Privacy policy

Piano Tunings Cy is a piano tuning, repair, restoration and transport business operated by Kleanthis Christoforou, based in Limassol, Cyprus. For the purposes of the General Data Protection Regulation (EU) 2016/679, Piano Tunings Cy is the data controller for the personal data described here.

If you have any question about this policy or about the data we hold, contact us at info@pianotuningscy.com or on +357 99 405612.

When you submit an enquiry or booking form we collect your name, phone number, city or area, the service you are interested in, and optionally your email address and any message you write. If you are booking we may also ask what type of piano you own and when it was last tuned.

We collect this for one reason: to respond to your enquiry, give you an accurate price, and carry out the work. The lawful basis is your consent when you submit the form, and thereafter the performance of a contract if you go ahead with the work.

We do not buy personal data, we do not sell it, and we do not share it with anyone for marketing.

We use Plausible Analytics to understand how many people visit the site and which pages they read. Plausible does not use cookies, does not collect or store any personal data, and does not track people across websites or over time. All data is aggregated and cannot be used to identify you.

Because no personal data is processed and no cookies are set, this requires no consent banner. Full details are published at plausible.io/data-policy.

The chat window on this site is an automated AI assistant, not Kleanthis. It answers questions about our services, prices and coverage using only the information published on this website. It cannot see the diary or book anything, and what you type there does not reach us. To contact Kleanthis, use the booking form, phone or WhatsApp.

When you send a message, the conversation and the address of the page you are reading are sent to Cloudflare, Inc., which runs the AI model for us (Cloudflare Workers AI) as a data processor under its Data Processing Addendum. They are used only to write the reply and are not used to train AI models. We do not keep a record of conversations and cannot read them. Your IP address is used to limit how many messages can be sent per minute and per day, which protects the service from abuse; for the daily limit it is kept only as a pseudonymised code (a keyed hash, never the address itself) and deleted within 48 hours, together with the key needed to produce it. Technical error logs, which contain no message content, are kept for a few days. Cloudflare may process data outside the EEA; such transfers rely on the EU–US Data Privacy Framework or, otherwise, the EU standard contractual clauses (Decision 2021/914).

The conversation is also kept in your own browser's session storage so that it follows you from page to page. It is deleted when you close the tab, or immediately when you press the restart button in the chat. Please do not type personal details into the chat.

The lawful basis is our legitimate interest in answering visitors' questions quickly (Article 6(1)(f) GDPR) or, where you ask about work you want done, taking steps at your request before a contract (Article 6(1)(b)). Using the chat is entirely optional. The assistant can make mistakes and cannot make or confirm bookings.

Enquiries that do not lead to work are deleted within 12 months. Records relating to completed work — what was done to which instrument and when — are kept for as long as we service that piano, because a technician needs the instrument's history to look after it properly. Invoicing records are kept for the period required by Cypriot tax law.

Your enquiry is received through our website host's form handling and our email provider, and is read only by Kleanthis Christoforou. If you use the chat assistant, your messages are processed by Cloudflare, Inc., as described above. These providers act as data processors on our behalf and are bound to process the data only on our instructions.

We do not transfer your personal data outside the European Economic Area, except where a provider listed above does so under an adequacy decision or standard contractual clauses.

Under the GDPR you have the right to ask what personal data we hold about you, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you may withdraw it at any time.

To exercise any of these rights, email info@pianotuningscy.com. We will respond within one month.

If you believe we have handled your data improperly, you may complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (dataprotection.gov.cy).

If this policy changes materially, the updated version will be published on this page with a new revision date.