Privacy Policy

Welcome to Fixaro.

Fixaro (“Fixaro,” “we,” “us,” or “our”) operates an online marketplace accessible at https://fixaro.cy (the “Platform”), connecting customers seeking services with independent professionals and businesses operating in Cyprus.

We respect your privacy and are committed to protecting your personal information.

This Privacy Policy explains how we collect, use, disclose, retain, and protect personal data when you visit our website, create an account, publish a service, submit a request, communicate with other users, or otherwise interact with Fixaro.

This Policy is intended to provide information required under the European Union General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Cyprus data protection legislation.

It applies to customers, professionals, business representatives, website visitors, and other individuals whose personal data we process in connection with the Platform.

By using Fixaro, you acknowledge that this Privacy Policy has been made available to you. Where consent is legally required for specific processing activities, we will request it separately.

For personal data processed in connection with the operation of the Fixaro Platform, the data controller is:

Trading Name: Fixaro

Country: Republic of Cyprus

Website: https://fixaro.cy

Privacy Contact: support@fixaro.cy

The data controller determines the purposes and means of processing personal information.

Independent professionals using Fixaro may also act as separate data controllers when they process customer information for their own business purposes, including providing services, issuing invoices, or maintaining business records.

We may collect different categories of personal data depending on how you interact with Fixaro.

3.1 Account and Registration Information

When you create an account, we may collect:

• Full name.
• Email address.
• Telephone number.
• City or general location.
• Account type.
• Login and authentication information.
• Account preferences.
• Registration date and account status.

Where you sign in using a third-party authentication provider, such as Google, we may receive information authorized through that provider, such as your name, email address, and profile picture.

We do not receive your Google account password.

3.2 Professional and Business Information

Professionals and businesses may provide additional information, including:

• Business or trading name.
• Company registration number.
• Business contact information.
• Business address.
• Professional qualifications.
• Licenses and certifications.
• Services offered.
• Areas served.
• Working hours and availability.
• Professional biography.
• Portfolio photographs.
• Service descriptions and pricing.
• Verification status.

Certain information may be displayed publicly as part of a professional profile.

3.3 Identity and Business Verification Data

Where verification is required, we may request:

• Identification documents.
• Company registration certificates.
• Proof of business address.
• Professional licenses.
• Supporting verification documentation.

Verification documents are used for identity checks, business verification, fraud prevention, and compliance purposes.

They are not intended to be publicly displayed.

Access to these documents should be restricted to authorized personnel and service providers who require access for legitimate verification purposes.

3.4 Customer Requests and Booking Information

When customers submit service requests or booking requests, we may process:

• Requested service category.
• Description of the required work.
• Service location.
• Preferred date or time.
• Urgency.
• Selected service package.
• Relevant photographs or attachments.
• Submitted quotations.
• Booking or request status.
• Details shared with the selected professional.

Certain request information may be shared with eligible professionals so they can evaluate and respond to the request.

3.5 Messages and Communications

When users communicate through Fixaro, we may process:

• Message content.
• Sender and recipient identifiers.
• Message timestamps.
• Attachments.
• Delivery and read status, where available.
• Reports of abusive or suspicious communications.

We may also retain communications sent to our support team.

3.6 Location Information

We may process location information provided by users, including:

• Selected city.
• Business location.
• Service address.
• Map coordinates.
• Areas served by professionals.

Where the Platform requests access to a device's location, permission will be requested through the relevant browser or device controls.

You may withdraw device location permission through your browser or device settings.

Some location-based features may become unavailable if location access is disabled.

3.7 Technical and Usage Information

When you access Fixaro, we may automatically collect technical information such as:

• IP address.
• Browser type and version.
• Device type.
• Operating system.
• Pages visited.
• Date and time of access.
• Login activity.
• Error logs.
• Security events.
• Session identifiers.

This information may be necessary for Platform operation, security, troubleshooting, and performance monitoring.

3.8 Payment and Subscription Information

Where Professionals purchase subscriptions, we may process:

• Subscription plan.
• Billing status.
• Transaction identifiers.
• Payment dates.
• Amounts charged.
• Billing information.
• Subscription renewal or cancellation status.

Payments may be processed by an external payment service provider.

Fixaro does not need to store complete payment card numbers where payment information is collected and processed directly by the payment provider.

Additional information about payment processing should be provided through the relevant provider's privacy notice.

We may collect personal information:

Directly from you: When you register, create a professional profile, submit requests, upload content, contact support, or use Platform features.

Automatically: Through technical systems, server logs, cookies, and similar technologies.

From other users: When a customer submits information about a service request or a professional provides information concerning a booking.

From third-party services: Such as authentication providers, payment processors, or verification services.

From publicly available sources: Where reasonably necessary and lawful for business verification or fraud prevention.

We aim to collect only personal information that is relevant and necessary for legitimate Platform purposes.

We process personal data only where a valid legal basis exists under the GDPR.

