Privacy Policy

This policy explains what personal data OnAir Cyprus collects when you book or contact us, why we collect it, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Cyprus data protection law.

01Who we are

OnAir Cyprus ("we", "us", "our") is the trading name under which Pinkmanta Consulting Ltd operates a podcast and video recording studio in Paphos, Cyprus, and the website at onaircyprus.com. For the purposes of GDPR, Pinkmanta Consulting Ltd is the data controller of the personal data described in this policy.

02What data we collect

We only collect what we need to run a booking and stay in touch about your session:

• Booking details you enter yourself: your name, email address, phone number, and any notes or messages you add when you request a session.
• Session information: the date, time, and type of session you book (audio or video).
• Contact history: messages you send us by email or WhatsApp, and our replies.
• Marketing consent: if you tick the optional consent box, we record that you agreed to receive occasional updates.
• Technical data: basic information your browser shares when you visit the site (such as IP address and pages viewed), handled through cookies as described in section 7.

We do not ask for, and you should not send us, special-category data (such as health, political, or biometric information). We do not knowingly collect data from anyone under 16.

03Why we use it, and our lawful basis

• To manage your booking (confirm your slot, arrange access, contact you about your session). Lawful basis: performance of a contract with you.
• To respond to your enquiries by email or WhatsApp. Lawful basis: our legitimate interest in answering people who contact us, or taking steps at your request before a booking.
• To send occasional marketing (studio news, offers). Lawful basis: your consent, which you give by ticking the box and can withdraw at any time.
• To keep proper business and tax records. Lawful basis: compliance with a legal obligation under Cyprus law.

04Who we share it with

We do not sell your personal data. We share it only with service providers who help us run the studio, and only as far as they need it:

• HighLevel / LeadConnector hosts our website, booking calendar, and contact records. Your booking data is stored on their platform on our behalf as a processor.
• Google (Google Workspace and Google Calendar) for our email and to schedule confirmed sessions.
• Meta (WhatsApp) if you choose to message us there.
• Our accountant or bookkeeping provider, for invoicing and keeping proper business records.

Some of these providers may process data outside the European Economic Area. Where they do, they rely on safeguards approved under GDPR, such as the European Commission's Standard Contractual Clauses.

05How long we keep it

• Booking and contact records: for as long as needed to serve you, and up to 24 months after your last session, so we can handle follow-ups and repeat bookings.
• Invoicing and accounting records: for the period required by Cyprus tax law (generally 6 years).
• Marketing contacts: until you unsubscribe or withdraw consent, after which we stop sending and remove you from the marketing list.

06Your recordings

The audio and video recorded during your session are your content. We do not publish or reuse your recordings without your permission. How recordings are handled and owned is set out in our Terms of Service.

07Cookies

Our website uses a small number of cookies. Essential cookies make the site and the booking calendar work. We may also use analytics cookies to understand how the site is used so we can improve it. You can control or block cookies in your browser settings; blocking essential cookies may stop the booking form from working.

08Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data erased where there is no ongoing reason to keep it.
• Restrict or object to how we use your data.
• Receive your data in a portable format.
• Withdraw marketing consent at any time, without affecting anything done before you withdrew it.

To exercise any of these, email us at [email protected]. We will respond within one month.

If you believe we have not handled your data properly, you can complain to the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy).

09Changes to this policy

We may update this policy as the studio grows or the law changes. The date at the top shows when it was last revised. Significant changes will be posted on this page.

Questions about this policy or your data? Email [email protected].