Last updated: October 2026

Wo.Box Consulting Ltd. (“Wo.Box”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how Wo.Box Consulting Ltd. collects, uses, stores and protects personal data when you visit our website, contact us, submit an enquiry, request our services or otherwise interact with us.

Wo.Box processes personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection legislation.

​

1. DATA CONTROLLER

​

The data controller responsible for your personal data is:

Wo.Box Consulting Ltd.
Archiepiskopou Makariou III 27
8300, Paphos, Cyprus

Email: info@wo-box24.com
Phone: +357 97517636

For questions regarding the processing of your personal data or to exercise your data protection rights, you may contact us using the above contact details.

Wo.Box has not appointed a Data Protection Officer unless otherwise required by applicable law. Where a Data Protection Officer is required or appointed, the relevant contact details will be provided.

​

2. PERSONAL DATA WE COLLECT

​

Depending on how you interact with us, we may collect and process different categories of personal data.

This may include:

​

Identification and contact information

• Name and surname

• Email address

• Telephone number

• Business address

• Company or organisation name

• Job title or professional role

Business and professional information

• Information about your business

• Business activities

• Business needs and objectives

• Project information

• Funding requirements

• Information relating to applications for grants or other funding

• Information relating to financing or business plans

• Other information necessary to provide our consulting services

​

Communication information

• Emails and other correspondence

• Enquiries submitted through our website

• Information provided during meetings or consultations

• Records of communications relating to our services

​

Financial and invoicing information

Where necessary for our business relationship, we may process:

• Billing information

• Invoice details

• Information concerning services provided

• Payment-related information

• Information required for accounting and tax purposes

​

Information submitted voluntarily

We may also process any other information that you voluntarily provide to us through our website, email, forms, documents or other communication channels.

​

Technical information

When you visit our website, certain technical information may be collected automatically, depending on the website functionality and technologies in use. This may include:

• IP address

• Browser type and version

• Device type

• Operating system

• Technical information relating to your visit

• Website usage information

• Information necessary for website security and functionality

​

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• Directly from you when you contact us

• Through contact or enquiry forms on our website

• When you request information about our services

• When you request a quotation or proposal

• When you become a client

• During the provision of our consulting services

• Through email and other business communications

• When you provide documents or information relating to your business or project

• Through our business and customer management systems

• Automatically through our website and certain technical technologies, including cookies where applicable

We generally collect personal data directly from the individual concerned. In certain circumstances, we may receive information from a company, organisation, authorised representative, business partner, public authority or other third party where this is necessary for the provision of our services or permitted by law.

​

4. HOW WE USE YOUR PERSONAL DATA

We may use personal data for the following purposes:

• To respond to enquiries and requests for information

• To communicate with you

• To provide consulting and professional services

• To understand your business, project and funding requirements

• To assess potential funding and financing opportunities

• To prepare proposals and quotations

• To prepare business plans and related documents

• To prepare funding applications and supporting documentation

• To support the implementation of projects

• To manage our relationship with clients and prospective clients

• To maintain client and business records

• To prepare and issue invoices

• To manage payments and accounting records

• To arrange meetings and appointments

• To provide administrative support

• To manage our suppliers, partners and professional relationships

• To improve our website and services

• To maintain the security and functionality of our website and systems

• To establish, exercise or defend legal claims

• To comply with applicable legal, tax, accounting and regulatory obligations

We will not process personal data for purposes that are incompatible with the purposes for which it was collected unless we have an appropriate legal basis to do so.

 

5. LEGAL BASIS FOR PROCESSING

Depending on the circumstances, Wo.Box may process personal data on one or more of the following legal bases under Article 6 of the GDPR:

Performance of a contract

We may process personal data where this is necessary to provide services under a contract with you or to take steps at your request before entering into a contract.

Legal obligation

We may process personal data where this is necessary to comply with legal, accounting, tax or regulatory obligations.

Legitimate interests

We may process personal data where this is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms.

Our legitimate interests may include:

• Managing our business

• Managing business relationships

• Communicating with clients and prospective clients

• Maintaining business records

• Protecting our systems and business

• Improving our services

• Preventing fraud or misuse

• Establishing or defending legal claims

Consent

Where consent is required, we will request your consent before carrying out the relevant processing activity.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

​

6. CONTACT FORMS AND ENQUIRIES

If you submit information through a contact or enquiry form on our website, we may process the information provided in order to:

• Respond to your enquiry

• Provide the information requested

• Contact you regarding our services

• Assess your business or project requirements

• Prepare a quotation or proposal where requested

• Provide consulting services where you subsequently engage us

Information submitted through an enquiry form will not be used for unrelated purposes without an appropriate legal basis.

