93Tax by Fat Pitch Ltd ("93Tax", "we", "us", "our") respects your privacy. This notice explains how we collect, use, disclose, and safeguard personal data when you visit 93tax.com, use our services, or interact with us. By using our site or services you acknowledge this policy. We may update it from time to time; continued use means you accept the changes.
Privacy
Privacy Policy
Last updated: December 14, 2025
Data controller
93Tax by Fat Pitch Ltd (Republic of Cyprus). Contact: [email protected]. For company details, see our Terms.
Information we collect
Information you provide directly
- Contact details (name, email, phone, address), company information, revenue ranges, profit estimates, and tax context.
- Identity verification data (IDs, proof of address) and documentation required for compliance and service delivery.
- Account and preference data for any client portal, plus correspondence and consultation notes.
- Payment and billing details processed through our secure payment processor.
- Scheduling information (appointments, time zone, availability preferences).
Information collected automatically
- Device/technical data (IP, browser, OS, device identifiers, hardware settings).
- Usage data (pages visited, timestamps, time on page, clicks, navigation paths, referring URLs).
- Analytics data about site performance and behavior.
- Advertising data (click identifiers, ad interactions, conversions, attribution).
Information from third-party sources
- Advertising platforms and networks, analytics providers, business partners, and referral sources.
- Public databases, governmental registries, and professional service providers assisting your engagement.
Legal bases for processing
Contractual necessity; legal obligation; legitimate interests that do not override your rights; and consent where required.
How we use your information
Service delivery
- Provide tax advisory, company formation, relocation, and related services.
- Manage client relationships, process transactions, maintain records, and operate any client portal.
- Schedule and conduct consultations.
Business operations
- Communicate about services and inquiries; improve site, services, and user experience.
- Internal research, analytics, training, quality assurance, fraud prevention, and security monitoring.
Marketing and advertising
- Send service updates and promotional communications (where permitted or with consent).
- Personalize ads, measure effectiveness, run remarketing/retargeting, and build lookalike audiences.
Legal and compliance
- Comply with laws and professional obligations; respond to legal requests; prevent harm and fraud.
- Conduct due diligence and anti-money-laundering checks; establish, exercise, or defend legal claims.
Cookies and tracking
We use essential, analytics, and advertising cookies, plus pixel tags, web beacons, and conversion tracking. Third-party advertising and analytics services may collect data over time across sites (including browsing behavior, IP/device identifiers, click IDs, conversions, and referrers). You can control cookies in your browser; disabling some may affect functionality.
Sharing of information
- Professional service providers: Lawyers, accountants, tax advisors, corporate service providers, and immigration consultants in Cyprus bound by confidentiality.
- Processors: Payment processors (e.g., Stripe), scheduling platforms (e.g., Cal.com), hosting/infrastructure, CRM, analytics, and advertising platforms under DPAs.
- Advertising partners: For measurement, attribution, optimization, and lookalike audience building.
- Legal/regulatory: To comply with law, respond to authorities, protect rights, or investigate fraud/illegal activity.
- Business transfers: In mergers, acquisitions, reorganizations, or asset sales.
- With consent: When you explicitly authorize it.
International data transfers
Data is primarily processed in the EEA. When transferred outside the EEA, we use adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules, or your explicit consent. Some providers (including advertising platforms) may process data in other jurisdictions subject to these safeguards.
Data retention
- Active clients: retained for the engagement and a reasonable period afterward.
- Contractual/legal records: kept as required to establish, exercise, or defend claims (typically 6–10 years).
- Tax/financial records: retained per Cyprus legal requirements.
- Marketing data: kept until you withdraw consent or opt out.
- Analytics/advertising data: retained per legitimate interests and platform policies.
When data is no longer required, we delete or anonymize it under our retention procedures.
Data security
We use encryption in transit/at rest, access controls, authentication, monitoring, secure hosting, staff training, and incident response procedures. No method is 100% secure, but we maintain industry-standard protections.
Your GDPR rights
- Access, rectify, erase, restrict processing, data portability, and object (including to direct marketing).
- Withdraw consent where processing relies on consent.
- Lodge a complaint with a supervisory authority.
To exercise these rights, email [email protected]. We may verify your identity and respond within one month.
Supervisory authority
You may lodge complaints with the Office of the Commissioner for Personal Data Protection in Cyprus or the authority in your jurisdiction.
Children's privacy
Our services are not directed to individuals under 18. If we learn we collected data from a child without consent, we will delete it.
Third-party links
Links to third-party sites or apps are outside this policy. Review the privacy notices of any third-party resources you use.
Automated decision-making
We may use automated processing (including profiling) for fraud prevention and advertising optimization. You have the right not to be subject to decisions based solely on automated processing that produce legal or similar effects, except where required for a contract, authorized by law, or based on your explicit consent.
Updates
We will post changes here and update the “Last updated” date. Material changes may include additional notice as appropriate.
Contact us
Email [email protected] for questions, concerns, or requests.
Governing law
This policy and related disputes are governed by the laws of the Republic of Cyprus, without regard to conflict of law provisions.