Privacy Policy
Auditiams Compliance & Risk Ltd · Last updated October 2026
1. Who we are
This Privacy Policy explains how Auditiams Compliance & Risk Ltd ("Auditiams", "we", "us", "our") collects and uses personal data when you visit auditiams.com (the "Website"), the corporate website of Auditiams, presenting our compliance, risk and audit advisory services and the Auditiams ecosystem (AUDCOM, AUDSER, AUDEDU and AUDENT).
Auditiams Compliance & Risk Ltd is a company registered in Cyprus under registration number HE 428549, with its registered office at Nikou Patichi 59, Limassol, 3070, Cyprus. We are the controller of the personal data described in this policy.
Contact for privacy matters: info@auditiams.com, or by post to the address above, marked "Data Protection".
2. Scope
This policy covers the public Website. If you create an account and sign in to the Auditiams platform, the platform terms and any privacy information provided within the platform also apply to that use.
We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data (Law 125(I)/2018).
3. Personal data we collect
Information you give us:
- Enquiry and contact form data: name, company, job title, email address, phone number, country and the content of your message.
- Meeting and consultation requests: preferred date and time and the topic you want to discuss.
- Newsletter and insights subscriptions: email address, name and your subscription preferences.
- Job applications (if you apply through the website): CV, cover letter, contact details and any information you choose to include.
- Communications: emails, chat messages and other correspondence you send us, including any information you include.
Information collected automatically:
- Technical data: IP address, browser type and version, device type, operating system, time zone and language settings.
- Usage data: pages visited, links clicked, referring website, time spent on pages and approximate location derived from your IP address.
- Cookie and local storage data: see our Cookie Policy.
- Chat assistant: the questions you type into the Website chat and, if you send an enquiry through it, your contact details and message.
We do not intend to collect special categories of personal data (such as health data or data revealing racial or ethnic origin) through the Website. Please do not include such data in forms or messages unless it is necessary.
4. How we use your data and our legal basis
| Purpose | Data used | Legal basis (GDPR Art. 6) |
|---|---|---|
| Responding to enquiries and consultation requests | Contact and enquiry data | Steps prior to entering into a contract, or our legitimate interest in responding to business enquiries |
| Sending newsletters, insights and event invitations | Email, name, preferences | Consent (you can withdraw at any time) |
| Assessing job applications | Application data | Steps prior to entering into an employment contract; legitimate interest in recruitment |
| Operating, securing and improving the Website, preventing fraud and abuse | Technical and usage data | Legitimate interest in running a secure and effective website |
| Producing cookieless website statistics (page visited, screen size, time zone, time on page) | Usage data | Legitimate interest in understanding how the Website is used |
| Complying with legal obligations and responding to lawful requests from authorities | Any relevant data | Legal obligation |
| Establishing, exercising or defending legal claims | Any relevant data | Legitimate interest |
Where we rely on legitimate interests, we have balanced those interests against your rights. You can ask us for more information about that assessment.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
5. Who we share your data with
We share personal data only where necessary, with:
- Google (Google Fonts) and Cloudflare (cdnjs), which receive your IP address when they deliver fonts and scripts used by the Website.
- Service providers acting on our behalf, including Cloudflare (content delivery and website security) and Render (website hosting), and providers of email delivery and IT support. They process data only on our instructions under a data processing agreement.
- Other companies in our group, where needed to respond to your request or provide a service you asked for.
- Professional advisers such as lawyers, auditors and insurers, under a duty of confidentiality.
- Public authorities, regulators, courts or law enforcement, where required by law or to protect our rights.
- A buyer or successor in the event of a merger, acquisition or sale of all or part of our business, subject to confidentiality.
We do not sell your personal data.
6. International transfers
Some of our service providers are located outside the European Economic Area (EEA). Where we transfer personal data outside the EEA, we make sure it is protected, either because the European Commission has decided the country provides an adequate level of protection, or by using the European Commission's Standard Contractual Clauses together with any additional safeguards needed. You can ask us for a copy of the relevant safeguards.
7. How long we keep your data
| Data | Retention period |
|---|---|
| Enquiries and correspondence that do not lead to a contract | 2 years after our last contact with you |
| Newsletter and marketing preferences | Until you unsubscribe or withdraw consent, plus a suppression record so we do not contact you again |
| Unsuccessful job applications | 12 months after the end of the recruitment process, unless you agree to a longer period |
| Website logs and security data | 12 months |
| Data needed for legal claims | Up to 6 years after the relevant event, or longer if proceedings are ongoing |
8. Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), access controls, regular security updates and staff confidentiality obligations. No transmission over the internet is completely secure, so we cannot guarantee the security of data you send to us online.
9. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you and receive a copy.
- Have inaccurate data corrected and incomplete data completed.
- Have your data erased in certain circumstances.
- Restrict our processing in certain circumstances.
- Receive your data in a portable format and have it transmitted to another controller, where processing is based on consent or contract and carried out by automated means.
- Object at any time to processing based on our legitimate interests, and to direct marketing.
- Withdraw your consent at any time, without affecting processing carried out before withdrawal.
To exercise your rights, contact us at info@auditiams.com. We may ask you to verify your identity. We will respond within one month, which may be extended by two further months for complex or numerous requests; we will tell you if this applies.
You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy) or with the supervisory authority in the EU country where you live or work. We would appreciate the chance to address your concerns first.
10. Children
The Website is intended for adults and businesses. It is not directed at anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Third-party websites
The Website may contain links to third-party websites. We are not responsible for their privacy practices; please read their privacy policies.
12. Changes to this policy
We may update this policy from time to time and will publish the current version on this page. Where changes are significant, we will take reasonable steps to bring them to your attention.
13. Contact
Auditiams Compliance & Risk Ltd, Nikou Patichi 59, Limassol, 3070, Cyprus. Registration number HE 428549. Email: info@auditiams.com.