​

7. THIRD-PARTY SERVICE PROVIDERS AND BUSINESS SYSTEMS

Wo.Box uses third-party technology and business service providers to operate our website, communicate with clients, manage business relationships, issue invoices, store documents and provide our services.

These providers may process personal data on our behalf or provide systems through which personal data is stored, managed or communicated.

The main systems used by Wo.Box may include the following:

​

7.1 Wix

Our website is created, hosted and operated using Wix.

Wix may process information relating to visitors to our website and information submitted through website forms. Wix may also process technical information necessary for the operation, security and functionality of the website.

Information processed through Wix may include:

• Name

• Email address

• Telephone number

• Information submitted through contact or enquiry forms

• IP address and technical information

• Website usage information

• Cookie-related information, where applicable

Wix may act as a data processor or other relevant service provider in relation to personal data processed through our website.

Wix's own privacy and data protection terms apply to its processing activities.

 

7.2 Zoho CRM

Wo.Box uses Zoho CRM to manage business contacts, leads, prospective clients, clients and business enquiries.

Personal data stored or processed through Zoho CRM may include:

• Name and surname

• Company or organisation

• Job title or professional role

• Email address

• Telephone number

• Business contact details

• Communication history

• Enquiry history

• Information about services requested

• Information relating to business projects

• Information relating to funding or financing requirements

• Notes and other information necessary for managing the business relationship

Zoho CRM is used for purposes including:

• Lead management

• Client management

• Communication management

• Follow-up of enquiries

• Management of business opportunities

• Organisation of client information

• Management of the business relationship

 

7.3 Zoho Invoice

Wo.Box uses Zoho Invoice for the preparation, issuing and management of invoices and related financial records.

Personal data processed through Zoho Invoice may include:

• Customer or company name

• Billing details

• Contact details

• Invoice information

• Services provided

• Amounts invoiced

• Payment-related information

• Information required for accounting and tax purposes

Financial and invoicing information may be retained for the period required under applicable accounting, tax and legal obligations.

 

7.4 Google Workspace

Wo.Box uses Google Workspace for business email, communication, document management and cloud-based business operations.

Depending on the services used, this may include:

• Gmail

• Google Drive

• Google Docs

• Google Sheets

• Google Calendar

• Other Google Workspace services used in the ordinary course of our business

Personal data may be processed through Google Workspace when we:

• Communicate with clients and prospective clients

• Receive or send business enquiries

• Exchange documents

• Store business documents

• Manage appointments and meetings

• Maintain business records

• Collaborate with clients, partners or service providers

Documents and communications may contain personal data provided by you or relating to your business relationship with Wo.Box.

Google's applicable data processing and privacy terms govern its processing of customer data.

 

8. OTHER SERVICE PROVIDERS

Depending on the nature of the service provided, Wo.Box may also use other third-party providers, including:

• Professional advisers

• Accountants and accounting service providers

• Legal advisers

• IT and technical service providers

• Cloud storage providers

• Communication service providers

• Website and hosting providers

• Administrative service providers

• Other professional consultants or subcontractors

Such providers may have access to personal data only where this is necessary for the relevant service or business purpose.

Where a third party processes personal data on our behalf, we take appropriate measures to ensure that the processing is carried out in accordance with applicable data protection legislation.

 

9. CATEGORIES OF PERSONAL DATA PROCESSED THROUGH OUR BUSINESS SYSTEMS

Depending on the nature of our relationship with you, personal data may be processed through our website, CRM, invoicing, email, document management and other business systems.

This may include:

• Identification information

• Contact information

• Professional information

• Company information

• Business information

• Project information

• Funding and financing information

• Correspondence

• Enquiry information

• Documents voluntarily provided to us

• Invoicing and financial information

• Technical website information

We seek to limit the personal data processed to information that is relevant and necessary for the applicable purpose.

 

10. SHARING OF PERSONAL DATA

We may share personal data where necessary with:

• Our employees and authorised personnel

• Professional advisers and consultants

• Accountants and auditors

• Legal advisers

• IT and technology providers

• Website and hosting providers

• Cloud and software providers

• Communication and email providers

• Public authorities and government departments

• Funding bodies and competent authorities where required for a funding application or project

• Banks and financial institutions where necessary for services requested by the client

• Other service providers or professional partners where necessary to provide the requested services

We do not sell or rent your personal data to third parties.

Where disclosure is required by law, we may disclose personal data to the relevant competent authority.

 

11. FUNDING APPLICATIONS AND PROJECT-RELATED DATA

Where you engage Wo.Box to assist with a funding application, financing application, business plan, project or other professional service, we may process personal data contained in documents and information provided to us for the purpose of preparing and managing the relevant application or project.

