Privacy Policy

NMORE GROUP LTD ("we", "us", "our") values your privacy. This Privacy Policy explains how we collect, use, store and protect personal data when you visit nmore.eu and its landing pages ("the Site"), in line with the EU General Data Protection Regulation (GDPR) 2016/679 and the ePrivacy rules as applied in the Republic of Cyprus. Our main website, www.nmore.com, has its own privacy policy.

1. Who we are

The controller of your personal data is NMORE GROUP LTD, a limited company registered in the Republic of Cyprus with registration number HE 355502, whose registered address is 159 Leontiou A Street, Maryvonne Building, Office 202, 3022 Limassol, Cyprus.

Our Data Protection Officer (DPO) is Nikita Snigirev, who can be contacted at [email protected].

2. What data we collect

• Enquiry data - when you use the contact form: your first name, surname (optional), email address, phone number (optional), your message, the language and address of the page you sent it from, and the date and time.
• Technical and security data - when you visit the Site, our servers and our security and content delivery provider (Cloudflare) process your IP address, browser type, operating system, requested pages and referring address, to deliver the pages and protect the Site against attacks. For spam protection we store only a one-way hash of your IP address with an enquiry.
• Consent records - when you make a choice in the cookie banner: a random consent ID, your choices, the policy version, the date and time, a one-way hash of your IP address and your browser's user agent, so that we can prove what you agreed to.
• Analytics and marketing data - only if you allow these cookie categories and only if such tools are switched on: pseudonymous identifiers and usage data collected by the provider concerned (for example Google Analytics). See our Cookie Policy.

We do not ask for special categories of data. Please do not include such data in your message.

3. Why we use your data and on what legal basis

• To answer your enquiry and, where you ask for it, to prepare a proposal - steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f)).
• To keep the Site secure, prevent spam and abuse, and fix errors - our legitimate interest in operating a safe website (Art. 6(1)(f)).
• To keep proof of your cookie choices - our legal obligation to be able to demonstrate consent (Art. 6(1)(c) and Art. 7(1)).
• To measure how the Site is used and how our advertising performs - only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
• To send you marketing communications - only where you have given explicit consent. We do not send unsolicited marketing or spam.

4. How long we keep it

• Enquiries: up to 24 months after receipt, then deleted automatically, unless they lead to a contract, in which case our client records apply.
• Consent records: up to 36 months, then deleted automatically.
• Email delivery logs: up to 12 months.
• Server and security logs: for as long as strictly necessary for security and troubleshooting, after which they are deleted during routine maintenance.

5. Who we share it with

We do not sell your data. We share it only with service providers who process it on our behalf and under our instructions:

• Cloudflare, Inc. - content delivery and security for the Site;
• SMTP2GO - delivery of the emails sent by the Site, such as enquiry notifications to our team;
• Google - only if Google Analytics or Google advertising tools are switched on and you have consented to them.

Our office map is generated on our own server from OpenStreetMap data; your browser does not contact OpenStreetMap when you view the page.

We may share data with other companies in our group where this is needed to answer your enquiry, and with authorities where the law requires it, for example to comply with a court order.

6. International transfers

Some of our providers are based, or have staff, outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission (for example for New Zealand, or for US companies certified under the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

7. Your rights

Under the GDPR you have the right to:

• be informed about how we use your personal data;
• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted ("right to be forgotten");
• restrict the processing of your data;
• data portability;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting processing carried out before the withdrawal - for cookies, use "Cookie settings" at the bottom of every page.

To exercise these rights, email [email protected]. We will reply within one month. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy).

8. Cookies

The Site uses only strictly necessary cookies unless you agree to more. Details of every cookie, and the controls to change your choice, are in our Cookie Policy.

9. Security

We protect personal data with appropriate technical and organisational measures, including encrypted connections (HTTPS), access restricted to authorised staff with two-factor authentication, and regular updates of our systems.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always published on this page with the date of the last update. Where changes are significant, we will make this clear on the Site.