Last updated: 8 October 2026
1. Who we are
CKM Amare Tax Ltd (registration number HE 400657), Isxyron 24, Monovolikos 2, Kato Polemidia, 4151 Limassol, Cyprus (“we”, “us”, “our”) is the controller of the personal data described in this policy. We are a firm of certified public accountants and registered auditors, holding ICPAC audit licence No. E1172.
We process personal data in accordance with the EU General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Cyprus Law providing for the Protection of Natural Persons with regard to the Processing of Personal Data and for the Free Movement of such Data, Law 125(I)/2018.
For any question about this policy or your personal data, contact us at info@amare.tax or write to us at the address above.
2. Whose data we process
- Visitors to our website and people who contact us with an enquiry.
- Our clients, and individuals connected to our corporate clients, such as directors, shareholders, beneficial owners, employees and authorised representatives.
- Suppliers, business contacts and job applicants.
3. What personal data we collect
- Identity and contact details: name, address, email address, telephone number, nationality, date of birth.
- Identification and due diligence documents: passport or ID card, proof of address, tax identification numbers, information on source of funds and wealth, and other information required under anti-money laundering legislation.
- Financial and tax information: income, assets, bank details, accounting records, tax returns and residency information needed to provide our services.
- Communications: the content of enquiries, emails, messages and notes of meetings and calls.
- Technical data: IP address, browser type and pages visited, recorded in our web server logs for security purposes.
We mostly collect this data directly from you. We may also receive it from the company you represent, from other advisers acting for you, or from public registers such as the Registrar of Companies.
4. Why we use your data, and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing proposals | Taking steps at your request before entering into a contract; our legitimate interest in responding to enquiries |
| Providing audit, accounting, tax, advisory and secretarial services | Performance of a contract |
| Client identification, due diligence and record keeping under anti-money laundering legislation (Law 188(I)/2007, as amended) | Compliance with a legal obligation |
| Meeting our obligations under tax, company and audit legislation and ICPAC professional requirements | Compliance with a legal obligation |
| Running our firm, keeping our systems secure and establishing or defending legal claims | Our legitimate interests |
| Sending newsletters and tax updates | Your consent, which you can withdraw at any time |
Where we need personal data to meet a legal obligation or to perform a contract, we may be unable to provide our services if you do not provide it.
5. Who we share your data with
- Public authorities where required by law, including the Tax Department, the Registrar of Companies and other competent authorities.
- Our regulator, ICPAC, and other supervisory bodies in the course of quality reviews and inspections.
- Service providers who support our business, such as IT, email, cloud storage and website hosting providers, under contracts that require them to protect your data.
- Banks, lawyers and other professional advisers, where you instruct us or where this is necessary to provide our services.
We do not sell your personal data.
6. Transfers outside the European Economic Area
Some of our service providers may process personal data outside the European Economic Area. Where this happens, we make sure appropriate safeguards are in place, such as an adequacy decision of the European Commission (including the EU-US Data Privacy Framework) or the European Commission's Standard Contractual Clauses.
7. How long we keep your data
- Enquiries that do not lead to an engagement: up to 12 months from our last contact.
- Client records and due diligence documents: for at least 5 years after the end of our business relationship, as required by anti-money laundering legislation, or longer where tax, company or audit legislation or professional rules require it.
- Audit working papers: for the period required by audit legislation and professional standards.
After these periods, we securely delete or anonymise the data.
8. Your rights
Subject to the conditions of the law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing;
- receive your data in a portable format;
- withdraw your consent at any time, where we rely on consent.
Some rights are limited where we must keep data to meet a legal obligation, for example under anti-money laundering legislation. To exercise your rights, email info@amare.tax. We will reply within one month.
You also have the right to complain to the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy).
9. How we protect your data
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including access controls, secure systems and confidentiality obligations for all our staff.
10. Cookies
For information about cookies on this website, see our Cookie Notice.
11. Changes to this policy
We may update this policy from time to time. The latest version will always be available on this page, with the date it was last updated.