Legal
Privacy Policy
Last updated 3 November 2026
In short
The only personal data you give us on this site is what you type into the contact form: your name, email, topic and message. We use it to answer you.
Form messages are stored encrypted on our own server in the EU and passed to our team's internal chat, which we host ourselves. We delete them after 12 months unless we start working together.
There are no accounts, no payments, no analytics and no advertising tools on the site today. You can access, correct or delete your data at any time by writing to us.
Contents
1. Who is responsible
Paekos Enterprises Limited is the controller of the personal data described in this policy. PEL is a trade name of Paekos Enterprises Limited.
- Registration number: HE 482484
- Registered address: Efesou 9, Paralimni 5280, Ammochostos, Cyprus
- Contact for all privacy requests: info@paekos-ltd.com
This policy covers the website paekos-ltd.com. We are established in Cyprus, so the EU General Data Protection Regulation (GDPR) and Cyprus data protection law apply to our processing.
2. What data we collect
What you send us through the contact form:
- your name;
- your email address;
- the topic you choose;
- your message and anything you write in it.
What our server records automatically when you visit the site:
- your IP address and your browser's user agent (browser and device type), in server logs we keep for security.
What is stored on your device:
- one cookie that remembers your cookie choice. The Cookie Policy describes it.
We do not ask for sensitive data, the site has no accounts or sign-in, and we do not take payments on it. Please do not include sensitive or confidential information in your message.
We need your name, email and message to reply. The form cannot be sent without them. You are under no legal or contractual obligation to give them to us.
3. Why we use it and on what legal basis
- Purpose
- Reply to your enquiry and discuss a possible project or partnership with you
- Data
- Name, email, topic, message
- Legal basis
- Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR
- Purpose
- Keep the site secure, detect abuse and investigate incidents
- Data
- IP address, user agent
- Legal basis
- Our legitimate interest in protecting the site and our systems, Art. 6(1)(f) GDPR
- Purpose
- Remember your cookie choice
- Data
- Consent record in a cookie
- Legal basis
- Strictly necessary storage; our legitimate interest in respecting your choice, Art. 6(1)(f) GDPR
- Purpose
- Analytics or marketing tools, if we add them in the future
- Data
- As described in the Cookie Policy at that time
- Legal basis
- Your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time
| Purpose | Data | Legal basis |
|---|---|---|
| Reply to your enquiry and discuss a possible project or partnership with you | Name, email, topic, message | Steps taken at your request before entering into a contract, Art. 6(1)(b) GDPR |
| Keep the site secure, detect abuse and investigate incidents | IP address, user agent | Our legitimate interest in protecting the site and our systems, Art. 6(1)(f) GDPR |
| Remember your cookie choice | Consent record in a cookie | Strictly necessary storage; our legitimate interest in respecting your choice, Art. 6(1)(f) GDPR |
| Analytics or marketing tools, if we add them in the future | As described in the Cookie Policy at that time | Your consent, Art. 6(1)(a) GDPR, which you can withdraw at any time |
Where we rely on legitimate interests, we have weighed them against your rights: the data is limited, kept for a short time and used only in ways you would expect. You can object at any time (see section 7).
We do not make decisions about you based solely on automated processing, and we do not profile visitors.
4. Who receives your data
Your data is seen only by the members of our team who need it to answer you. It is processed by:
- our hosting provider, which operates a dedicated server for us in the EU. Form messages are stored there encrypted, and the server logs are kept there. The provider acts as our processor under a contract that limits its use of the data;
- our internal team chat (Mattermost), which delivers new enquiries to the team. We host it ourselves on our own infrastructure; it is not a third-party service;
- a customer relationship management (CRM) system, which we plan to add later to manage enquiries. Before we do, we will name its provider in this policy, and it will act as our processor under a written contract.
We may also disclose data to professional advisers bound by confidentiality, or to public authorities where the law requires it.
We do not sell personal data and we do not share it for advertising.
5. International transfers
We do not plan to transfer your personal data outside the European Economic Area (EEA). Our server is located in the EU.
If a transfer ever becomes necessary, for example because a future provider processes data outside the EEA, we will make it only with appropriate safeguards: an adequacy decision of the European Commission or the Commission's Standard Contractual Clauses. We will update this policy before the transfer starts, and you can ask us for a copy of the safeguards at info@paekos-ltd.com.
6. How long we keep it
- Contact form messages: 12 months from the date you send them, then deleted. If we start a business relationship with you, we keep the correspondence for as long as that relationship requires.
- Server logs (IP address, user agent): up to 30 days, then deleted.
- Cookie choice: 12 months in your browser, then we ask again.
We may keep data longer only where the law requires it or where it is needed to establish, exercise or defend legal claims.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data rectified;
- have your data erased;
- restrict how we use your data;
- receive the data you gave us in a portable format (data portability);
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting processing that took place before you withdrew it.
To exercise any of these rights, write to info@paekos-ltd.com. It is free. We reply within one month; for complex or numerous requests we may extend this by up to two further months and will tell you why. We may ask you to confirm your identity, usually by replying from the email address we hold.
8. How to complain
If you are unhappy with how we handle your data, please contact us first at info@paekos-ltd.com and we will try to resolve it.
You also have the right to lodge a complaint with a supervisory authority. In Cyprus this is the Commissioner for Personal Data Protection (www.dataprotection.gov.cy). You can also complain to the data protection authority in the EU country where you live, work, or where you believe an infringement took place.
9. Security
The site is served only over encrypted connections (HTTPS). Contact form messages are stored encrypted on our server before they are delivered to the team. Access to the server, the stored messages and our team chat is limited to the people who need it.
No system is completely secure. If a personal data breach is likely to put your rights at high risk, we will tell you without undue delay, as the GDPR requires.
10. Children
This site is for business users aged 18 and over. Some of our work relates to the iGaming industry, and the site is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us data, write to us and we will delete it.
11. Changes to this policy
We will update this policy when the way we process data changes, for example before we add a CRM or an analytics tool. The date at the top shows the current version. If a change is significant, we will make it visible on the site.
Questions: info@paekos-ltd.com, Paekos Enterprises Limited, Efesou 9, Paralimni 5280, Ammochostos, Cyprus.