Privacy Policy

Our commitment to protecting your personal information and respecting your privacy rights

Last updated: December 15, 2025

Our Data Protection Commitment

At CommStrategist, we are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or engage with our strategic communication services.

We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR) and Cyprus national data protection legislation. Your privacy is paramount to us, and we implement appropriate technical and organizational measures to ensure your personal data is processed securely and lawfully.

Comprehensive Data Protection Information

Information We Collect

Information You Provide Directly

We collect information that you voluntarily provide to us when you interact with our services, including:

  • • Full name and professional title
  • • Organization and industry information
  • • Contact details for communication
  • • Strategic communication objectives and challenges
  • • Project requirements and specifications
  • • Feedback and survey responses
  • • Communication preferences
  • • Professional background and experience

Information Collected Automatically

When you visit our website, we automatically collect certain technical information:

  • • IP address and general location
  • • Browser type and version
  • • Operating system information
  • • Pages visited and time spent
  • • Referring website information
  • • Device type and screen resolution
  • • Date and time of visits
  • • Usage patterns and preferences

Professional Information

In the context of our strategic communication services, we may collect:

  • • Organizational structure and stakeholder information
  • • Media relations history and preferences
  • • Communication challenges and strategic objectives
  • • Industry-specific requirements and compliance needs
  • • Previous communication campaigns and outcomes

How We Use Your Information

Service Delivery

  • • Provide strategic communication consulting
  • • Develop customized communication strategies
  • • Manage crisis communication protocols
  • • Execute media relations campaigns
  • • Monitor and analyze communication effectiveness

Communication and Support

  • • Respond to inquiries and consultation requests
  • • Provide project updates and reports
  • • Send relevant industry insights and updates
  • • Offer technical support and assistance
  • • Schedule and coordinate meetings

Website Improvement

  • • Analyze website performance and usability
  • • Optimize content and user experience
  • • Identify and resolve technical issues
  • • Develop new features and services
  • • Ensure website security and functionality

Legal and Compliance

  • • Comply with legal obligations and regulations
  • • Protect our rights and legitimate interests
  • • Prevent fraud and unauthorized access
  • • Maintain accurate business records
  • • Respond to legal requests and investigations

Data Protection and Security Measures

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our data protection approach includes:

Technical Safeguards

  • • End-to-end encryption for data transmission
  • • Secure socket layers (SSL) for website communications
  • • Regular security audits and vulnerability assessments
  • • Firewalls and intrusion detection systems
  • • Secure backup and disaster recovery procedures

Organizational Measures

  • • Staff training on data protection principles
  • • Access controls and authorization protocols
  • • Confidentiality agreements for all team members
  • • Regular policy reviews and updates
  • • Incident response and breach notification procedures

Data Sharing and Third-Party Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your explicit consent, except in the following limited circumstances:

Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, conducting services, or serving our clients, provided they agree to maintain confidentiality.

Legal Requirements

We may disclose your information when required by law, court order, or government regulation, or when necessary to protect our rights, safety, or the rights and safety of others.

Business Transfers

In the event of a merger, acquisition, or sale of business assets, your information may be transferred as part of the transaction, subject to equivalent data protection commitments.

Data Retention and Storage

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by applicable laws and regulations:

Contact Information Active relationship period + 3 years
Project Documentation Project completion + 7 years
Website Analytics 26 months maximum
Marketing Communications Until consent withdrawal
Legal and Compliance Records As required by law

Your Rights and Data Management

Your Data Protection Rights

Under applicable data protection laws, you have several rights regarding your personal information. We are committed to facilitating the exercise of these rights in a timely and transparent manner.

Right of Access

Request copies of your personal data and information about how we process it.

Right of Rectification

Request correction of inaccurate or incomplete personal information.

Right of Erasure

Request deletion of your personal data under certain circumstances.

Right to Restrict Processing

Request limitation of processing under specific conditions.

Right to Data Portability

Receive your personal data in a structured, commonly used format.

Right to Object

Object to processing based on legitimate interests or direct marketing.

Right to Withdraw Consent

Withdraw consent for processing based on consent at any time.

Right to Lodge a Complaint

File a complaint with the relevant data protection authority.

Exercising Your Rights

To exercise any of your data protection rights, please contact us using the information provided at the end of this policy. We will respond to your request within one month, or sooner when possible.

Identity Verification

To protect your privacy and security, we may require verification of your identity before processing certain requests. This helps ensure that personal information is not disclosed to unauthorized individuals.

International Data Transfers

Our primary data processing activities take place within the European Union. In cases where personal data may be transferred outside the EU/EEA, we ensure appropriate safeguards are in place, including:

  • • Adequacy decisions by the European Commission
  • • Standard contractual clauses approved by the European Commission
  • • Binding corporate rules for intra-group transfers
  • • Specific derogations for particular situations as provided by law