Last Updated: [25 June 2026]

WTS Cyprus Ltd (“WTS Cyprus,” “we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (wtscyprus.com) or engage our professional services, in accordance with the EU General Data Protection Regulation (GDPR) and applicable Cyprus data protection laws.

1. Data Controller

For the purposes of the GDPR, the Data Controller responsible for your personal data is:

WTS Cyprus Ltd 47 Strovolos Avenue, 4th Floor Nicosia, CY-2018, Cyprus Telephone: +357 22 028 700 Email: contact@wtscyprus.com

2. Information We Collect

We may collect and process the following categories of personal data:

• Information you provide voluntarily: When you use the “Let’s Get Started” contact form on our website, we collect your Name, Email address, Subject, and any personal information you choose to include in your Message.
• Client Service Data: If you engage us for our services (Tax Compliance, Accounting, Transfer Pricing, Payroll, etc.), we will collect necessary financial information, corporate details, identification documents (for KYC/AML purposes), and employee data (specifically for Payroll outsourcing).
• Automated Website Data: When you browse our website, we may automatically collect technical data such as your IP address, browser type, operating system, and browsing behavior through cookies and similar tracking technologies.

3. How We Use Your Data & Legal Basis

We will only process your personal data when we have a lawful basis to do so:

• To respond to your inquiries: If you contact us via our website, we process your data based on your consent and our legitimate interest in providing timely customer service.
• To provide professional services: We process client data to fulfill our contractual obligations to you when providing accounting, payroll, or tax advisory services.
• To comply with legal obligations: As a financial services and tax advisory firm, we are subject to strict regulatory requirements in Cyprus. We process data to comply with Anti-Money Laundering (AML) laws, Know Your Customer (KYC) directives, and requests from the Cyprus Tax Department.
• To improve our website: We use automated data (like analytics) based on our legitimate interest in maintaining website security, monitoring performance, and improving user experience.

4. Data Sharing and Disclosure

We do not sell or rent your personal data to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party IT and cloud hosting providers who assist in operating our website and business, subject to strict data processing agreements.
• WTS Global Network: Where relevant to your international tax or transfer pricing needs, information may be shared within the WTS Global network, ensuring appropriate safeguards are in place.
• Legal and Regulatory Authorities: We may disclose your data to the Cyprus Tax Authorities, regulatory bodies, or law enforcement if required by law or to protect our legal rights.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy.

• Website Inquiries: Data submitted via the contact form is kept until the query is resolved, unless it leads to a client relationship.
• Client Records: In compliance with Cyprus corporate and tax legislation, client accounting and tax records (along with AML/KYC data) are generally retained for a minimum of six (6) years after the termination of the business relationship.

6. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your data, subject to our legal and regulatory retention obligations.
• Right to Restrict Processing: Request a temporary halt to processing your data.
• Right to Data Portability: Request the transfer of your data to another organization.
• Right to Object: Object to our processing of your data based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, please contact us at contact@wtscyprus.com.

7. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our internal practices. We encourage you to review this page periodically.