Privacy Policy

In short

We're Skipaki — a skip-hire service in Cyprus. When you book a skip we keep your name, phone, email, address and order details so we can deliver and collect the container, send you an invoice, and answer your questions. We don't sell your data and we don't pass it to anyone outside the contractors needed to run the service.

Who we are

Skipaki ("we", "us") is the data controller for personal data collected through skipaki.com. We operate from Limassol, Cyprus.

Privacy contact: privacy@skipaki.com

What we collect

When you book a skip or contact us we collect:

• Contact details — name, phone number, email
• Delivery details — address, latitude/longitude, optional notes about the site
• Order details — skip size, waste type, dates, price
• Payment method (we do NOT store full card details — payment is processed by the operator on delivery)
• Messages you send via the contact form
• Technical data automatically: IP address, browser type, pages visited (see Cookies)

Why we collect it

• To deliver and collect the skip you booked
• To send order confirmations and invoices
• To answer your questions through the contact form
• To meet our legal obligations (tax records, waste-carrier licensing)
• To improve the site based on anonymous usage stats

Legal basis (GDPR Art. 6)

• Performance of a contract — when you book a skip we need your details to deliver it
• Legal obligation — invoices must be kept for tax purposes
• Legitimate interest — basic site analytics to keep skipaki.com working well
• Consent — for any non-essential cookies and marketing

Who processes your data on our behalf

We use a small set of established service providers to run skipaki.com. Each is bound by a data processing agreement and uses appropriate safeguards.

• Supabase — Database and authentication — hosted on AWS in Dublin (EU).
• Vercel — Website hosting — Frankfurt (EU).
• Google Maps — Google Maps — geocoding your delivery address. Transfers data to the US under Standard Contractual Clauses and the EU-US Data Privacy Framework.
• MailerSend — Sending transactional emails (order confirmations, invoices).

How long we keep it

Order records and invoices are kept for 7 years for tax purposes. Contact-form messages: 12 months. Anonymous analytics: 14 months. You can request earlier deletion of data not under a legal hold — see your rights below.

Your rights

Under GDPR you can:

• Access — request a copy of the personal data we hold about you
• Rectify — correct inaccurate details
• Erase — ask us to delete data we are not required to keep
• Restrict — limit how we use your data
• Object — to certain processing based on legitimate interest
• Portability — receive your data in a machine-readable format

To exercise any of these rights email privacy@skipaki.com. We respond within one month.

Cookies

We use cookies to keep you logged in, remember your language and theme, and (with your consent) measure how the site is used. Full cookie list.

Changes to this policy

We update this policy when the site changes. Material changes are noted at the top with a new date.

Complaints

If you believe we have mishandled your data you can complain to the Cyprus Commissioner for Personal Data Protection at dataprotection.gov.cy.