5.1 Performance of a Contract

We may process personal data to:

• Create and manage accounts.
• Provide access to Platform features.
• Publish professional profiles.
• Process service and booking requests.
• Facilitate quotations and communication.
• Manage subscriptions.
• Provide customer support related to our services.

5.2 Legitimate Interests

Where appropriate, we may process personal information for legitimate interests, including:

• Preventing fraud and misuse.
• Protecting Platform security.
• Investigating reported misconduct.
• Improving functionality.
• Detecting technical errors.
• Maintaining service reliability.
• Protecting our legal interests.

Before relying on legitimate interests, we must assess whether those interests are overridden by individuals' rights and freedoms.

5.3 Legal Obligations

We may process personal information where necessary to comply with:

• Tax and accounting requirements.
• Applicable consumer protection legislation.
• Lawful requests from public authorities.
• Regulatory obligations.
• Other applicable legal requirements.

5.4 Consent

Where required, we may request consent for:

• Non-essential cookies.
• Certain analytics technologies.
• Optional marketing communications.
• Other activities requiring consent under applicable law.

Consent may be withdrawn at any time without affecting the lawfulness of processing performed before withdrawal.

Professional profiles are designed to help customers discover service providers.

Depending on the information provided and Platform settings, publicly visible information may include:

• Business name.
• Profile photograph or logo.
• Service categories.
• Professional biography.
• Portfolio images.
• Service descriptions.
• Pricing.
• General location.
• Qualifications and verification badges.
• Availability.
• Reviews and ratings, where enabled.

Professionals should avoid uploading sensitive personal information or documents that are not intended for public disclosure.

Fixaro may restrict or remove content where necessary to protect privacy, comply with applicable law, or enforce Platform rules.

Fixaro facilitates the exchange of information necessary to arrange services.

When a customer submits a request, relevant request details may be made available to eligible professionals.

When a professional submits an offer, the customer may receive the professional's business information and quotation details.

Where a customer accepts an offer or initiates a booking, additional information may be exchanged to facilitate direct communication and service arrangements.

Users must not misuse personal information obtained through the Platform.

Professionals must not use customer contact details for unrelated advertising or marketing without an appropriate legal basis.

Fixaro does not sell customer contact information to professionals for unrestricted marketing purposes.

We may share personal information with trusted third parties where necessary to operate Fixaro.

Depending on the systems actually used, these may include:

8.1 Hosting and Infrastructure Providers

Providers responsible for website hosting, databases, cloud infrastructure, and file storage.

8.2 Authentication Providers

Providers facilitating secure login and account authentication.

8.3 Payment Processors

Payment providers responsible for processing subscription payments and related transactions.

8.4 Mapping and Location Providers

Services used to display maps, calculate locations, or provide navigation functionality.

8.5 Communication Providers

Services responsible for transactional emails, notifications, and other communications.

8.6 Security and Technical Service Providers

Providers assisting with fraud prevention, system monitoring, backups, and technical maintenance.

8.7 Legal and Regulatory Authorities

We may disclose personal information where required by applicable law, court orders, or valid legal processes.

We require service providers acting as processors to handle personal information in accordance with applicable data protection obligations.

For reviewBefore publication, Fixaro must identify the actual categories and, where appropriate, names of the providers it uses.

Some technology providers may process or store personal information outside Cyprus or the European Economic Area.

Where personal information is transferred outside the EEA, we will use a lawful transfer mechanism required by the GDPR.

Depending on the circumstances, these safeguards may include:

• European Commission adequacy decisions.
• Standard Contractual Clauses.
• Additional contractual, organizational, or technical safeguards.

Where required, we will assess the risks associated with international transfers.

Users may contact us for further information about applicable safeguards.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, security, and contractual requirements.

Retention periods depend on the type of information and applicable legal obligations.

Examples include:

Account information: Generally retained while an account remains active and for a defined period following closure where necessary.

Professional verification records: Retained only for the period necessary to support verification, fraud prevention, and applicable legal obligations.

Booking and service request records: Retained according to operational needs and applicable legal requirements.

Messages: Retained according to a documented retention schedule, taking account of service functionality, safety, and dispute resolution needs.

Payment and billing records: Retained for periods required by applicable accounting and tax legislation.

Technical and security logs: Retained for a limited period appropriate to their security or operational purpose.

When personal information is no longer required, we will delete, anonymize, or otherwise securely dispose of it, unless continued retention is legally required.

For reviewFixaro must establish and disclose specific retention periods or sufficiently clear retention criteria before publishing this policy.

Fixaro may use cookies, local storage, and similar technologies.

These technologies may support:

• User authentication.
• Session management.
• Security.
• Language preferences.
• Website functionality.
• Performance monitoring.
• Analytics, where enabled.

Strictly necessary cookies may be used without consent where permitted by law.

Non-essential cookies and similar technologies requiring consent will not be activated before valid consent is obtained.

