Privacy Policy & Data Protection

Effective Date: January 1, 2026. Review how Porchteamjumbl Hospitality Services Ltd collects, processes, and protects personal information under GDPR and international standards.

1. Identity of the Data Controller

This website (Porchteamjumbl.shop) is operated by Porchteamjumbl Hospitality Services Ltd, a private company registered in the Republic of Cyprus under company number HE 428914, having its registered office at 28 Oktovriou Avenue, Kanika Enaerios Complex, Block B, 3105 Limassol, Cyprus ("Company", "we", "us", or "our"). For the purposes of Regulation (EU) 2016/679 (the General Data Protection Regulation or "GDPR") and the Cyprus Law 125(I)/2018, we act as the Data Controller.

2. Scope of Data Collection

We process personal data only when strictly necessary to deliver editorial guides, respond to inquiries, and ensure technical website operation. Data categories include:

  • Contact Inquiry Information: Full name, electronic mail address, inquiry category, message text, and user consent timestamps transmitted via our contact forms.
  • Technical Log Data: Masked Internet Protocol (IP) addresses, browser type, operating system version, referring URL strings, and access timestamps automatically recorded by web hosting servers.
  • Consent Metrics: Cookies and local storage preferences recorded when you interact with our cookie consent management banner.

3. Legal Bases for Processing

Under Article 6 of the GDPR, we process personal data under the following legitimate grounds:

  • Consent (Art. 6(1)(a)): Explicit consent provided by users upon ticking the communication consent box on contact forms or choosing to accept non-essential analytics cookies.
  • Legitimate Interests (Art. 6(1)(f)): Securing our digital web infrastructure, preventing abusive bots, detecting fraudulent contact submissions, and measuring aggregate editorial readership.
  • Legal Compliance (Art. 6(1)(c)): Fulfilling tax, corporate reporting, and statutory obligations under Cypriot and European Union law.

4. Third-Party Processors & Hosting Architecture

We do not sell, rent, or trade your personal data to commercial brokers or marketing networks. We share limited personal data strictly with trusted third-party technical vendors who act under binding Data Processing Agreements (DPAs):

  • Web Infrastructure & CDN Providers: Cloud servers located within the European Economic Area (EEA) providing content delivery, DDoS mitigation, and encrypted data storage.
  • Transactional Email Services: Encrypted Simple Mail Transfer Protocol (SMTP) relays delivering contact form submissions to our Limassol editorial desk.

5. Data Retention Periods

We maintain records only for the duration necessary to satisfy the purpose for which they were gathered. Contact form correspondences and customer inquiries are systematically purged 12 months after resolution unless ongoing legal proceedings require retention. Server access logs are rotated and permanently overwritten every 90 days.

6. Your Statutory Rights Under GDPR & CCPA

Depending on your geographic residency, you possess enforceable statutory rights concerning your personal information:

  • Right of Access: The right to request formal confirmation of whether we process your data and receive copies of stored records.
  • Right to Rectification: The right to correct erroneous or incomplete personal data.
  • Right to Erasure ("Right to be Forgotten"): The right to request the permanent deletion of your data when retention is no longer justified.
  • Right to Restriction & Objection: The right to restrict processing or object to processing conducted under legitimate interests.
  • Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Withdraw Consent: You may revoke consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Protection Officer & Supervisory Authority

To exercise any statutory privacy rights, please address your correspondence to our designated privacy desk via email at [email protected] or by post to: Data Protection Officer, Porchteamjumbl Hospitality Services Ltd, 28 Oktovriou Avenue, Kanika Enaerios Complex, Block B, 3105 Limassol, Cyprus.

If you believe our processing violates data protection laws, you retain the right to lodge a formal complaint with the supervisory authority of Cyprus: Office of the Commissioner for Personal Data Protection (Iasonos 1, 1082 Nicosia, Cyprus / dataprotection.gov.cy).