Privacy Policy
This policy explains what personal data Three Button Trading Ltd collects, why, and what rights you have. We keep data collection to the minimum needed to run our business and respond to you.
1 — Who we are
The data controller is THREE BUTTON TRADING LTD (Reg. HE 426226), a company registered in Cyprus, based in Larnaca.
For any privacy question or request, contact: andreas@3buttontrading.com.
2 — What we collect
When you contact us via WhatsApp or email: your name, phone number, email address and the content of your message.
If you become a website, software or hosting customer: the account and project details needed to deliver the service, plus — where we host or operate a system on your behalf — the data your own end-users submit to that system. For that data we act as a processor on your instructions, under a separate agreement.
Automatically, for security and reliability: server access logs (IP address, browser type, pages requested, timestamps).
We do not use advertising or analytics tracking cookies. The only cookie the site may set records your chosen language.
3 — Why we use it (legal basis)
To respond to your enquiry and provide a quote — our legitimate interest and steps taken at your request before entering a contract.
To deliver and support the services you engage us for — performance of a contract.
To keep our sites and servers secure — our legitimate interest.
Where the law requires consent, we ask for it and you can withdraw it at any time.
4 — Who we share it with
We do not sell your data. We share it only with service providers that help us operate, under contract and only as needed:
Hosting infrastructure (our own servers with Hetzner, in the EU); outbound email delivery (Amazon SES); and, when you choose to message us on WhatsApp, Meta Platforms, under their own terms.
We may disclose data if required by law.
5 — Where it is stored
Our servers and primary processors are located in the European Union / EEA. Where a provider processes data outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses.
6 — How long we keep it
Enquiry messages are kept only as long as needed to deal with your request and any follow-up, then deleted. Customer and contract records are kept for as long as required by Cyprus tax and company law. Server security logs are kept for a limited period and then rotated out.
7 — Your rights
Under the GDPR you can ask us to: access the data we hold about you, correct it, delete it, restrict or object to how we use it, and receive it in a portable format.
To exercise any of these, email andreas@3buttontrading.com. We respond within one month.
8 — Complaints
If you believe we have handled your data improperly, you can complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy). We would appreciate the chance to address your concern first.
9 — Changes
We may update this policy as our services change. The date at the top shows the latest version.
THREE BUTTON TRADING LTD · Reg. HE 426226 · Larnaca, Cyprus · andreas@3buttontrading.com