Privacy Policy

Last updated: September 2026

1. Introduction

ALTERUMSTUDIO LTD ("ALTERUMSTUDIO LTD", "we", "us" or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect your personal data when you visit or interact with our website, contact us, submit an enquiry, subscribe to communications, or otherwise interact with ALTERUM through our digital channels.

This Privacy Policy also explains your rights in relation to your personal data and how you may exercise them.

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of Such Data Law of 2018, Law 125(I)/2018 of the Republic of Cyprus, and other applicable data protection and privacy legislation.

2. Data Controller

For the purposes of the GDPR, the data controller is ALTERUMSTUDIO LTD, Charalampou Mouskou 20, ABC Business Center, 1st Floor, Office 103, 8010 Paphos, Republic of Cyprus.

Email: info@alterum.studio. Website: alterum.studio.

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us using the details above.

3. Personal Data We May Collect

Depending on how you interact with us and our website, we may collect and process the following categories of personal data.

3.1 Identity and Contact Data

  • first name and last name
  • company or business name
  • job title or position
  • email address
  • telephone number
  • country or location
  • business address
  • other contact information you voluntarily provide

3.2 Project and Enquiry Data

When you contact us regarding our services or submit a project enquiry, we may collect the services you are interested in, information about your company or brand, website address, social media profiles, project requirements, estimated budget, expected timeline, project objectives, materials or files submitted to us, and any other information included in your enquiry or correspondence.

3.3 Client and Business Data

If you become a client or otherwise enter into a business relationship with ALTERUMSTUDIO LTD, we may process company registration information, VAT or tax identification details, billing information, contractual and project information, correspondence, invoices and payment records, and information necessary for the performance and administration of our services.

We generally do not collect or store complete payment-card details through our website. Where payments are processed by third-party payment providers or financial institutions, their own privacy terms may apply.

3.4 Technical and Usage Data

When you use our website, certain technical information may be collected automatically: IP address, browser type and version, device type, operating system, language settings, approximate geographic location derived from technical information, referring website, pages visited, time and date of access, time spent on pages, and other diagnostic or website usage information.

3.5 Marketing and Communication Data

Where applicable, we may process your preferences regarding communications from us, newsletter subscriptions, marketing preferences, interactions with our emails or communications, and communications made through our social media channels.

4. How We Collect Personal Data

We may collect personal data directly from you, for example when you complete a contact or project enquiry form, contact us by email or telephone, communicate with us through social media, request information about our services, enter into an agreement with us, subscribe to a newsletter or other communication, or otherwise provide information directly to ALTERUM.

We may also collect personal data automatically when you visit or interact with our website, through cookies and similar technologies where permitted by applicable law, and from third parties or publicly available sources where appropriate, including professional networks, business directories, social media platforms, analytics providers and business partners.

5. Purposes and Legal Bases for Processing

We only process personal data where we have a lawful basis to do so.

Responding to enquiries

To respond to requests, questions and project enquiries and to communicate with prospective clients. Legal basis: taking steps at your request prior to entering into a contract and our legitimate interests in managing business enquiries.

Providing our services

To enter into, administer and perform contracts with our clients and provide marketing, branding, design, digital and related services. Legal basis: performance of a contract.

Client and project management

To manage projects, communications, approvals, deliverables, billing and ongoing client relationships. Legal basis: performance of a contract and our legitimate business interests.

Accounting and legal compliance

To maintain accounting and business records, issue invoices, comply with tax requirements and fulfil other legal or regulatory obligations. Legal basis: compliance with legal obligations.

Website operation and security

To operate, maintain, secure and improve our website and to identify technical or security issues. Legal basis: our legitimate interests in maintaining a secure and functional website.

Analytics and website improvement

Where applicable, to understand how visitors use our website and improve its functionality, performance and content. Where the use of particular analytics technologies requires consent under applicable law, such technologies will be used only after obtaining the required consent.

Marketing communications

To send newsletters, updates or promotional communications where you have requested them or where otherwise permitted by applicable law. Where consent is the applicable legal basis, you may withdraw your consent at any time.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to operate correctly, remember user preferences, understand website usage and, where applicable, support analytics or marketing activities.

