Privacy Policy

Last updated: 16 July 2026

1. Who we are

drastyc (“we”, “us”, “our”) is a solutions and services provider in the areas of Data, AI, and Automation, based in Cyprus. For the purposes of applicable data protection law, including the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018, the data controller is:

• Drastyc Ltd
• Address: Metochiou 15, 1101 Nicosia, Cyprus
• Email: info@drastyc.net
• Phone: +357 97 877 046 / +357 99 608 702

2. What data we collect

We collect only the information needed to respond to you and provide our services:

• Information you give us via our contact form — your name, email address, subject, and message.
• Information from our interactive tools — if you choose to send us the results of the Maturity Assessment or Automation ROI Calculator, the inputs and figures you included in that enquiry.
• Technical data — standard server logs (such as IP address, browser type, and pages requested) processed by our hosting provider, Cloudflare, to deliver and secure the website, and aggregated, anonymous usage statistics (such as visit and request counts) collected via Cloudflare Web Analytics, which does not use cookies or track individual visitors.

3. How we use your data

• To respond to your enquiries and communicate with you.
• To provide, and where relevant quote for, our services.
• To maintain the security and performance of our website.

4. Legal basis for processing

We process your personal data on one or more of the following legal bases under GDPR Article 6: your consent (which you may withdraw at any time); the performance of a contract or steps taken at your request before entering into one; and our legitimate interests in responding to enquiries and running our business, provided these do not override your rights.

5. Third parties and processors

We share data with a limited number of service providers who process it on our behalf:

• Web3Forms — delivers messages submitted through our contact form to our inbox.
• Google Fonts — our website loads fonts hosted by Google, which may involve your browser connecting to Google servers.
• Cloudflare — hosts and serves the website (Cloudflare Pages) and provides security and performance services, which involves processing standard technical data such as IP addresses.
• Cloudflare Web Analytics — provides privacy-first, aggregated visit statistics. It does not use cookies, local storage, or any client-side tracking of individual visitors.

We do not sell your personal data.

6. Cookies

We do not use analytics, advertising, or marketing cookies. Our analytics solution (Cloudflare Web Analytics) is cookieless. The only cookies that may be set are strictly necessary ones placed by our infrastructure provider, Cloudflare, for security and performance purposes (for example, to protect the site against malicious traffic). These do not require consent under applicable law. If we introduce any non-essential cookies in the future, we will update this policy and request your consent first.

7. Data retention

We keep your personal data only for as long as necessary for the purposes described above, or as required by law. Enquiries submitted through our contact form (and any related correspondence) are kept for up to 24 months from our last contact with you, unless the enquiry leads to a business relationship, in which case data may be retained for the duration of that relationship and any legally required period thereafter.

8. International transfers

Some of our providers — including Cloudflare, Web3Forms, and Google (for font hosting) — operate globally and may process data outside the European Economic Area, including in the United States. Where such transfers occur, we rely on appropriate safeguards under GDPR Chapter V, such as the European Commission's Standard Contractual Clauses and, where applicable, the provider's certification under the EU–US Data Privacy Framework.

9. Your rights

Under GDPR you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any of these, contact us at info@drastyc.net.

You also have the right to lodge a complaint with the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the revision date shown above.

11. Contact

For any questions about this policy or how we handle your data, contact us at info@drastyc.net.