Privacy Policy

Controllers & contact

Fat Pitch Ltd, Mesopotamias 8, 7041 Larnaca, Cyprus. Questions about privacy can be sent to [email protected].

Data we collect

• Waitlist inputs: work email, company name, industry, revenue band, and freeform context.
• Survey and onboarding answers gathered via Formbricks (IP Box readiness, preferred timelines, travel plans).
• Call scheduling metadata from Cal.com (name, email, selected slot).
• Transactional correspondence sent via Resend (confirmation emails, onboarding instructions).
• Anonymous analytics via self-hosted Umami/Plausible (page views, referrers, device type, country-level location).
• Client documents uploaded during engagement (KYC, corporate records, passports) which are stored in segregated deal rooms.

How we use the data

• Assess eligibility for the Cyprus IP Box and related relocation programs.
• Respond to enquiries, schedule discovery calls, and send onboarding paperwork.
• Coordinate filings with lawyers, accountants, and immigration partners (only with your explicit go-ahead).
• Improve this site, marketing copy, and service playbooks.
• Maintain records needed for compliance, billing, and dispute resolution.

Legal bases

We rely on legitimate interest to evaluate leads and run analytics; consent for optional marketing emails or surveys; and contract performance/implementation steps when you engage us. Where local law requires it, we enter into data processing agreements with our partners and ensure EU Standard Contractual Clauses govern transfers out of the EEA.

Vendors & transfers

• Formbricks (EU) – waitlist forms, surveys.
• Cal.com (EU/US) – scheduling.
• Resend (US) – transactional email.
• Umami / Plausible (self-hosted EU) – analytics.
• Notion / encrypted deal rooms (EU) – engagement notes and document storage.

All vendors are bound by DPAs and, where needed, Standard Contractual Clauses.

Retention & deletion

• Waitlist leads are removed after 12 months of inactivity or immediately on request.
• Client engagement files follow statutory retention requirements (typically 7 years).
• Backups are encrypted and rotated every 7 days.
• Email [email protected] to request deletion or export—we reply within 72 hours.

Your rights

Depending on your jurisdiction you may have the right to access, correct, delete, port, or restrict processing of your data, as well as the right to object to certain uses. Contact us to exercise these rights. If you believe we have not handled your data properly, you can lodge a complaint with the Commissioner for Personal Data Protection in Cyprus or with your local authority.