  • Strictly necessary cookies, required for the website to operate
  • Functional cookies, used to remember preferences or improve functionality
  • Analytics cookies, used to understand how visitors interact with the website
  • Marketing cookies, where applicable, used to measure campaigns or provide relevant advertising

Where required by law, non-essential cookies will not be placed on your device without your prior consent. You may withdraw or modify your cookie preferences at any time through the cookie settings available on our website.

7. Third-Party Services

We may use trusted third-party service providers to support the operation of our website and business. Depending on the services implemented on our website, these may include website hosting and infrastructure providers, website development and content-management platforms, cloud storage providers, email and communication providers, analytics providers, customer relationship management systems, payment and banking providers, project management platforms, social media platforms and other professional or technical service providers.

These providers may process personal data on our behalf or, in certain circumstances, as independent data controllers. We require service providers acting as processors to process personal data only in accordance with our instructions and applicable data protection requirements.

8. Social Media and External Links

Our website may contain links to third-party websites or social media platforms, including Instagram, LinkedIn and others. Following such links may allow third parties to collect or process information about you. ALTERUM does not control third-party websites and is not responsible for their privacy practices. We encourage you to review the privacy policies of any external website or platform you visit.

9. International Transfers of Personal Data

Some of our service providers may operate or store information outside the European Economic Area. Where personal data is transferred outside the EEA, we take appropriate measures to ensure that such transfers comply with applicable data protection legislation. Depending on the circumstances, these safeguards may include a European Commission adequacy decision, Standard Contractual Clauses approved by the European Commission, or another lawful transfer mechanism permitted under the GDPR.

10. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy contractual, accounting, tax, legal and regulatory requirements. Retention periods may vary depending on the nature of the information and our relationship with you.

  • enquiry information may be retained for a reasonable period after our last communication
  • client and contractual records may be retained for the duration of the business relationship and thereafter for the period required or permitted by applicable law
  • accounting and transaction records may be retained for applicable statutory retention periods
  • marketing information may be retained until you unsubscribe, withdraw consent or otherwise object to the relevant processing

When personal data is no longer required, we will delete, anonymise or securely dispose of it, subject to applicable legal obligations.

11. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or other unlawful processing.

Access to personal data is limited to persons and service providers who reasonably require access for legitimate business purposes and who are subject to appropriate confidentiality obligations. However, no internet-based transmission or electronic storage system can be guaranteed to be completely secure.

12. Your Rights

Subject to the conditions and limitations provided by applicable data protection law, you may have the right to:

  • access your personal data and receive information about how it is processed
  • rectify inaccurate or incomplete personal data
  • request erasure of your personal data
  • restrict processing of your personal data
  • object to processing based on legitimate interests
  • object to direct marketing at any time
  • request data portability where applicable
  • withdraw consent at any time where processing is based on consent
  • lodge a complaint with the competent supervisory authority

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn. To exercise your rights, contact us at info@alterum.studio. We may request reasonable information necessary to verify your identity before responding to your request.

13. Complaints

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority. In Cyprus, the competent authority is the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia, Cyprus.

You may also contact the supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement, where applicable. We would appreciate the opportunity to address your concerns directly before you approach a supervisory authority, although this does not affect your right to lodge a complaint.

14. Children's Privacy

Our website and services are intended for businesses and professional users and are not directed at children. We do not knowingly collect personal data from children through our website. If you believe that a child has provided personal data to us, please contact us so that we may take appropriate action.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our website, services, technologies, business practices or applicable legal requirements. The latest version will be published on this page and identified by the date above. We encourage you to review this Privacy Policy periodically.

16. Contact Us

If you have questions about this Privacy Policy, the processing of your personal data or wish to exercise your data protection rights, please contact ALTERUMSTUDIO LTD, Charalampou Mouskou 20, ABC Business Center, 1st Floor, Office 103, 8010 Paphos, Republic of Cyprus.

Email: info@alterum.studio

For details of the specific cookies used on this website, how long each one lasts and how to change your choice, see our Cookie Policy.