, with multi-factor authentication on administrative roles.
Despite our care, no online transmission is fully secure. If a personal-data breach occurs that is likely to cause risk to your rights and freedoms, we will notify both you and the Cyprus Commissioner without undue delay.
8. Children
Lazuli Management does not knowingly collect data from anyone under 16 years of age. If you believe a child has provided us with personal data, contact us and we will delete it.
9. Updates to this policy
We may update this Privacy Policy from time to time. The “Effective date” at the top reflects the most recent revision. Material changes will be highlighted on the homepage for 30 days.
10. Contact
Questions about this policy or your data? Write to **info@lazulimanagement.com** or post to Lazuli Management, Ermou 79, Larnaca, Cyprus, 6022.