YOUR INFORMATION

Privacy, clearly explained

Updated 30 October 2026.

Who handles your information

Sumly LTD (HE498829) operates this website and handles general relocation enquiries. Impactify LTD (HE474043) supplies and receives payment for checkout packages and handles the associated customer, order and follow-up records. Each company is responsible for the purposes and processing it determines. Independent professionals act under their own data-protection and confidentiality duties for their accepted assignments; their own notice explains their processing. Use Contact us on About us for either company and select “Privacy request” as the subject. Impactify correspondence: Neofytou Nikolaidi & Theod. Kolokotroni, Onisiforou Center, 2nd Floor, 8011 Agios Theodoros, Paphos, Cyprus.

Enquiries and personal follow-up

The Contact us form sends your name, email, international phone, selected service, message and permission to handle the enquiry to our internal team mailbox through Resend. We use this to answer your request and take steps you ask for before a contract. Supplying contact details is necessary for a response; do not submit identity documents, bank details, legal evidence or other sensitive records here. We do not automatically send you an email or SMS. Staff follow up personally using your email or phone. Ordinary correspondence and administration also rely on our legitimate interests in managing enquiries and demonstrating what was agreed.

Package payments and orders

Checkout collects your name, email, phone, service choice, quantity, accepted scope, discount and any early-start request. Stripe hosts the payment page and processes the billing details, payment information and any company/tax details you supply. We do not receive or store your full card number or card security code. Stripe stores the order scope, customer contact, payment status and follow-up reference/target date as part of the session and order metadata. After confirmed payment our team is notified internally and will contact you within 2–3 days to arrange an introductory meeting. Processing needed to deliver the package is based on your contract; financial recordkeeping and applicable disclosure obligations rely on legal obligations.

Service providers and international processing

Our hosting provider Vercel processes request and security data such as IP address, browser information and technical logs. Resend delivers internal notifications to our team’s mailbox; the mailbox provider stores the resulting correspondence. Stripe processes payments and fraud/security checks under its own terms and privacy information, as well as providing the checkout service. Access is restricted to staff and service providers who need it for the stated purpose. We share necessary case information with a proposed professional only for the introduction or accepted assignment and use the agreed secure channel for confidential documents. Providers may process data outside Cyprus or the EEA. Where required, the applicable adequacy decision or contractual safeguards govern those transfers; ask us for the relevant information.

Technical protections and local tools

The form uses a short-lived signed token, an abuse-prevention field and server validation. Request data may be used for security, preventing misuse and investigating failures, based on our legitimate interests in protecting the service. Relocated does not currently create its own customer account or use a browser advertising profile. Locally hosted films and their posters do not send a professional brief to a stock-footage provider. Essential payment/hosting technology is described by the relevant provider; this website does not install marketing analytics or advertising trackers.

How long information is kept

Enquiry correspondence is kept while we handle the request and for a reasonable follow-up period. Our operating policy is to review unconverted enquiries after 12 months and remove information no longer needed. Accepted order, payment, cancellation and complaint records are kept for the accounting/tax retention period and the period needed to establish, exercise or defend a claim, with access limited to that purpose. The applicable duty, record type, contract completion and any active dispute determine the period; a deletion request is assessed against those requirements rather than automatically erasing financial evidence. Provider logs, delivery records and backups follow their retention settings and contractual schedules. Ask us for the period applicable to your record.

Your choices and requests

You may ask for access, correction, erasure, restriction and, where applicable, portability. You may object to processing based on legitimate interests and withdraw permission for optional processing without affecting processing already lawfully carried out. A contract or legal duty can require some records to remain. We do not make a solely automated decision that determines your legal or tax eligibility; the independent professional reviews that question. Send a non-confidential request through Contact us with “Privacy request” as the subject. We may need proportionate identity evidence through a secure channel. We normally respond within one month; if a permitted extension is necessary, we explain it. You may complain to the Cyprus Commissioner for Personal Data Protection or the competent authority in your country.