Privacy policy

Last updated: 22/10/2026.

This policy explains what personal information Lexeko Estate collects through this website, why, who else handles it for us and what your rights are. We have written it to meet the EU General Data Protection Regulation (GDPR) and Cyprus Law 125(I)/2018, which applies it in Cyprus.

Who we are

The website is run by Lexeko Limited, a company registered in Cyprus, of 100 Spyrou Kyprianou, Lythrodontas 2565, Cyprus. Lexeko Limited is the controller of the personal information described here.

If you have any question about your information, write to us at enquiries@lexekoestate.com or call +357 99 599 469. We have not appointed a data protection officer, as the law does not require one for a business of our kind, so these are the right places to ask.

What we collect and why

When you send an enquiry about a wedding, christening, corporate or private event, an activity or an estate event, we collect your name, phone number, email address, the dates and number of guests you mention, and anything you write in the message. We use this only to answer you, to prepare a quote and, if you go ahead, to plan your event with you. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)).

When you ask us to keep you posted about an event whose dates are not yet set, we collect your name, phone number and email address and use them only to tell you about that event. The basis is your request (Article 6(1)(b)), and you can ask us to stop at any time.

When you buy entrance tickets, we collect your name, email address, phone number and the number and type of tickets. We give each ticket a number and a QR code, send them to you by email, and record when a ticket is used at the gate so it cannot be used twice. The basis is performing our contract with you (Article 6(1)(b)), and keeping sales records as Cyprus tax law requires (Article 6(1)(c)).

Card payments are taken by Stripe on its own secure page. We never see or store your card details. Stripe tells us that a payment has been made and gives us the name, email address and amount.

Like almost every website, our hosting provider records technical information when you visit, such as your IP address, browser type and the pages requested. This is used only to keep the site running and secure, and to look into faults or misuse. The basis is our legitimate interest in a working, secure website (Article 6(1)(f)).

We do not sell your information, we do not use it for advertising, and we do not send marketing emails unless you have asked us to.

Who handles your information for us

We use a small number of trusted providers, each bound by a data processing agreement and allowed to use your information only on our instructions:

• Vercel Inc., which hosts the website.
• Stripe Payments Europe Ltd, in Ireland, which processes card payments. Stripe is also a controller of some payment information in its own right, for example to prevent fraud, under its own privacy policy.
• Resend, Inc., which sends the emails from this website, such as your ticket confirmation and your enquiry to our inbox.
• Google Ireland Ltd, whose Google Workspace holds our email inbox, where your enquiries and our replies are kept.

Some of these providers are based in, or use staff and systems in, the United States. Where your information leaves the European Economic Area, it is protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

We may also share information where the law requires it, for example with the tax authorities or the police, and with professional advisers such as our accountants.

How long we keep it

• Enquiries that do not lead to a booking: up to two years from our last contact, then deleted.
• Enquiries that lead to a booking, and ticket sales: for as long as Cyprus tax and accounting law requires us to keep business records, currently six years.
• Website server logs: kept by our hosting provider for a short period, usually a few days, then deleted.

Cookies and similar technology

This website does not use advertising or analytics cookies, and it does not track you across other websites.

It keeps one small note in your browser for the length of your visit, so that the announcement of our next event is shown to you only once. Stripe's payment page uses its own cookies to process your payment and prevent fraud; these are set by Stripe on its own page, under Stripe's cookie policy. Staff who sign in to the ticket check at the gate use a sign-in cookie, which only applies to them.

Links to Google Maps open Google's own website, under Google's privacy policy.

Your rights

Under the GDPR you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your information, where we no longer need it or have no other legal reason to keep it;
• ask us to restrict how we use it, or object to our using it on the basis of our legitimate interests;
• ask for the information you gave us in a form you can take elsewhere;
• withdraw any consent you have given, at any time, without affecting what was done before.

To use any of these rights, write to enquiries@lexekoestate.com. We will answer within one month and will not charge you for it.

If you are unhappy with how we have handled your information, please tell us first so we can put it right. You also have the right to complain to the Office of the Commissioner for Personal Data Protection, 1 Iasonos Street, 1082 Nicosia, Cyprus (commissioner@dataprotection.gov.cy, www.dataprotection.gov.cy).

Children

Our forms and ticket sales are for adults. Children's tickets are bought by a parent or guardian, and we do not ask for any information about the children themselves.

Keeping it safe

Your information travels to us over an encrypted connection, is held by providers with strong security, and inside Lexeko is seen only by the people who need it to answer you or run your event.

Changes to this policy

If we change how we use personal information, we will update this page and the date at the top.