Black Diamond Events

Privacy Policy

Last updated: 30 June 2026

This Privacy Policy explains how SC Black Diamond Vehicle Events LTD (Pending), trading as Black Diamond Events (“we”, “us”, “our”), a luxury chauffeur-driven vehicle hire service based in Paphos, Cyprus, collects and uses your personal data. We are the data controller for the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) as applied in the Republic of Cyprus.

1. Information we collect

When you make a booking request or contact us, we collect:

  • Identity and contact data – your name, email address and telephone number;
  • Booking data – the vehicle, date and pickup time;
  • Journey data – your pickup location and destination (addresses, and map coordinates if you place a marker on the map);
  • Communications – any message, request or correspondence you send us;
  • Technical data – limited information such as IP address and browser type, collected automatically when you use the website.

We do not collect or store payment card details on this website. Bookings are currently settled in person on pickup. If online card payment is introduced, it will be processed by a regulated third-party payment provider (e.g. Stripe), and card data will not pass through or be stored on our servers.

2. How and why we use your data (lawful bases)

  • To take steps at your request and to perform our contract with you – processing and confirming your booking, arranging your chauffeur and journey (GDPR Art. 6(1)(b));
  • To contact you about your booking or enquiry (Art. 6(1)(b) and our legitimate interests, Art. 6(1)(f));
  • To keep accounting and business records and to comply with our legal obligations (Art. 6(1)(c));
  • To operate, secure and improve our website and service (legitimate interests, Art. 6(1)(f)).

3. Cookies and similar technologies

This website does not use advertising or behavioural-tracking cookies. Only cookies strictly necessary for the website to function (for example, standard WordPress session/security cookies) may be set. You can control or delete cookies through your browser settings.

4. Who we share your data with

We do not sell your personal data and do not share it for third-party marketing. We share data only with:

  • Our chauffeurs/drivers, who receive the booking details necessary to carry out your journey;
  • Service providers that help us run the website and service, who may receive limited technical data when their resources load in your browser – OpenStreetMap and CARTO (map tiles), the OpenStreetMap Nominatim service (address lookup), Google Fonts and a content delivery network (styling), and our hosting and email provider;
  • A payment provider, only if and when online payment is enabled;
  • Authorities or advisers where required by law, or to establish, exercise or defend legal claims.

5. International transfers

Some of the service providers above may process limited data outside the European Economic Area. Where that happens, we rely on appropriate safeguards recognised under GDPR (such as an adequacy decision or the European Commission’s Standard Contractual Clauses).

6. How long we keep your data

We keep booking and enquiry data for as long as necessary to provide the service and to meet our legal, accounting and tax obligations (generally up to the period required by Cyprus tax law), after which it is securely deleted or anonymised.

7. Security

We use appropriate technical and organisational measures to protect your data against unauthorised access, loss or misuse. No method of transmission or storage is completely secure, but we take reasonable steps to safeguard your information.

8. Your rights

Under GDPR you have the right to access your data and to request its rectification, erasure or restriction; to object to processing; to data portability; and to withdraw consent where processing is based on consent. To exercise any of these rights, contact us using the details below.

You also have the right to lodge a complaint with the Cyprus supervisory authority: the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

9. Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

10. Children

Our service is intended for adults. We do not knowingly collect data from children under 18 without the involvement of a parent or guardian.

11. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always shown on this page with its revision date.

12. Contact us

← BACK HOME