Legal
Privacy notice
Last updated 27 September 2026. This describes what this site actually does today. Where something is not switched on, it says so rather than reserving the right.
Who is responsible
KyanoVia is a KyanoLab project. It is operated by Raymond Clynick, an individual (sole operator) based in Pissouri, Limassol, Cyprus. KyanoLab is a trading name, not a registered company, so there is no company registration or VAT number to state. For anything in this notice — including a request to see, correct or delete your data — write to info@kyanolab.tech. Raymond Clynick is the data controller for everything described here.
What we collect
- · What you type into a form.Name, email, phone, district, move date and message, depending on the form. We keep it for the purpose you submitted it for — an introduction, a professional’s application to be listed, a property listing, the newsletter, or a general enquiry — and not for anything else.
- · The technical details of that submission. Your IP address and browser user-agent at the moment you submit, stored alongside your consent so that, if it is ever disputed, we can show when and how consent was given.
- · Standard server logs. Our host (Vercel) records requests in the ordinary course of serving the site. We do not build profiles from them.
What stays on your device and never reaches us
The planner and the document checklist save your progress in your browser’s localStorage. That is on your machine. It is not transmitted to us, we cannot read it, and clearing your browser data deletes it. There is no account system on this part of the site, which is exactly why your ticked boxes do not follow you to another device.
What we do not do
- · We do not set cookies on the public site. Not analytics, not advertising. The single exception is a sign-in cookie (
kl_dash, 12 hours) set only when an invited person enters a password on a dashboard sign-in page — see the cookie policy. - · We do not run third-party analytics. There is no Google Analytics, no Meta pixel, and at present no Plausible either.
- · We do not fingerprint your device.
- · We do not embed social-media tracking buttons.
- · We do not sell personal data, and we do not share it with advertisers.
If any of that changes — and analytics is the likeliest — this notice changes first and you will be asked to consent before anything non-essential is set. How that would work is set out in the cookie policy.
Why we are allowed to hold it (GDPR Article 6)
- · Introductions, the contact form and the newsletter — Article 6(1)(a), your consent, given by the checkbox at the point of submission. You can withdraw it at any time and that does not affect anything done before you did.
- · A professional or seller applying to be listed — Article 6(1)(b), steps taken at your request before entering a contract.
- · Keeping the consent record itself, and server logs — Article 6(1)(f), our legitimate interest in being able to evidence consent and to keep the service secure and working.
Who else processes it
These are our processors. Each handles data on our instructions under a data processing agreement, and each is named with the region it actually runs in, verified on 27 September 2026:
- · Vercel — hosting and serving. Served from Frankfurt (fra1).
- · Supabase — the database holding form submissions. Region
eu-west-1, which is Ireland. An earlier version of this page said Frankfurt; it was wrong. - · Resend — transactional email, so that a submission reaches a human. United States, under standard contractual clauses. Not currently enabled — no API key is configured, so no data has been sent to it. Listed because it is wired and will be switched on.
Third parties your browser contacts directly
These are not our processors — we send them nothing — but some pages make your browser fetch files from them, which means they receive your IP address and the usual request headers (browser type, the page that asked). We name them because that is a disclosure of your IP address all the same:
- · On the property map (/map), which embeds the map from our own engine at engine.kyanolab.tech: CARTO (basemaps.cartocdn.com) for the map tiles, Google Fonts for its typefaces, and unpkg (a public code CDN) for map software libraries.
We do not transfer personal data outside the EEA other than to Resend, and only once it is enabled. Google, CARTO and unpkg may process the request data described above outside the EEA under their own terms.
Introductions — the one time we pass your details on
When you ask to be introduced to a professional, we send your details to that professional only. Not to a panel, not to everyone in the category, not to whoever pays most. If you want more than one introduction you ask for more than one. We are paid a commission by the professional when an introduction turns into work, which is set out in how we make money. That arrangement does not change who we send you to.
How long we keep it
- · Form submissions — 24 months from our last contact with you, then deleted.
- · Consent records — kept while we hold the related data and for 5 years after, then reduced to a non-identifying record. A consent record you have destroyed cannot prove anything about a complaint that arrives later.
- · Suppression list — if you ask to be erased we keep a one-way hash of your email so that you are not re-contacted by accident. It cannot be reversed into your address.
Your rights
Under the GDPR you can ask us for a copy of what we hold on you (Article 15), to correct it (16), to delete it (17), to restrict what we do with it (18), to receive it in a portable form (20), and to object to processing based on legitimate interests (21). Where we rely on consent you can withdraw it at any time.
Email info@kyanolab.tech. We answer within one month, as the GDPR requires, and we will tell you if we need the extension the GDPR allows rather than going quiet.
If you are not happy with our answer
You can complain to the Cyprus supervisory authority, the Office of the Commissioner for Personal Data Protection, or to the authority in the EU country where you live. You do not have to come to us first, though we would rather you did.
Children
This site is for adults arranging a move. We do not knowingly collect data from children. If you believe a child has submitted a form, tell us and we will delete it.
Changes
When this notice changes, the date at the top changes with it. Where a change affects what we do with data already collected, we will ask again rather than rely on a new version of a page you read once.
This notice describes our own processing. It is not legal advice, and nothing on this site is — see the terms.