Privacy Policy

Clear about data. Careful with yours.

This policy explains what information we collect through this website, why we use it and the choices you have.

Last updated: 10 July 2026

We collect only the information needed to run this website, respond to enquiries, protect our services and understand how the site is used. We do not sell personal data.

Who we are

Bridge Studios is the controller of personal data processed through this website. The studio is operated by Andreas Neophytou from Arch. Makariou C 60, 8200 Paphos, Cyprus.

For any privacy question or request, email info@bridgestudios.com.cy or call +357 99 310087.

The data we collect

Information you give us

When you use our contact form or contact us directly, we may receive:

  • your name, email address and telephone number;
  • the services you are interested in;
  • your message and any information you choose to include;
  • subsequent correspondence about your enquiry or project.

Information collected automatically

When you visit the website, our hosting and analytics services may process:

  • IP address and request timestamps;
  • browser, device, operating system and screen information;
  • pages viewed, referral source and interaction data;
  • approximate location derived from your IP address;
  • security and anti-spam information submitted with the contact form.

How and why we use your data

Enquiries & projects

To respond, arrange consultations, prepare proposals and take steps towards a contract at your request.

Site operation

To deliver the website, diagnose faults, prevent spam and protect the site and our communications, based on our legitimate interests in operating a secure service.

Analytics

To understand site performance and improve content and user experience, using analytics technologies where permitted and subject to applicable consent requirements.

Legal obligations

To keep records or disclose information where this is necessary to comply with law, establish legal claims or respond to a lawful authority.

Depending on the context, our legal bases under the GDPR are steps taken at your request before entering a contract, performance of a contract, compliance with a legal obligation, our legitimate interests, or your consent where required.

Cookies and Google Analytics

With your permission, this website uses Google Analytics 4 to measure visits and understand how people use the site. Google Analytics may set first-party cookies such as _ga and process a pseudonymous client identifier, session statistics, device and browser information, page interactions and approximate location. Google states that IP addresses are used during collection to derive location information and are not logged or stored in Google Analytics.

You can accept or reject analytics when the privacy panel appears, and change your choice at any time through “Cookie settings” in the footer. You can also restrict or delete cookies through your browser settings or use the Google Analytics opt-out browser add-on .

Essential technical and security data may still be processed where necessary to serve the website, protect it from abuse or remember a privacy choice.

Who receives data

We disclose personal data only where necessary, including to:

  • our website hosting and email service providers;
  • Google, as the provider of Google Analytics;
  • professional advisers where reasonably necessary;
  • public authorities where disclosure is required by law.

Some service providers may process data outside Cyprus or the European Economic Area. Where applicable, transfers are protected using a lawful transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with appropriate safeguards.

How long we keep data

We keep personal data only for as long as it is reasonably needed for the purpose for which it was collected. Enquiries are reviewed and deleted when they are no longer required. If an enquiry becomes a client relationship, relevant information may be retained for the duration of that relationship and afterwards where required for accounting, tax, contractual or legal purposes.

Security and anti-spam records are retained for a short operational period. Analytics information is retained in accordance with the retention settings configured in our Google Analytics property. We periodically review the information we hold.

How we protect data

We use reasonable technical and organisational measures designed to protect personal data, including HTTPS encryption, access controls, authenticated email delivery, input validation, rate limiting and anti-spam controls. No internet transmission or storage method is completely secure, but we work to reduce risks appropriate to the nature of the information.

Your data protection rights

Subject to the conditions in applicable law, you may ask us to:

  • give you access to personal data we hold about you;
  • correct inaccurate or incomplete data;
  • erase your data or restrict how it is used;
  • provide certain data in a portable format;
  • stop processing based on our legitimate interests;
  • withdraw consent at any time where processing relies on consent.

To exercise a right, email info@bridgestudios.com.cy. We may need to verify your identity before completing a request and will respond within the timeframe required by law.

You also have the right to complain to the Office of the Commissioner for Personal Data Protection in Cyprus .

Questions about your privacy?

Talk directly to the studio. We will answer clearly and help with any request about your personal data.

We may update this policy when our services, providers or legal obligations change. The latest version will always be published on this page with its revision date.