Privacy Policy
Updated
1. Who we are
Thousand Faces Limited, a company registered in the Republic of Cyprus under registration number HE 501003, with its registered office at Kantaras, 3, Flat/Office 204, Aglantzia, 2103, Nicosia, Cyprus ("we", "us", "our"), is the controller of personal data collected through thousandfacesltd.com (the "Website") and in the course of our business dealings.
This Privacy Policy explains what personal data we collect, why we use it and what rights you have. For any privacy question, contact us at legal@thousandfacesltd.com.
Effective date: 9 November 2026.
2. Personal data we collect
- Enquiry data: name, email, phone number, company, job title and the content of your message when you contact us through the Website form, by email or by phone.
- Business contact data: names, work contact details and roles of representatives of our customers, vendors and partners.
- Technical data: IP address, browser and device type, pages visited and time of visit, collected automatically when you browse the Website.
The Website is aimed at business users. We do not knowingly collect data about children or special categories of personal data.
3. Why we use personal data
| Purpose | Data | Legal basis |
|---|---|---|
| Responding to enquiries and preparing quotes | Enquiry data | Our legitimate interest in answering requests; steps taken at your request before a contract |
| Entering into and performing contracts with customers, vendors and partners | Business contact data | Performance of a contract; our legitimate interest in running our business |
| Operating, securing and improving the Website | Technical data | Our legitimate interest in a secure and working Website |
| Meeting tax, accounting and other legal requirements | Data required by law | Legal obligation |
4. Cookies
The Website uses only cookies that are strictly necessary for it to work.
You can also block or delete cookies in your browser settings. Some parts of the Website may then not work properly.
5. Who we share data with
We share personal data only where necessary, with:
- service providers that host the Website and support our IT, email and CRM systems, acting on our instructions;
- vendors and distributors whose products we resell, where needed to process a quote, order, licence registration or support request;
- professional advisers, auditors and banks;
- public authorities, where required by law.
We do not sell personal data.
6. International transfers
Some recipients may be located outside the European Economic Area. In that case we rely on an adequacy decision of the European Commission or on the European Commission's standard contractual clauses. You can ask us for details of these safeguards.
7. Retention and security
We keep enquiry data for up to 2 years after our last contact. We keep business contact and contract data for the term of the relationship and 6 years after it ends, to meet legal, tax and accounting requirements. Technical data is kept for up to 12 months. After that, data is deleted or anonymised.
We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access.
8. Your rights
Under the EU General Data Protection Regulation (GDPR) you have the right to access your personal data, have it corrected or erased, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these rights, write to legal@thousandfacesltd.com. We respond within one month.
You may also lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus or with the data protection authority of your country of residence.
9. Changes and contact
We may update this Privacy Policy from time to time. The current version, with its effective date, is always available on the Website.
Contact: Thousand Faces Limited, Kantaras, 3, Flat/Office 204, Aglantzia, 2103, Nicosia, Cyprus, legal@thousandfacesltd.com.