Privacy Policy

Last updated: 19 October 2026

1. Introduction

3AK Partners Ltd (“3AK Partners”, “we”, “us” or “our”) is committed to respecting and protecting the privacy of individuals whose personal data we process.

This Privacy Policy explains how we collect, use, disclose, retain and protect personal data in connection with our website, professional services and business activities.

It applies, as relevant, to website visitors, clients and prospective clients, representatives and personnel of client organisations, suppliers, contractors, professional advisers, business contacts and other individuals whose personal data we may process in the course of our activities.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable data protection legislation in Cyprus.

2. Who We Are

3AK Partners Ltd is a consulting and advisory company based in Nicosia, Cyprus, providing services in strategy, capital and execution.

Contact details

3AK Partners Ltd
12 Prevezis Street
1065 Nicosia, Cyprus
Email: [email protected]
Website: https://www.3akpartners.com

3AK Partners Ltd generally acts as a data controller where it determines the purposes and means of processing personal data, including in relation to its website, business relationships and internal operations.

In certain client engagements, we may process personal data on behalf of a client acting as data controller. In such circumstances, our responsibilities are governed by applicable data protection legislation and the relevant contractual arrangements.

3. Personal Data We Collect

The categories of personal data we process depend on the nature of our relationship with you and the services or activities involved.

Website visitors and enquiries

When you visit our website or contact us, we may collect:

  • Name, email address, telephone number and other contact details.

  • Organisation, professional title and business information, where provided.

  • Information submitted through our website contact form or other communication channels.

  • Technical and website usage information, including IP addresses, browser and device information, pages visited and cookie identifiers, where applicable.

Clients, prospective clients and business contacts

In connection with our professional activities, we may collect:

  • Names, business contact details, positions and professional responsibilities.

  • Information concerning business relationships, meetings, correspondence and enquiries.

  • Information relevant to evaluating, establishing and managing professional engagements.

  • Contractual, administrative and billing information, where applicable.

Information received during professional engagements

In providing consulting and advisory services, including strategy, financial and transaction-related assignments, we may receive or access information provided by clients or other relevant parties.

Such information will generally relate to businesses, their operations, financial performance, commercial arrangements and transactions.

However, depending on the nature of an engagement, the information may also include personal data relating to identifiable individuals, such as:

  • Directors, shareholders, beneficial owners and members of management.

  • Employees, consultants and other personnel.

  • Customers, suppliers, counterparties and other business contacts.

  • Individuals involved in actual or potential transactions.

The personal data involved may include names, professional roles, contact details, ownership interests, remuneration or other financial information, and information contained in business records, contracts or transaction documentation.

We process such information only where relevant to the engagement and where there is an appropriate legal basis or other lawful authority for doing so.

We do not ordinarily seek to collect special categories of personal data, such as health information, unless specifically necessary and legally permitted.

Suppliers, contractors and service providers

When engaging or managing suppliers, contractors, external advisers and other service providers, we may collect:

  • Names, professional roles and business contact details.

  • Contractual and commercial information.

  • Invoicing, payment and other relevant financial information.

  • Correspondence and information necessary to manage the business relationship.

4. Sources of Personal Data

We may obtain personal data from a variety of sources, including:

  • Directly from individuals: Through correspondence, meetings, telephone calls, website enquiries and other interactions.

  • Clients and other organisations: Where personal data is included in information provided in connection with an existing or potential professional engagement.

  • Business partners and professional advisers: Where information is shared lawfully for legitimate business or engagement-related purposes.

  • Publicly available sources: Such as company registries, corporate websites, professional publications and other publicly accessible business information.

  • Website technologies: Through hosting infrastructure, cookies and analytics tools, as described in Section 7.

Where personal data is obtained indirectly, we handle it in accordance with applicable data protection requirements, including relevant transparency obligations and any lawful exceptions.

5. How We Use Personal Data

We may process personal data for the following purposes:

Providing professional services

To evaluate, plan, manage and deliver consulting and advisory engagements, including research, financial and commercial analysis, transaction support, due diligence and preparation of recommendations, where relevant to the agreed scope of services.

Managing client and business relationships

To communicate with clients, prospective clients, business partners and other professional contacts, respond to enquiries and maintain business relationships.

Managing suppliers and service providers

To select, engage, communicate with and manage suppliers, contractors and external advisers, including contractual administration and payment processing.

Business administration

To manage contracts, invoicing, accounting, recordkeeping and other administrative activities.

Operating and improving our website

To maintain website functionality, monitor performance, analyse visitor interactions and improve the user experience.

Security, risk management and legal compliance

To protect our systems and information, manage business risks, establish or defend legal claims, and comply with applicable legal and regulatory obligations.

We do not currently operate a newsletter or send routine promotional email campaigns through our website.

6. Legal Basis for Processing

We process personal data only where an appropriate legal basis applies under the GDPR.

Depending on the circumstances, this may include:

  • Legitimate interests: Where processing is necessary for our legitimate business interests, including providing and managing professional services, maintaining business relationships, managing suppliers, protecting our systems and administering our operations, provided these interests are not overridden by individuals’ rights and freedoms.

  • Contractual necessity: Where processing is necessary to enter into or perform a contract with the individual concerned.

  • Legal obligations: Where processing is necessary to comply with applicable legal or regulatory requirements.

  • Consent: Where consent is required and has been provided for a specific processing activity, including certain cookies and tracking technologies.

The appropriate legal basis depends on the nature of the personal data and the processing activity.

Where we process personal data on behalf of a client acting as data controller, we do so in accordance with the client’s lawful instructions and applicable contractual and data protection requirements.

Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of earlier processing.

7. Website Cookies and Analytics

Our website uses cookies and related technologies to support website functionality, maintain security and understand website usage.

Depending on their purpose, these may include:

  • Strictly necessary cookies: Required for essential website operation and security.

  • Analytics cookies: Used to understand website traffic, visitor interactions and performance.

  • Preference cookies: Used to remember certain website settings or choices, where applicable.

Analytics and website services

We use the following services in connection with website analytics and search performance:

Google Analytics

Google Analytics helps us understand website traffic and visitor interactions. Depending on its configuration and consent preferences, it may process device information, website usage data, approximate location and online identifiers.

Privacy information: https://policies.google.com/privacy

Hostinger Analytics

Hostinger Analytics provides information about website traffic and performance. The technical and usage information processed depends on the service’s configuration.

Privacy information: https://www.hostinger.com/legal/privacy-policy

Microsoft Bing Webmaster Tools

Bing Webmaster Tools helps us monitor search visibility, indexing, search performance and website diagnostics. It is primarily a website management and search reporting service rather than a conventional advertising tracking tool.

Privacy information: https://privacy.microsoft.com/privacystatement

Cookie consent

Our website uses SureCookie to provide visitors with a mechanism for managing cookie preferences.

Where required by applicable law, non-essential cookies and similar tracking technologies are subject to prior consent.

Visitors can review or change their preferences through the Cookie Settings option available on our website.

Further information about individual cookies, their purposes and retention periods should be available through the website’s cookie declaration or cookie settings.

8. Contact Form Submissions

When you submit an enquiry through our website contact form, we use the information provided to review your request and respond to you.

Submissions may be processed through our website infrastructure and relevant technology providers supporting hosting, communications and security.

Submitting an enquiry does not automatically subscribe you to a newsletter or promotional mailing list.

We retain enquiry information only for as long as reasonably necessary for the relevant communication, any resulting business relationship or applicable legal requirements.

Please avoid submitting unnecessary sensitive personal information through the contact form.

9. Sharing Personal Data

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy, including to:

  • Clients and authorised representatives, where relevant to an engagement.

  • External consultants, specialists, professional advisers or other parties involved in delivering services, where authorised and appropriate.

  • Website hosting, IT, cloud storage, analytics, email and other technology providers.

  • Suppliers and administrative support providers engaged in our business operations.

  • Legal, accounting and other professional advisers.

  • Regulatory authorities, courts or other public bodies where disclosure is required or permitted by law.

We seek to limit disclosures to information reasonably necessary for the relevant purpose and to apply appropriate confidentiality, contractual and data protection safeguards.

Where third parties process personal data on our behalf, we take appropriate steps to ensure that relevant data protection obligations are addressed.

We do not sell personal data to third parties.

10. International Data Transfers

Some service providers or other recipients may process personal data outside Cyprus or the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we take steps to ensure compliance with applicable data protection requirements.

Depending on the circumstances, appropriate safeguards may include European Commission adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

Further information about relevant safeguards may be requested using the contact details provided below.

11. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected or processed, taking account of applicable legal, contractual, regulatory and legitimate business requirements.

Retention periods depend on the nature of the information and the relevant processing activity.

In particular:

  • Client and engagement-related information: Retained for the duration of the engagement and any additional period necessary for contractual, legal, recordkeeping or legitimate business purposes.

  • Business contact and correspondence records: Retained while relevant to the business relationship and for an appropriate period thereafter.

  • Supplier and contractor records: Retained for the duration of the relationship and any applicable legal or accounting retention period.

  • Website analytics information: Retained according to the configuration and retention settings of the relevant analytics services.

  • Technical and security information: Retained for periods appropriate to operational and security needs.

Where we act as a data processor on behalf of a client, retention and deletion arrangements are governed by the relevant agreement and applicable law.

When personal data is no longer required, we take appropriate steps to delete, anonymise or securely dispose of it.

12. Data Security and Confidentiality

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, accidental loss, misuse, alteration or disclosure.

These measures may include access controls, secure communications, appropriate information handling procedures and restrictions on access to confidential or personal information.

Information received during professional engagements is also handled subject to applicable contractual confidentiality obligations.

While we take appropriate measures to safeguard information, no electronic transmission or storage system can be guaranteed to be completely secure.

13. Your Data Protection Rights

Under the GDPR, and subject to applicable conditions and limitations, individuals may have the right to:

  • Request access to their personal data.

  • Request correction of inaccurate or incomplete information.

  • Request erasure of personal data in certain circumstances.

  • Request restriction of certain processing activities.

  • Object to processing based on legitimate interests.

  • Request data portability where applicable.

  • Withdraw consent where processing is based on consent.

  • Lodge a complaint with a competent data protection supervisory authority.

Requests may be submitted to [email protected].

We will respond in accordance with applicable data protection legislation, generally within one month, subject to any lawful extensions.

Where we process personal data solely on behalf of a client acting as data controller, we may refer the request to that client or assist the client in responding, as appropriate.

Individuals may also lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

14. Third-Party Websites

Our website may contain links to external websites or services operated by third parties.

We are not responsible for the content or privacy practices of those external websites and encourage visitors to review their respective privacy policies.

15. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our business activities, professional services, website technologies or applicable legal requirements.

Any revised version will be published on this page with an updated “Last updated” date.

16. Contact Us

For questions about this Privacy Policy or how we process personal data, please contact:

3AK Partners Ltd
12 Prevezis Street
1065 Nicosia, Cyprus
Email: [email protected]
Website: https://www.3akpartners.com