Privacy Notice
Last updated: 9 November 2026
1. Who we are
Merriway Ltd is the data controller for personal data processed through this website and business enquiries. Location: Limassol, Cyprus. For privacy enquiries or to exercise your rights, contact contact@merriway.eu or telephone +357 99 581768.
2. Personal data we process
When you contact us, we may process your name, business and contact details, the content of your enquiry and related correspondence. Where you become a client or a connected person of a client, additional information may be required for service delivery, identification, beneficial ownership verification, due diligence, tax, accounting, regulatory and anti-money-laundering obligations. Such information is collected through separately approved secure channels, not through this public website.
3. Purposes and lawful bases
- Responding to enquiries: our legitimate interests in communicating with prospective clients, or steps requested before entering a contract.
- Providing contracted services: performance of a contract where applicable.
- Compliance: applicable legal obligations, including professional, tax and AML requirements.
- Business administration and security: legitimate interests in maintaining records, securing our systems and managing legal claims, where appropriate.
Where consent is required for a particular activity, we will request it separately. Consent can be withdrawn without affecting processing carried out lawfully before withdrawal.
4. Sharing and service providers
We may disclose relevant information where necessary to professional advisers, banks, auditors, regulators, competent public authorities and service providers supporting our operations. Our website hosting provider is GoDaddy and our business email service is Microsoft 365. Their processing of information is subject to their applicable service arrangements, which we review as appropriate.
5. International transfers
Some service providers may process or access personal data outside the European Economic Area. Where the GDPR requires safeguards for an international transfer, we use an applicable transfer mechanism, such as an adequacy decision or standard contractual clauses, as appropriate to the actual processing arrangement.
6. Retention
We retain personal data only for as long as necessary for the purposes described above, including applicable statutory, professional, AML and tax record-keeping requirements and the establishment or defence of legal claims. Retention periods depend on the category of information and relevant legal obligations.
7. Your rights
Subject to applicable conditions and exceptions, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You may also withdraw consent where processing relies on consent. To exercise your rights, email contact@merriway.eu. You may lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.
8. Security
We apply appropriate technical and organisational measures designed to protect personal data, taking account of the nature of the information and the risks involved. No internet transmission can be guaranteed completely secure. Do not send passports, identity documents or sensitive KYC records to our general enquiry email unless a suitable secure process has been agreed.
9. Cookies and website technologies
This website is intended to operate without advertising or analytics cookies. Essential hosting and security technologies, including server logs, may be used to deliver and protect the website. If non-essential cookies or analytics are introduced, we will provide the required information and consent controls before enabling them.
10. Changes
We may update this notice when our services, systems or legal obligations change. The latest version will be available on this page.