Privacy Policy

Last updated: 16 October 2026

This policy explains what personal data we collect when you use quiroads.com, why we collect it and what rights you have. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the applicable law of the Republic of Cyprus.

1. Who is responsible for your data

The data controller is AM KAIROS CONSULTING LTD (trading as QuiroAds), registration number HE 441214, Tagm. Dimitriou Pouliou & Kostaki Pantelidi, Melina Court, 2nd floor, 8011, Paphos, Cyprus. For any privacy question, write to ajustame@quiroads.com.

2. What data we collect

  • Booking data: when you book a discovery call through our booking widget we collect your name, email, phone number, clinic details and any information you choose to add.
  • Communications: the content of emails, calls or messages you send us.
  • Usage data: pages visited, device and browser type, approximate location derived from your IP address, referring site and interactions, collected through cookies and similar technologies (see our Cookie Policy).

We do not ask for health data or patient data through this website. Please do not send it to us.

3. Why we use it and on what legal basis

  • To answer your enquiry, schedule and hold the call you booked, and prepare a proposal: steps prior to entering into a contract (Art. 6(1)(b) GDPR).
  • To follow up on your enquiry and keep a record of our commercial relationship: our legitimate interest (Art. 6(1)(f) GDPR).
  • To measure how the website is used and the performance of our advertising (analytics and advertising cookies): your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • To comply with legal, tax and accounting obligations (Art. 6(1)(c) GDPR).

4. Who we share it with

We do not sell your personal data. We share it only with service providers that process it on our behalf under data processing agreements:

  • Vercel Inc. (website hosting and cookieless audience measurement).
  • QuiroHiro booking and CRM platform (booking widget and contact management).
  • Google Ireland Ltd (Google Analytics 4).
  • Meta Platforms Ireland Ltd (Meta Pixel, for Facebook and Instagram advertising).
  • OpenAI (advertising pixel, to measure ChatGPT ad campaigns).
  • Vimeo and YouTube (embedded videos, only when a video is loaded or played).

5. International transfers

Some of these providers are based in, or access data from, the United States. Where that happens, transfers rely on the EU-US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

6. How long we keep it

We keep booking and contact data for as long as needed to handle your enquiry and, if you become a client, for the duration of the relationship plus the periods required by law (for example, tax and accounting obligations). Analytics and advertising data is kept for the retention period configured in each tool. Afterwards the data is deleted or anonymised.

7. Your rights

You can request access to, rectification or erasure of your personal data, restriction of or objection to its processing, and data portability. Where processing is based on consent, you can withdraw it at any time without affecting earlier processing. To exercise any right, email ajustame@quiroads.com.

You also have the right to lodge a complaint with a supervisory authority: in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy); in Spain, the Agencia Española de Protección de Datos (aepd.es); or the authority of your country of residence.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricted access to the tools where data is stored.

9. Changes to this policy

We may update this policy when our services or the law change. The date at the top shows the latest version.