Privacy Policy
Last updated: September 18, 2025
Our Commitment to Your Privacy
TaskFlow is committed to protecting your personal information and respecting your privacy rights. This policy explains how we collect, use, store, and protect your data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws in Cyprus and the European Union.
Business Information
Business Name: TaskFlow
Address: 89 Omonia Avenue, 3045 Limassol, Cyprus
Phone: +357 25 927 168
1. Information We Collect
1.1 Information You Provide Directly
We collect personal information that you voluntarily provide to us when you interact with our services, including when you contact us through forms, email, or phone.
- Contact Information: Name, email address, phone number, company name, and job title when you submit inquiries or contact forms
- Communication Data: Information contained in your messages, feedback, questions, or other communications with us
- Service Information: Details about the services you are interested in or have inquired about
- Professional Information: Information about your organization, industry, and project management challenges
1.2 Automatically Collected Information
When you visit our website, we automatically collect certain information about your device and how you interact with our site.
- Technical Data: IP address, browser type and version, operating system, device information, and screen resolution
- Usage Data: Pages visited, time spent on pages, links clicked, referring website, and navigation paths
- Cookie Data: Information collected through cookies and similar technologies as described in our Cookie Policy
- Performance Data: Website performance metrics, error reports, and diagnostic information
1.3 Information from Third Parties
We may receive information about you from third-party sources such as analytics providers, advertising networks, and publicly available sources. This information helps us understand how users find and interact with our website and improve our services.
2. How We Use Your Information
2.1 Primary Purposes
We use the personal information we collect for the following purposes, based on legitimate business interests, your consent, or to fulfill contractual obligations:
- Service Delivery: To provide, maintain, and improve our project management consulting services
- Communication: To respond to your inquiries, provide customer support, and send service-related communications
- Business Operations: To manage our relationship with you, process requests, and maintain business records
- Website Improvement: To understand how visitors use our website and improve user experience
- Security: To protect against fraud, unauthorized access, and other security threats
- Legal Compliance: To comply with legal obligations and respond to lawful requests from authorities
2.2 Marketing and Analytics
With your consent, we may use your information to send you marketing communications about our services, industry insights, and relevant updates. We also use analytics tools to understand website traffic patterns and user behavior, which helps us improve our content and services. You can opt out of marketing communications at any time.
3. Legal Basis for Processing
Under GDPR, we process your personal data based on one or more of the following legal grounds:
Contractual Necessity
Processing necessary to enter into or perform a contract with you
Legal Obligation
Processing required to comply with legal or regulatory obligations
Legitimate Interests
Processing necessary for our legitimate business interests
Consent
Processing based on your explicit consent, which you can withdraw
4. Data Sharing and Disclosure
4.1 Third-Party Service Providers
We may share your personal information with trusted third-party service providers who assist us in operating our website and delivering our services. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
- • Web hosting and infrastructure services
- • Analytics and website performance monitoring
- • Email communication and customer relationship management
- • Security and fraud prevention services
4.2 Legal Requirements
We may disclose your personal information if required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests.
4.3 Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and the choices you may have regarding your personal information.
5. Data Security and Protection
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:
Encryption
Data transmission and storage encryption using industry-standard protocols
Access Control
Restricted access to personal data on a need-to-know basis
Security Monitoring
Regular security audits and monitoring for potential threats
Staff Training
Regular data protection training for all personnel
While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security but commit to promptly addressing any security incidents.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law. Our retention periods are based on:
- The length of our relationship with you and provision of services
- Legal, regulatory, tax, accounting, or reporting requirements
- Potential legal claims and statute of limitations periods
- Legitimate business interests and operational needs
When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention and disposal procedures.
7. Your Rights and Opt-Out Instructions
Under GDPR and applicable data protection laws, you have the following rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you
Right to Rectification
Request correction of inaccurate or incomplete personal information
Right to Erasure
Request deletion of your personal information in certain circumstances
Right to Object
Object to processing of your personal information for certain purposes
Right to Restriction
Request restriction of processing in certain situations
Right to Data Portability
Receive your personal information in a structured, commonly used format
Right to Withdraw Consent
Withdraw consent at any time where processing is based on consent
You Are Not Required to Provide Personal Information
You are not required to provide any personal information when using this website. If you prefer not to share your data, you may:
- • Avoid filling out contact forms, account registrations, or any data-submitting features
- • Disable cookies through your browser settings (see our Cookie Policy for more details)
- • Contact us directly to request the deletion of any previously shared personal data
We respect your privacy choices. If you would like us to delete your data, please reach out to us at the contact details provided on our Contact page. We will process your request promptly.
8. International Data Transfers
Your personal information may be transferred to and processed in countries other than Cyprus. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements. These safeguards may include standard contractual clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms.
9. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can delete such information.
10. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will update the "Last updated" date at the top of this page and may notify you through other means such as email or website notice. We encourage you to review this policy periodically to stay informed about how we protect your information.
11. Contact Information
If you have questions about this privacy policy, wish to exercise your data protection rights, or have concerns about how we handle your personal information, please contact us:
We will respond to your inquiries within a reasonable timeframe, typically within 30 days as required by GDPR.
12. Supervisory Authority
If you are not satisfied with our response to your data protection concerns, you have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection or your local data protection authority in the European Union.