Privacy Policy

Last updated: June 2, 2026

1. Who We Are

Thavachy Group Ltd ("we," "us," "our") is an applied AI research lab registered in Cyprus. This privacy policy explains how we collect, use, store, and protect your personal data when you visit our website at thavachy.com or interact with our services.

Data Controller: Thavachy Group Ltd
Registration: HE 493046 (Cyprus)
Address: Charilaou Xyloforou, 13, 4103 Limassol, Cyprus
Contact: hello@thavachy.com

2. What Data We Collect

We collect the following categories of personal data:

  • Contact information: Name, email address, and message content when you use our contact form.
  • Newsletter data: Email address when you subscribe to updates.
  • Usage data: Pages visited, time spent, browser type, device type, IP address, and referring URL. This data is collected through analytics tools.
  • Cookie data: See our Cookie Policy for details.

3. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

  • Consent (Art. 6(1)(a) GDPR): Newsletter subscriptions and non-essential cookies. You can withdraw consent at any time.
  • Legitimate interest (Art. 6(1)(f) GDPR): Website analytics, security monitoring, and improving our services.
  • Contract performance (Art. 6(1)(b) GDPR): Processing contact form submissions to respond to your inquiries.

4. How We Use Your Data

  • To respond to your inquiries and contact form submissions
  • To send newsletter updates (only with your explicit consent)
  • To analyze website usage and improve our content
  • To ensure the security and proper functioning of our website
  • To comply with legal obligations

5. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers: Hosting, email, and analytics providers who process data on our behalf under data processing agreements.
  • Legal requirements: When required by law, regulation, or legal process.

6. International Data Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Data Retention

  • Contact form data: Retained for 12 months after your last interaction, then deleted.
  • Newsletter subscriptions: Retained until you unsubscribe.
  • Analytics data: Aggregated and anonymized after 26 months.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access: Request a copy of your personal data.
  • Right to rectification: Request correction of inaccurate data.
  • Right to erasure: Request deletion of your data ("right to be forgotten").
  • Right to restriction: Request limitation of processing.
  • Right to data portability: Receive your data in a structured, machine-readable format.
  • Right to object: Object to processing based on legitimate interest.
  • Right to withdraw consent: Withdraw consent at any time without affecting prior processing.

To exercise any of these rights, contact us at hello@thavachy.com. We will respond within 30 days.

9. Supervisory Authority

You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

10. Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.