Privacy policy

Last updated 29 August 2026

This explains what we collect, why, and what you can ask us to do about it. It is short because we collect very little.

Who is responsible

ASC-Pilot, registered in Cyprus at Agiou Sergiou, 8048 Paphos, is the data controller. Write to adam.kamel.faouzi@gmail.com about anything on this page.

This website

This site sets no cookies, runs no analytics, and loads no trackers. The fonts are served from this site rather than from a font host, so opening the page does not tell a third party you were here.

The contact form does not send anything to us on its own. It opens your own email application with the message written out, and nothing leaves your device until you press send there.

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the IP address and browser details of visitors in order to serve pages and block attacks. That is their processing, described in their own privacy documentation.

When you get in touch

If you email us, we hold your message and your address for as long as it takes to deal with it, and afterwards as a record of what was agreed.

When you become a customer

We hold what we need to build and run your site and to invoice you:

• your name and contact details;
• your business name, address, opening hours, and similar public details;
• the text and images you give us for your page;
• a record of your subscription, its amount, and its status.

We never see your card number. Card payments are handled by Stripe, which is the processor for that data. We receive only confirmation that a payment succeeded or failed, and the last four digits.

If we hold information about your business

Most of the businesses in our records have never spoken to us. We look for local businesses without a website, build one as a draft, and only then get in touch. So we may hold information about your business before you have heard of us. The GDPR calls this data obtained from a source other than you, and it requires us to tell you the following.

What we hold. Your business name, address, category, opening hours, telephone number, and any email address published for it. Where that address carries a person's name, it is personal data about that person.

Where it came from. Open map data from the Overture Maps Foundation and OpenStreetMap, and information the business has published itself, such as its own website or social media page. We do not buy lists and we do not guess at addresses.

Why we hold it. To work out whether a business already has a website, to build a draft one, and to offer it. Our lawful basis is legitimate interests: the offer concerns that specific business, it is relevant to it commercially, and we write once rather than repeatedly.

How long we keep it. A business that does not reply is deleted within twelve months. If you ask us not to contact you, we keep your email address on a suppression list for as long as we operate. That is deliberate, and it is the only way to be certain we never contact you again by mistake if your business turns up in a later search.

Telling us to stop. Email adam.kamel.faouzi@gmail.com and we will stop, and delete what we hold apart from the suppression entry above. You do not need to give a reason and we will not ask you to confirm. Every message we send also carries a link that does the same thing in one click. An objection to direct marketing is absolute: we act on it, we do not weigh it against anything.

Why we are allowed to hold it

• To perform our contract with you — building, hosting, and billing your site.
• Legal obligation — keeping invoices and tax records for as long as Cypriot law requires.
• Legitimate interests — answering enquiries, keeping records of what was agreed, keeping the service secure, and offering a website to a business that does not have one, as described above.

Who else sees it

We use a small number of service providers, each of which sees only what it needs:

• Stripe — payments and subscriptions.
• Cloudflare — hosting and delivery of this site.
• Our email and hosting providers — correspondence and the sites we run for customers.

We do not sell your data, and we do not share it for anyone else's advertising.

How long we keep it

Enquiries that do not turn into work are deleted within twelve months. Customer records are kept while you are a customer and for as long afterwards as tax and accounting law requires. Preview sites that are never taken up are deleted. Records about businesses we have not spoken to are covered separately above.

Your rights

Under the GDPR you can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to how we use it, or ask for it in a portable format. Email adam.kamel.faouzi@gmail.com and we will reply within one month.

If you are not satisfied with our answer, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus.