Legal

Privacy Policy

Last updated: May 2026

Topline Motors(“we”, “us”, “our”) is a vehicle dealership based in Cyprus. We are committed to protecting the personal information of everyone who interacts with our website. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over it.

This policy is written to comply with the EU General Data Protection Regulation (GDPR) and the Cyprus Personal Data Protection Law.

1. Who we are

We are Topline Motors, a registered vehicle dealership in Cyprus.

  • Registered name: To be completed
  • Registration number: To be completed
  • VAT number: To be completed
  • Registered address: To be completed

For any privacy-related questions, write to sales@toplinemotorscy.com.

2. What information we collect

Information you give us directly

When you use our contact form, message us on WhatsApp, or send us an email, you give us:

  • Your name
  • Your email address
  • Your phone number (if you provide it)
  • The contents of your message

We only collect this when you actively send it to us.

Information collected automatically

When you browse our website, our hosting provider collects standard technical information used for security and operational purposes, including your IP address, browser type, the pages you visit, and the date and time of your visit.

Cookies

We use a small number of cookies for essential site functions:

  • Language preference— remembers which language version of the site you've chosen.
  • Authentication session — keeps signed-in staff signed in (admin area only).

We do not currently use cookies for advertising or third-party tracking.

3. Why we collect this information

We use the information you provide to:

  • Respond to your enquiries about vehicles
  • Send you the information you request
  • Maintain records of communications for after-sale service
  • Operate and secure our website
  • Comply with legal obligations, including tax record keeping for completed sales

4. Legal basis for processing (GDPR Article 6)

We process personal data on the following legal bases:

  • Contract — when you ask us about a vehicle or enter into a transaction with us, processing your data is necessary to provide the service.
  • Legitimate interest — for operating and securing the website and keeping basic business records, where this does not override your rights.
  • Consent — for any optional communications you opt into. You can withdraw consent at any time.
  • Legal obligation — for tax, anti-money-laundering, and other regulatory record keeping.

5. Who we share your information with

We do not sell your personal information. We share it only with carefully selected service providers who help us operate the website and our business:

ProviderPurposeLocation
SupabaseDatabase hosting (vehicle listings, contact messages)Frankfurt, EU
VercelWebsite hosting and request routingEU / US
WhatsApp / MetaWhen you click our WhatsApp link, you communicate via Meta's services under their own privacy policy.Various

Each of these providers acts only on our instructions and is bound by appropriate data-protection terms.

6. International transfers

Some of our service providers are based outside the EU. When personal data is transferred outside the EU we rely on the European Commission's Standard Contractual Clauses or other approved safeguards so that your data is protected to GDPR standards.

7. How long we keep your information

  • Contact form messages — up to 24 months after our last contact with you, then deleted.
  • Records of completed sales — retained as required by Cyprus tax and accounting law (currently 7 years).
  • Server logs — typically 30 days.

8. Your rights

Under GDPR you have the following rights regarding your personal data:

  • Access — request a copy of the data we hold about you.
  • Rectification — ask us to correct any data that is wrong.
  • Erasure — ask us to delete your data, subject to our legal obligations.
  • Restriction — ask us to limit how we use your data.
  • Portability — request a copy of your data in a portable format.
  • Objection — object to our processing of your data.
  • Withdraw consent — for any processing we do on the basis of consent.

To exercise any of these rights, email us at sales@toplinemotorscy.com with the subject line “Data Protection Request”. We will respond within one month.

If you are not satisfied with our response, you have the right to complain to the Cyprus Office of the Commissioner for Personal Data Protection at dataprotection.gov.cy.

9. Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted database storage, and access limited to authorised staff. No system is perfectly secure, but we take this responsibility seriously.

10. Children's data

Our website is not directed at children under 16 and we do not knowingly collect data from them. If you believe we have inadvertently collected such data, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do we will update the “Last updated” date at the top. Significant changes will be highlighted on the site.

12. Contact us

For any questions about this policy or about how we handle your personal information, contact us at sales@toplinemotorscy.com or write to us at our registered address (see Section 1).