Privacy Policy

This Privacy Policy explains how Lumio Data LLC collects, uses, stores and protects personal information when you use cyprusvatnumber.com.

1. Who We Are

cyprusvatnumber.com is operated by: Lumio Data LLC, 1021 E Lincolnway 10560, Cheyenne, WY 82001, United States.
Email: info@cyprusvatnumber.com

Lumio Data LLC is the data controller for personal information processed through cyprusvatnumber.com, except where another provider, such as Paddle, acts independently as a controller for its own services.

2. Information We Collect

Depending on how you use our website, we may collect the following information.

Individual Customers

  • name;
  • email address;
  • billing or residential address;
  • telephone number; and
  • account and login information.

Business Customers

  • company name;
  • company address;
  • telephone number;
  • email address;
  • VAT number, where applicable; and
  • account and login information relating to authorised users.

Orders and Payments

We may receive information relating to purchases, including order details, transaction status and billing information. Payments are processed through Paddle. We do not normally receive or store your full payment-card details.

Technical and Usage Information

When you use our website, certain technical information may be collected automatically, including:

  • IP address;
  • browser and device information;
  • operating system;
  • referring pages;
  • pages visited;
  • approximate location;
  • timestamps; and
  • information about how the website is used.

This information may be collected through services such as Google Analytics and Cloudflare.

Communications

If you contact us for customer support or another enquiry, we may collect the information contained in your message and any information reasonably necessary to respond to your request.

Cyprus Company Registry Data

Company names, registration numbers, registered addresses and officials, sourced from the public Cyprus company registry and cross-checked against the applicable official EU VAT validation system. For the large majority of companies this is not personal data. In the small number of cases where a VAT record belongs to a sole trader rather than a company, it may identify a natural person; see the deletion section below.

3. How We Use Your Information

We use personal information to:

  • create and manage customer accounts;
  • provide VAT number lookup and related digital information services;
  • process and fulfil purchases;
  • provide invoices and maintain billing records;
  • communicate with customers about orders and accounts;
  • provide customer support;
  • maintain the security and integrity of our website;
  • prevent fraud, abuse and unauthorised access;
  • understand how our website is used and improve our services;
  • comply with tax, accounting, legal and regulatory obligations; and
  • establish, exercise or defend legal claims where necessary.

We do not use customer information to provide legal, financial or credit decisions about individuals.

4. Legal Bases for Processing

Where the EU General Data Protection Regulation or similar laws apply, we process personal information on one or more of the following legal bases.

Performance of a contract: where processing is necessary to create your account, process your order, deliver purchased information or provide customer support.

Legal obligations: where we must retain or process information for tax, accounting, regulatory or other legal requirements.

Legitimate interests: where processing is reasonably necessary to operate, secure and improve our website, prevent fraud, maintain records and protect our business and users.

Consent: where required, particularly for non-essential cookies, analytics technologies or other processing for which consent is required by law. You may withdraw consent at any time where processing is based on consent.

5. Cookies and Analytics

We use cookies and similar technologies to operate and secure the website and understand how visitors use it.

Session cookie · keeps you signed in during a visit. Strictly necessary, no consent banner required.

Theme preference · stored in your browser (localStorage), remembers whether you last used light or dark mode. Never transmitted to us.

Google Analytics · used to obtain statistical information about website traffic and usage. Google Analytics may process information such as your device information, browser information, IP-related information and interactions with our website. For users in the European Economic Area and other jurisdictions where consent is required, non-essential analytics technologies will only be used after the appropriate consent has been obtained. You may withdraw or change your cookie preferences through the cookie settings available on our website.

Cloudflare · used for website security, performance, content delivery and protection against malicious traffic. Cloudflare may process technical information such as IP addresses, browser information, security events and request logs as necessary to provide these services.

Checkout cookies · Paddle sets its own cookies during payment, governed by its own privacy policy.

6. Paddle

We use Paddle to process payments and act as Merchant of Record for purchases made through our website.

When you make a purchase, Paddle may collect and process personal and payment information required to complete the transaction, calculate taxes, prevent fraud, provide customer support and comply with its legal obligations.

Paddle processes certain information under its own privacy policy and may act as an independent data controller in relation to payment transactions. We may receive relevant transaction and customer information from Paddle where necessary to fulfil your order and manage our relationship with you.

7. How We Share Information

We may share personal information with service providers where reasonably necessary to operate our business. These currently include:

  • Paddle, for payments, billing and Merchant of Record services;
  • Google Analytics, for website analytics;
  • Cloudflare, for website security, performance and infrastructure; and
  • Resend, for delivery of transactional email (sign-in links, receipts).

We may also disclose personal information:

  • where required by law or valid legal process;
  • to protect our rights, users or systems;
  • in connection with fraud or security investigations; or
  • as part of a merger, acquisition, reorganisation or sale of all or part of our business, subject to applicable legal protections.

We do not sell personal information for monetary consideration. Where applicable privacy laws treat certain analytics or advertising-related disclosures as a "sale" or "sharing" of personal information, we will provide any legally required opt-out mechanisms.

8. International Data Transfers

Lumio Data LLC is established in the United States, and some of our service providers operate internationally. As a result, personal information may be processed in the United States or other countries outside your country of residence.

Where required under applicable European data protection law, international transfers will be made using recognised legal safeguards, such as adequacy decisions, approved contractual safeguards or other lawful transfer mechanisms.

9. Data Retention

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected. The retention period will depend on factors including:

  • how long your account remains active;
  • whether the information is required to provide our services;
  • applicable tax, accounting and record-keeping requirements;
  • fraud and security requirements; and
  • the need to establish, exercise or defend legal claims.

When information is no longer reasonably required, we will delete, anonymise or securely dispose of it, subject to applicable legal requirements.

10. Your Privacy Rights

Depending on where you live, you may have rights relating to your personal information.

European Economic Area, United Kingdom and Similar Jurisdictions

These rights may include the right to:

  • access your personal information;
  • correct inaccurate information;
  • request deletion of your information;
  • restrict certain processing;
  • object to certain processing;
  • receive certain information in a portable format;
  • withdraw consent where processing relies on consent; and
  • lodge a complaint with the relevant data protection authority.

These rights are subject to exceptions provided by applicable law.

United States

Residents of certain U.S. states may have rights under applicable state privacy laws, including rights to:

  • know or access personal information collected about them;
  • request correction;
  • request deletion;
  • obtain a copy of certain information;
  • opt out of certain sales, sharing or targeted advertising; and
  • exercise privacy rights without unlawful discrimination.

These rights apply only where the relevant law applies to Lumio Data LLC and to the particular processing activity.

Cyprus Company Registry Data · Right to Deletion

If you are a sole trader and believe a company record identifies you personally, you can ask us to remove it. Email us at info@cyprusvatnumber.com with the company name or registration number. Once actioned, the page returns a removal notice instead of the record. You can also ask us to delete your buyer account or waitlist sign-up at any time, using the same address.

11. Exercising Your Rights

To exercise a privacy right or ask a question about your personal information, contact: info@cyprusvatnumber.com.

Please provide enough information for us to identify your account and understand your request. We may request reasonable information to verify your identity before completing certain requests. We will respond within the timeframe required by applicable law.

12. Security

We use reasonable administrative, organisational and technical measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or misuse. No internet-based service or storage system can guarantee absolute security.

13. Children's Privacy

cyprusvatnumber.com is intended for adults and business users and is not directed to children under 18. We do not knowingly collect personal information from children for the purpose of providing our services. If you believe that a child has provided personal information to us, please contact us so that we can review and, where appropriate, delete the information.

14. Third-Party Links

Our website may contain links to external websites, government databases or other third-party services. We are not responsible for the privacy practices of those third parties. Their own privacy policies apply when you interact with their services.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, service providers or legal obligations. The updated version will be published on cyprusvatnumber.com with a revised "Last updated" date.

16. Contact

For privacy questions or requests, contact: Lumio Data LLC, 1021 E Lincolnway 10560, Cheyenne, WY 82001, United States. Email: info@cyprusvatnumber.com.