Privacy Policy

Last updated:

1. Introduction

RE-FYZIO (hereinafter "we") respects your privacy and is committed to protecting your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Cyprus Law on the Protection of Personal Data (L.125(I)/2018). This policy explains what data we collect, how we use it, and what your rights are.

2. Data Controller

The data controller is RE-FYZIO, Physiotherapy & Musculoskeletal Rehabilitation Centre, located at Sotiri Papalazarou 27, Geroskipou 8201, Cyprus.

For data protection enquiries, contact us by phone at +357 99 887796, email at info@re-fyzio.com, or via the contact form on our website. Due to the size of our organisation, we are not required to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR.

3. Data We Collect

Through our website, we collect the following data:

  • Contact details: Full name, email, phone number — via the contact form
  • Usage data: Anonymous browsing data via Google Analytics (with consent mode enabled)
  • Cookies: Essential functional cookies and analytics cookies (only with your consent)

4. Purpose of Processing

We use your data exclusively for:

  • Responding to contact requests and scheduling appointments
  • Improving the website user experience
  • Statistical traffic analysis (anonymised)

Data processing is based on your consent (Article 6(1)(a) GDPR) for the contact form and cookies, and on our legitimate interest (Article 6(1)(f) GDPR) for the operation and security of the website.

6. Third Parties

We may share data with the following third-party providers, solely for the purposes of operating the website:

  • Resend: Delivery of contact form emails
  • Google Analytics: Traffic analysis (with GDPR consent mode enabled)
  • Mapbox: Location map display
  • Vercel: Website hosting (European server)

7. International Data Transfers

Our website is hosted on a European Vercel server. However, some third-party providers (Google Analytics, Resend, Mapbox) are based in the United States. Data transfers to these providers are conducted on the basis of:

  • The EU-US Data Privacy Framework
  • Standard Contractual Clauses (SCCs) approved by the European Commission

8. Data Retention

Contact form data is retained for as long as necessary to fulfil your request and is then deleted. Analytics data is automatically anonymised after 14 months.

9. Your Rights

Under the GDPR, you have the following rights:

  • Right of access to your data
  • Right to rectification of inaccurate data
  • Right to erasure ("right to be forgotten")
  • Right to restriction of processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent at any time

To exercise your rights, contact us at +357 99 887796 or via the contact form. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.

10. Cookies

Our website uses the following cookies:

  • refyzio-consent — Essential. Stores your cookie consent choice. No expiry.
  • _ga — Analytics (Google). Distinguishes unique visitors. Duration: 2 years. Consent required.
  • _ga_* — Analytics (Google). Maintains session state. Duration: 2 years. Consent required.

Analytics cookies are activated only after your explicit consent via the cookie banner, in accordance with Google Consent Mode v2. You can change your preferences at any time by clearing your browser cookies.

11. Changes to This Policy

We reserve the right to update this policy. Any changes will be published on this page with an updated date.

12. Contact

For any data protection enquiry, contact us:

RE-FYZIO — Physiotherapy & Musculoskeletal Rehabilitation Centre
Sotiri Papalazarou 27, Geroskipou 8201, Cyprus
Tel: +357 99 887796
Email: info@re-fyzio.com