Privacy notice

Last updated 13 October 2026

This notice explains what personal data Places.cy collects through this pre-launch website, why we collect it, who helps us process it and the choices you have. We collect very little, and we handle it in line with the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018.

Who we are

Places.cy is operated by Keltikos Software Ltd, a company registered in Cyprus (registration number HE 496195). Keltikos Software Ltd is the data controller for the personal data described here. Our registered office is:

Keltikos Software Ltd
Onisiforou Center, Floor 2
Neofytou Nikolaidi & Theodorou Kolokotroni
Agios Theodoros, 8011 Paphos
Cyprus

You can contact us about anything in this notice at hello@places.cy. We are not required to appoint a Data Protection Officer and have not done so.

What we collect

WhenWhat
You sign up for launch updates Your email address.
You register a business for early access Your name, email address and business name, plus its town or area if you give it.
You confirm your email address A record of your confirmation, including when it happened, kept by our email provider as evidence of your consent.
You suggest a place The details of the place you suggest, any notes you add and, only if you choose to give it, your email address.
You submit any form Technical information such as your IP address and browser characteristics, processed by Cloudflare Turnstile to check the submission is not automated abuse.

We do not use advertising or analytics cookies on this site, and we do not buy, sell or rent personal data.

Why we use it, and our legal basis

  • Launch updates are used to tell you when Places.cy launches and to send occasional related updates. Our legal basis is your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form and confirming your email address. We never treat you as having agreed to marketing unless you have ticked the box yourself.
  • Business registrations are used to contact you about claiming your business listing and early access. Our legal basis is your consent, given the same way.
  • Place suggestions are used to research and build the Places.cy directory. If you give your email address with a suggestion, we use it only to ask you about that suggestion. Suggesting a place never adds you to a mailing list. Our legal basis is our legitimate interest in building an accurate directory (Article 6(1)(f)).
  • Spam and abuse protection through Cloudflare Turnstile is based on our legitimate interest in keeping the forms secure and free of automated submissions (Article 6(1)(f)).

Every launch-update and business signup is confirmed by email before you are added to a list (double opt-in). If you do not click the confirmation link, you will not receive further emails from us.

How place suggestions are handled

Suggestions are not stored in a database. When you send one, it is emailed straight to our team inbox, and our email provider keeps a delivery log of that message for a limited period. We delete the email once we have reviewed the suggestion. The details of the place itself may be used in the directory, but your email address and anything personal in your notes are not.

Who processes it for us

  • Brevo (Sendinblue SAS, France) stores subscriber details and sends our confirmation, update and suggestion emails. Data is hosted in the EU. See Brevo’s privacy policy.
  • Cloudflare hosts this website and provides Turnstile. Cloudflare may process technical data outside the European Economic Area, under the EU-US Data Privacy Framework and standard contractual clauses. See Cloudflare’s privacy policy.

Both act as processors on our instructions under data processing agreements.

How long we keep it

We keep subscriber and business details until you unsubscribe, withdraw your consent or ask us to delete them. Signups that are never confirmed are not added to our lists and are deleted periodically. Suggestion emails are deleted once reviewed, as described above.

Your rights

You have the right to:

  • withdraw your consent at any time, using the unsubscribe link in any email or by emailing us;
  • ask for a copy of the personal data we hold about you;
  • ask us to correct or delete it, or to restrict how we use it;
  • object to processing based on our legitimate interests;
  • receive your data in a portable format.

Email hello@places.cy to exercise any of these rights. If you are unhappy with how we have handled your data, you can complain to the Office of the Commissioner for Personal Data Protection (15 Kypranoros Street, 1061 Nicosia, Cyprus), or to the data protection authority in the EU country where you live.

Changes to this notice

We will update this notice when the full Places.cy platform launches, and whenever the way we handle personal data changes. The date at the top shows when it last changed.