Users should be able to withdraw or modify their cookie preferences where applicable.

Further information should be provided through a separate Cookie Policy or detailed cookie notice identifying the actual technologies used.

Fixaro may send service-related communications, including:

• Account verification emails.
• Booking notifications.
• New service request alerts.
• Subscription updates.
• Security notifications.
• Important operational announcements.

These communications may be necessary for the performance of our services.

Promotional communications will be sent only where permitted by applicable law.

Where consent is required, users will be asked to provide it.

Users may unsubscribe from promotional communications using the available unsubscribe mechanism or by contacting us.

Unsubscribing from marketing does not necessarily prevent essential account or service communications.

We implement appropriate technical and organizational measures intended to protect personal information against unauthorized access, loss, alteration, disclosure, and destruction.

Depending on the systems involved, these measures may include:

• Encrypted connections.
• Access controls.
• Authentication protections.
• Restricted administrative permissions.
• Security monitoring.
• Backups.
• Secure infrastructure configurations.
• Periodic reviews of security measures.

No online service can guarantee absolute security.

Users should protect their login credentials and notify us promptly of suspected unauthorized access.

Where a personal data breach occurs, Fixaro will assess its obligations under the GDPR, including notification to the competent supervisory authority and affected individuals where legally required.

Fixaro may use automated systems to identify suspicious activity, spam, fraudulent requests, prohibited content, or potential violations of Platform rules.

These systems may examine relevant account activity, uploaded content, or other information necessary for security and abuse prevention.

Automated indicators may lead to additional verification or review.

Where decisions produce legal or similarly significant effects and fall within Article 22 GDPR, applicable safeguards and rights will be provided.

Users may contact Fixaro if they believe an automated restriction has been applied incorrectly.

Subject to applicable conditions and exceptions, individuals have the following rights:

15.1 Right of Access

You may request confirmation of whether we process your personal information and obtain access to that information.

15.2 Right to Rectification

You may request correction of inaccurate personal information.

15.3 Right to Erasure

You may request deletion of your personal information in circumstances recognized by the GDPR.

15.4 Right to Restrict Processing

You may request restrictions on certain processing activities where applicable.

15.5 Right to Data Portability

Where the relevant legal conditions are met, you may request personal information in a structured, commonly used, machine-readable format.

15.6 Right to Object

You may object to certain processing activities based on legitimate interests.

You may object at any time to processing of your personal information for direct marketing.

15.7 Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

15.8 Rights Relating to Automated Decision-Making

Where applicable, you have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, contact:

support@fixaro.cy

We will respond within the time limits established by the GDPR, generally within one month, subject to lawful extensions where applicable.

We may request reasonable information to verify your identity before fulfilling a request.

Users may request deletion of their Fixaro account by contacting our support team or using available account settings.

Upon receiving a valid deletion request, we will assess the personal information associated with the account.

Where deletion is required, we will remove or anonymize the relevant information.

Certain records may be retained where necessary to comply with legal obligations, establish or defend legal claims, prevent fraud, or fulfill another lawful purpose.

Account deletion does not necessarily remove information that another independent data controller is legally entitled or required to retain.

Fixaro is not intended for use by individuals under 18 years of age.

We do not knowingly offer accounts to children.

If we become aware that an account has been created by an individual who does not meet our eligibility requirements, we may take appropriate steps to restrict or close the account and address the associated personal information in accordance with applicable law.

Parents or guardians who believe a child has provided personal information may contact us.

The Platform may contain links to third-party websites or services.

These third parties operate independently and may have their own privacy policies.

Fixaro is not responsible for the privacy practices of independent third-party websites.

We encourage users to review the privacy policies of third parties before providing personal information.

If Fixaro undergoes a merger, acquisition, restructuring, or transfer of business assets, relevant personal information may be transferred where permitted by law.

Any such transfer will be subject to applicable data protection requirements.

Where required, affected individuals will be informed about changes to the identity of the data controller or the processing of their information.

If you have concerns about how Fixaro processes your personal information, please contact us first:

support@fixaro.cy

You also have the right to lodge a complaint with a competent data protection supervisory authority.

In Cyprus, the relevant supervisory authority is the:

Office of the Commissioner for Personal Data Protection

Republic of Cyprus

Website: https://www.dataprotection.gov.cy

You may also have the right to complain to another competent supervisory authority under applicable GDPR rules.

We may update this Privacy Policy to reflect changes in:

• Our services.
• Data processing activities.
• Technology providers.
• Security practices.
• Legal or regulatory requirements.

The updated version will be published on the Platform with a revised date.

Where changes are material, we will provide additional notice where appropriate or legally required.

Where new processing requires consent, we will obtain that consent before commencing the relevant activity.

For questions, concerns, or requests relating to this Privacy Policy or the processing of personal information, please contact:

Fixaro

Website: https://fixaro.cy

Email: support@fixaro.cy

Country: Republic of Cyprus