Privacy Policy

1. Overview

This Privacy Policy explains how SYNERJOY (“we”) collects and uses the personal data of visitors to synerjoy.cy. By submitting a booking or contact form you confirm your agreement with this Policy.

The data controller is SYNERJOY LTD, a company registered in the Republic of Cyprus, registration number HE478906, address: Aisopou 1-2, 3100, Limassol, Cyprus, email: info@synerjoy.cy. We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Cyprus Law 125(I)/2018.

2. Data we collect

• first and last name;
• phone number;
• email address;
• details of the selected lesson, faculty, teacher, date and time, and any comment you provide;
• when you pay on the site — the amount, description of the service, number of places, payment status, the payment provider's transaction number, refund details, and the date and version of the Terms you accepted. We do not receive or store your card details: you enter them only on the secure page of the payment provider Viva.com;
• if your phone number needs to be confirmed when booking — the fact of confirmation (the code is sent by SMS);
• if you agreed to receive news and offers — a record of that consent;
• technical data needed to protect the site from automated requests (Cloudflare Turnstile, IP address).

3. Purposes

• booking trial and regular lessons and events;
• taking payments on the site and issuing refunds;
• contacting you about bookings, schedule and studies;
• maintaining the client base and tracking the learning process;
• accounting and tax records;
• protecting the site from abuse, handling complaints and payment disputes.

Legal bases (Art. 6 GDPR): entering into and performing a contract with you — for bookings, payments and lessons; legal obligation — for payment records; our legitimate interest — for protecting the site and handling disputes; your consent — for news and offers.

4. Who we share data with

To arrange and track lessons, data is passed to Altegio, the school’s CRM; phone confirmation SMS codes are also sent through it. Booking enquiries may later also be passed to a customer relationship management system (Kommo).

Data is also received by:

• Viva.com — the payment provider: the amount, description of the service, your name and contact details needed to process the payment and any refund. Viva.com processes card details itself, under its own privacy policy;
• Resend — the email service that sends booking confirmations and tickets;
• Telegram — notifications to the school's administrators about new enquiries;
• public authorities — where required by law.

Some of these services may process data outside the European Economic Area; such transfers rely on a European Commission adequacy decision or the EU standard contractual clauses.

We do not sell your data or share it with third parties for their own purposes.

5. Storage and security

Data is kept for as long as necessary for the stated purposes and to meet legal requirements. Payment and refund records are kept for the period required by Cyprus tax and accounting law. We apply reasonable technical and organisational measures to protect it against unauthorised access, alteration and deletion.

6. Cookies

The site uses only strictly necessary cookies, including those set by Cloudflare protection. No analytics or advertising cookies are used. Should they be added in future, we will ask for your separate consent. The Viva.com payment page uses its own cookies under Viva.com's rules.

7. Your rights

You may request access to your personal data, its correction or deletion, restrict its processing, and withdraw consent previously given. To do so, write to the address below.

You may also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

8. Contact

For questions about the processing of personal data, contact us at the email shown in the site footer or at info@synerjoy.cy.

9. Changes

We may update this Policy. The current version is always available on this page; the last-updated date is shown at the top.