Depending on the specific service, this may include information relating to:

• Business owners

• Directors

• Employees

• Shareholders

• Project team members

• Professional qualifications

• Business activities

• Financial information

• Company information

• Supporting documents

Where necessary, such information may be submitted to the relevant government department, funding body, financial institution or other competent organisation as part of the service requested by the client or where required by the applicable process.

We will only process and disclose such information where there is an appropriate legal basis to do so.

 

12. INTERNATIONAL DATA TRANSFERS

Some of the technology and service providers used by Wo.Box may process or store personal data outside Cyprus or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate measures to ensure that the transfer complies with applicable data protection legislation.

Depending on the circumstances, appropriate safeguards may include:

• An adequacy decision adopted by the European Commission

• Standard Contractual Clauses approved by the European Commission

• Other lawful transfer mechanisms recognised under applicable data protection legislation

 

13. DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected.

The retention period depends on:

• The nature of the information

• The purpose for which it was collected

• Whether we have an ongoing business relationship with you

• Applicable legal, accounting and tax requirements

• The need to establish, exercise or defend legal claims

Certain information may therefore be retained after the end of a business relationship where this is necessary to comply with legal obligations or protect our legitimate interests.

When personal data is no longer required, we will take appropriate steps to securely delete, destroy or anonymise it, where appropriate.

 

14. DATA SECURITY

Wo.Box takes appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access

• Unauthorised disclosure

• Accidental loss

• Destruction

• Alteration

• Misuse

• Unauthorised processing

Access to personal data is limited to persons and service providers who require access for legitimate business purposes.

However, no electronic transmission, storage system or internet-based service can be guaranteed to be completely secure.

 

15. COOKIES AND SIMILAR TECHNOLOGIES

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

• Website functionality

• Website security

• User preferences

• Website performance

• Analytics, where applicable

Some cookies may be necessary for the operation of the website, while others may require your consent under applicable law.

Where consent is required, non-essential cookies will only be used after obtaining the appropriate consent.

You may manage or disable cookies through your browser settings and, where available, through the cookie settings provided on our website.

 

16. DIRECT MARKETING

Wo.Box may contact existing clients or prospective clients regarding our services where permitted by applicable law.

Where consent is legally required for direct marketing communications, we will obtain the relevant consent before sending such communications.

You may object to receiving marketing communications at any time by contacting us or by using the unsubscribe mechanism provided in the relevant communication, where available.

 

17. YOUR DATA PROTECTION RIGHTS

Subject to the conditions and limitations provided by applicable law, you may have the following rights:

​

Right of access

You may request confirmation as to whether we process your personal data and request access to that data.

​

Right to rectification

You may request correction of inaccurate or incomplete personal data.

​

Right to erasure

You may request deletion of your personal data where the applicable legal conditions are met.

​

Right to restriction of processing

You may request that we restrict the processing of your personal data in certain circumstances.

​

Right to object

You may object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing.

​

Right to data portability

Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format.

​

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights are subject to the conditions and exceptions provided by applicable data protection legislation.

​

18. HOW TO EXERCISE YOUR RIGHTS

To exercise your rights or to ask questions about the processing of your personal data, please contact:

Wo.Box Consulting Ltd.
Archiepiskopou Makariou III 27
8300, Paphos, Cyprus

Email: info@wo-box24.com
Phone: +357 97517636

We may need to request additional information to verify your identity before responding to certain requests.

We will respond to valid requests within the time period required by applicable data protection legislation.

​

19. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Cyprus, the competent supervisory authority is:

Office of the Commissioner for Personal Data Protection
Cyprus

You may contact the Commissioner for information about your data protection rights and the applicable complaint procedure.

​

20. AUTOMATED DECISION-MAKING AND PROFILING

Wo.Box does not use personal data for automated decision-making, including profiling, that produces legal or similarly significant effects on individuals.

If this practice changes, we will provide the information required under applicable data protection legislation.

​

21. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites, platforms or online services.

Wo.Box is not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policy and applicable terms of any third-party website before providing personal data.

​

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect:

• Changes to our services

• Changes to our business systems

• Changes to technology

• Changes to applicable legislation

• Changes to our data processing practices

The latest version will be published on this page together with the date of the most recent update.

​

23. CONTACT US

If you have any questions regarding this Privacy Policy or the way Wo.Box processes personal data, please contact us:

Wo.Box Consulting Ltd.
Archiepiskopou Makariou III 27
8300, Paphos, Cyprus

Email: info@wo-box24.com
Phone: +357 97517636