Website legal document
Privacy Policy
Last updated 20 October 2026
PAPERDROPS DESIGN & PRINTING LTD (“PaperDrops”, “we”, “us” or “our”) respects your privacy and is committed to handling personal data fairly, transparently and securely. This Privacy Policy explains how we collect and use personal data when you visit paperdrops.com, contact us, subscribe to updates, submit a project enquiry, apply for a role or internship, or otherwise interact with us online.
Contact details
| Company | PAPERDROPS DESIGN & PRINTING LTD |
|---|---|
| Address | Kantaras 4, Agios Athanasios, 4102 Limassol, Cyprus |
| Website | paperdrops.com |
| info@paperdrops.com | |
| Telephone | +357 25 379797 |
1. Scope
This Policy applies to personal data processed through our website and related digital interactions. It does not replace separate notices that may be provided for a specific activity where additional information is required.
2. Personal data we may collect
Information you provide directly
- Contact and identification details, such as your name, email address, telephone number and country or location.
- Business information, such as company or brand name, website, role and the services you are interested in.
- Project enquiry information, including your message, objectives, timing and other details you choose to provide.
- Newsletter subscription details, primarily your email address and consent status.
- Recruitment information, if Careers is enabled, such as your CV, portfolio, LinkedIn profile, employment and education history, and information you choose to include in your application.
- Any information contained in emails, calls or other communications with us.
Information collected automatically
- Technical data such as IP address, browser type, device type, operating system, language, timestamps and security logs.
- Usage data such as pages viewed, approximate session location, referral source, navigation paths and interactions with the website.
- Cookie and similar-technology identifiers, where permitted by your cookie choices.
3. How and why we use personal data
| Purpose | Typical data | Legal basis |
|---|---|---|
| Respond to enquiries and discuss potential projects | Contact, business and enquiry data | Steps taken at your request before entering a contract and/or our legitimate interests in responding to business enquiries. |
| Provide agency services and manage client relationships | Contact, business, communications and project data | Performance of a contract and our legitimate interests in managing client relationships. |
| Send newsletters or marketing updates | Email address, subscription and engagement data | Your consent. You can unsubscribe at any time. |
| Recruitment and internship enquiries | Application, CV, portfolio and communication data | Steps taken at your request, legitimate interests in recruitment, and legal obligations where applicable. |
| Website analytics and improvement | Usage, device and cookie data | Your consent for non-essential analytics technologies. |
| Advertising measurement and audience tools | Cookie/device identifiers and interaction data | Your consent for advertising/marketing technologies. |
| Security, fraud prevention and website integrity | IP, device and security logs | Our legitimate interests in protecting the website, systems and users, and compliance with legal obligations where applicable. |
4. Cookies, analytics and advertising technologies
We may use Google Analytics 4, Meta Pixel, LinkedIn advertising/insight technologies, TikTok Pixel, reCAPTCHA, Cloudflare, Meta/Instagram embeds, a hosting provider and a cookie-consent platform. Non-essential analytics, advertising and similar technologies should not be activated until you have made the relevant cookie choice. See our Cookie Policy and Cookie Settings for more information.
5. Who may receive personal data
- Website hosting, infrastructure, IT, cloud and security providers.
- Email, newsletter and communication providers where used.
- Analytics and advertising providers where you consent to those technologies.
- Cookie-consent and preference-management providers.
- Professional advisers, insurers, auditors or authorities where reasonably necessary or legally required.
- Other service providers acting on our instructions and subject to appropriate contractual safeguards.
6. International transfers
Some technology providers may process personal data outside Cyprus or the European Economic Area. Where required, we use or rely on legally recognised safeguards, such as an adequacy decision or contractual safeguards, and take appropriate steps to protect the information transferred.
7. How long we keep personal data
- General enquiries: normally for up to 24 months after the last meaningful interaction, unless the enquiry becomes a client relationship or a longer period is necessary for legal claims or compliance.
- Newsletter data: until you unsubscribe or withdraw consent, after which we may retain minimal suppression information to respect your choice.
- Recruitment applications: normally up to 12 months after the relevant recruitment process, unless a different period is agreed for future opportunities.
- Analytics, advertising and cookie-related data: according to the relevant provider settings, your consent choices and the periods stated in the live cookie-consent platform.
- Client and business records: for the duration of the relationship and any additional period required for legal, accounting, tax, contractual or claims-related purposes.
8. Your data protection rights
- Request access to your personal data.
- Ask us to correct inaccurate or incomplete data.
- Ask us to erase personal data in circumstances where the law allows.
- Ask us to restrict processing in certain circumstances.
- Object to processing based on legitimate interests in certain circumstances.
- Request data portability where applicable.
- Withdraw consent at any time where processing is based on consent, without affecting earlier lawful processing.
- Lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
To exercise a privacy right, contact us at info@paperdrops.com. We may need to verify your identity before responding.
9. Security
We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.
10. Third-party links and embedded content
Our website may contain links to third-party websites or embedded content from third-party platforms. Those services operate under their own privacy practices. We encourage you to review their privacy information before interacting with them.
11. Children
The website is intended for a general business audience and is not designed to collect personal data from children. If you believe a child has provided personal data to us inappropriately, please contact us.
12. Automated decisions
We do not intend to make decisions that produce legal or similarly significant effects about website visitors solely by automated means.
13. Changes to this Policy
We may update this Privacy Policy when our website, technology, services or legal obligations change. The current version will be published on the website with the updated date shown above.