Privacy Policy

Last updated: 2026-05-24.

1. Controller

FW Marketing LTD, Anoixis 1, 7040 Oroklini, Cyprus (Cyprus Registrar of Companies, HE 381648) is the data controller within the meaning of Art. 4(7) GDPR for personal data processed via this website.

To exercise any of your rights below, please use the contact form. We do not publish an email address or telephone number; the contact form is the designated channel for all data-protection enquiries.

2. What data we collect

Two-step contact form. Name, email address, country of nationality (ISO-2), timeline, primary need and selected needs, phone number (optional), preferred contact time, budget band, business purpose, employees-planned, and — only when relevant to investment-based residency routes — source of funds. Submission requires an explicit consent checkbox.

Behavioural signals. Pages viewed during the session, referring UTM parameters (utm_source, utm_medium, utm_campaign), and whether a downloadable guide was requested. These are used solely to qualify the lead and are stored alongside the form submission.

Server logs. Our hosting provider (Cloudflare) processes standard request metadata (IP address, user agent, timestamp) for security and abuse prevention. We do not use this data for tracking or profiling.

3. Why we collect it and on what legal basis

To qualify your enquiry and forward it to one or more licensed Cypriot corporate-service providers, lawyers, accountants or banks that can deliver the regulated service you are asking about. Legal basis: your explicit consent (Art. 6(1)(a) GDPR), given via the consent checkbox on the form.

4. Categories of recipients

We share submitted enquiries with independent, licensed Cypriot professional service providers (typically ASP-licensed corporate-service providers, advocates regulated by the Cyprus Bar Association, licensed accountants, or licensed credit institutions) that are able to handle the request. We do not publish the names of these providers on this website; the specific recipient(s) for your enquiry will be disclosed to you on request via the contact form.

We also use the following processors strictly for technical operation: Cloudflare, Inc. (hosting and email forwarding via MailChannels). No data is transferred outside the EU/EEA except to the extent required for these technical services, in each case under the safeguards provided by their standard contractual clauses.

5. Retention

Form submissions are retained until you withdraw your consent or for 24 months after your last contact, whichever is sooner, and then deleted. Server logs are retained for a maximum of 30 days.

6. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21), and you may withdraw your consent at any time with effect for the future (Art. 7(3)). You also have the right to lodge a complaint with a supervisory authority — in Cyprus this is the Office of the Commissioner for Personal Data Protection .

To exercise any of these rights, contact us via the contact form.

7. Cookies and analytics

setupcyprus.com does not set any tracking cookies or third-party analytics cookies. If we add analytics in the future, this policy will be updated and consent will be obtained where legally required.

8. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent change.