Legal
Privacy Policy
Last updated 17 August 2026
This policy explains what happens to personal data in connection with this website and with enquiries sent to us. It is written to be read, not to be impressive.
Who is responsible
The data controller is:
- Controller
- GROGLABS LTD
- Registration
- HE 496701, Registrar of Companies, Cyprus
- Address
- 7 Thiseos, 2042 Strovolos, Nicosia, Cyprus
- info@groglabs.com
What this website collects
Very little, by design. This site is a set of static pages. It contains no analytics, no tracking pixels, no advertising, no contact form and no JavaScript of any kind. It sets no cookies of its own.
Two things do happen when you visit, and you should know about both.
Hosting and delivery
The site is hosted on Cloudflare's network. As with any web host, Cloudflare processes technical data required to deliver the pages and to protect the service from abuse. This includes your IP address, the pages requested, the time of the request, and information your browser sends such as its user-agent string. Cloudflare may also set strictly necessary cookies for security and bot-detection purposes. Cloudflare acts as our processor for this activity, and its own privacy documentation describes it in full.
The lawful basis is our legitimate interest in operating and securing the website (Article 6(1)(f) GDPR). We do not use this data to build profiles and we do not have access to it in any form that identifies individual visitors.
The map on the Contact page
The Contact page embeds a map served by the OpenStreetMap Foundation. If you open that page, your browser requests map images directly from OpenStreetMap, which means OpenStreetMap receives your IP address and browser information. No other page on this site loads anything from a third party. If you would rather not make that request, you can avoid the Contact page and reach us using the address and telephone number in the footer of every page.
If you email us
When you write to us we receive whatever you choose to send: your name, email address, the content of your message, and anything attached. We use it to answer you and, if we go on to work together, to carry out that work. The lawful basis is our legitimate interest in responding to enquiries, and, once an engagement begins, the performance of our contract with you (Article 6(1)(b) GDPR).
Our email is provided by Google Workspace, which processes messages on our behalf as our processor.
We keep correspondence for as long as it is useful for the matter it concerns, and for as long afterwards as we are required to keep records under Cypriot company and tax law. Enquiries that do not lead anywhere are deleted when they are plainly no longer relevant.
Who we share data with
We do not sell personal data and we do not share it for marketing. Beyond the providers named above — Cloudflare for hosting, Google for email, OpenStreetMap for the single embedded map — we disclose personal data only where we are legally obliged to, for example to our accountants and auditors in the course of statutory record-keeping, or to a competent authority where the law requires it.
Transfers outside the EEA
Cloudflare and Google are established outside the EEA as well as within it, and data may be processed outside the EEA in the course of the activities described above. Where that happens, those transfers are governed by the safeguards those providers rely on for international transfers, including the European Commission's standard contractual clauses.
Your rights
Under the GDPR you have the right to ask us for a copy of the personal data we hold about you; to have inaccurate data corrected; to have data erased; to have processing restricted; to object to processing carried out on the basis of our legitimate interests; and to receive data you gave us in a portable form. You can exercise any of these by writing to info@groglabs.com. We will respond within one month.
If you are not satisfied with how we have handled your data, you can complain to the Cypriot supervisory authority, the Office of the Commissioner for Personal Data Protection (dataprotection.gov.cy), or to the supervisory authority in your own country of residence.
Changes to this policy
If this policy changes we will update the date at the top of the page. The site is small enough that we do not maintain a version archive; if you need to know what a previous version said, ask us.