Privacy Policy

We treat trust seriously. This summary explains what data we collect, how we use it, and the choices you can make.

Who we are

Information we collect

We only collect the data needed to run our services. This includes details you submit directly, records created when you use the site, and limited information from verified partner schools.

Contact, authentication, and profile information you provide when registering an account or claiming a school.
Enquiry messages, contact forms, and support tickets you send us while researching schools or requesting assistance.
Usage analytics captured in aggregate to maintain performance, improve content, and detect fraudulent activity.
School data provided by administrators or verified managers, including staff contact information needed to administer listings.

Sources of data

How we use information

We use personal data to deliver and secure the service, respond to enquiries, and meet regulatory obligations. We never sell personal information.

Provide account features such as saved schools, comparison notes, and manager dashboards.
Respond to enquiries, process claims to manage a school listing, and coordinate support requests.
Send transactional emails (password resets, verification, status updates) and deliver optional updates when you explicitly opt in.
Protect the platform by auditing logs, preventing abuse, and complying with legal requests from Cypriot or EU authorities.

Legal bases for processing

We only process personal information when permitted under EU and Cyprus data protection laws. Depending on the activity, we rely on one of the following legal bases:

Consent when you create an account, opt in to optional updates, or accept cookies beyond the essentials.
Contractual necessity to provide requested services, including directory listings, school management features, and customer support.
Legitimate interests such as improving the platform, preventing fraud, and securing systems. We balance these interests against your rights.
Compliance with legal obligations, for example fulfilling accounting rules, responding to lawful requests, or meeting safeguarding requirements.

How we share information

We only share personal data with third parties when necessary. Whenever we do, we impose contractual obligations that mirror this policy.

Service providers that host infrastructure, send transactional messages, store backups, or provide security monitoring.
Verified school administrators and managers who have been authorised to manage or respond to enquiries for their listing.
Professional advisors (legal, accounting, compliance) and regulators where disclosure is required to meet legal duties.
Successors in the event of a corporate restructuring, merger, or acquisition, provided safeguards remain in place.

International data transfers

Your rights and choices

You may exercise your rights at any time by emailing [email protected]. We respond to all requests in line with the Cyprus Commissioner for Personal Data Protection guidance.

Access your personal data or receive a copy in a portable format.
Request corrections to inaccurate details or supplement incomplete records.
Ask us to delete data when it is no longer needed or when consent is withdrawn.
Restrict or object to certain processing activities, including direct marketing.

Cookies and similar technologies

Security measures

We maintain administrative, technical, and physical safeguards designed to protect personal data against loss, misuse, and unauthorised access.

Encrypted TLS connections for all public pages and API endpoints.
Role-based access controls, two-factor authentication for administrators, and periodic access reviews.
Regular vulnerability assessments, dependency patching, and secure development practices.
Resilient backups stored with encryption at rest and strict access logging.