Privacy Policy

1. Who we are

Valcore Accounting Services Ltd (“Valcore”, “we”, “us”) is the controller of your personal data.

• Registered address: 135 Archiepiskopou Makariou III Avenue, EMELLE Building, 4th Floor, Office 41, Limassol 3021, Cyprus
• Company registration number: HE 468803
• Email: frontdesk@valcore.com.cy
• Phone: +357 25 357411

For any privacy question or request, write to frontdesk@valcore.com.cy, marked “Data Protection”.

2. What data we collect

• Name, email address, company name and any details you enter in our contact form or send us by email
• Information about your business and the services you need
• Technical data such as IP address, browser type and pages visited, collected through cookies and similar technologies (see section 8)

• Identification data: full name, date of birth, nationality, passport or ID copy, proof of address, tax identification number
• Information on beneficial owners, directors and shareholders of client companies
• Source of funds and source of wealth information, and other data required by anti-money laundering rules
• Financial and accounting records, bank statements, invoices, payroll data and tax data needed to deliver our services
• Contact details and correspondence

If you give us personal data about other people, such as directors, shareholders, beneficial owners or employees, please make sure they know about this Privacy Policy.

3. Why we use your data and our legal basis

We do not sell your personal data, and we do not use it for automated decision-making that has legal effects on you.

4. Who we share your data with

We share personal data only where needed for the purposes above:

• Public authorities when the law requires it, including the Cyprus Tax Department, the Registrar of Companies, the Unit for Combating Money Laundering (MOKAS) and ICPAC
• Auditors, banks and other professionals involved in your engagement, with your knowledge
• Service providers that support our work, such as website hosting (Base44), email, cloud storage, accounting software and IT support. They act on our instructions and must keep your data secure and confidential.
• Google, for advertising measurement, only if you accept advertising cookies

All our staff are bound by professional confidentiality.

5. Transfers outside the EU

Some of our service providers may store data outside the European Economic Area. When this happens, we make sure the data is protected by an EU adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

• Enquiries that do not lead to an engagement: up to 12 months after our last contact
• Client identification and due diligence records: at least five years after our business relationship ends, as required by Cyprus anti-money laundering law, or longer where an authority requires it
• Accounting and tax records: at least six years after the end of the year to which they relate, as required by the Cyprus Companies Law (Cap. 113) and the Assessment and Collection of Taxes Law
• Marketing contacts: until you unsubscribe or withdraw consent

After these periods, we securely delete or anonymise the data.

7. How we protect your data

We use appropriate technical and organisational measures, including restricted access, password-protected systems, encrypted connections and confidentiality obligations for everyone who handles client data.

8. Cookies

Our website uses cookies and similar browser storage that are strictly necessary for it to work, together with basic visit statistics provided by our website platform, Base44. We do not use Google Analytics.

When we run advertising campaigns, we may also use Google advertising cookies to measure which ads lead to enquiries. We use these only with your consent.

You can accept or reject non-essential cookies through the banner when you first visit, and change your choice at any time. Strictly necessary cookies do not need consent.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• ask us to correct inaccurate data
• ask us to delete your data, where we are not legally required to keep it
• restrict or object to our processing, including at any time to direct marketing
• receive your data in a portable format
• withdraw your consent at any time, without affecting processing done before

To use any of these rights, email us at the address in section 1. We will reply within one month. Some data we must keep by law, for example anti-money laundering records, and we will tell you if this applies.

10. Complaints

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the Cyprus supervisory authority:

11. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be on this page, with the date it was last updated.