top of page

Privacy Policy

Last Updated: 7 October 2026

Medsure Medicare Insurance Brokers (Cyprus) Ltd ("Medsure", "we", "us or "our") respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you visit or use our website, www.medsure.com.cy (the "Website"), contact us, submit an enquiry, apply for a position, or otherwise interact with us through the Website.

Medsure Medicare Insurance Brokers (Cyprus) Ltd is located at:

Ayias Elenis 36, Galaxias Commercial Center, 4th Floor, Office 404, 1061 Nicosia, Cyprus

Email: info@medsure.com.cy
Telephone: +357 22 279484

1. Who Is Responsible for Your Personal Data?

For the purposes of applicable data-protection legislation, including the EU General Data Protection Regulation (EU) 2016/679 ("GDPR"), Medsure Medicare Insurance Brokers (Cyprus) Ltd is the controller of personal data collected through or in connection with the Website, except where we expressly state otherwise.

If you have any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at:

Medsure Medicare Insurance Brokers (Cyprus) Ltd
Ayias Elenis 36, Galaxias Commercial Center, 4th Floor, Office 404
1061 Nicosia, Cyprus
Email: info@medsure.com.cy
Telephone: +357 22 279484

2. What Personal Data Do We Collect?

Depending on how you interact with the Website, we may collect the following categories of personal data.

​

2.1 Information You Provide to Us

When you contact us or submit a form through the Website, we may collect:

First and last name;
Email address;
Telephone number;
Country or area/calling code;
Subject and content of your enquiry;
Any other information you voluntarily provide to us.

The Website currently provides contact forms through which visitors may submit information such as their name, email address, telephone number and message.

​

2.2 Information Provided When Applying for Employment

If you apply for a position through the Website, we may collect information such as:

Name and contact details;
Curriculum vitae/resumé;
Employment history;
Education and professional qualifications;
Skills and professional experience;
Information contained in your application;
Any other information you voluntarily provide as part of your application.

We will use recruitment information only for legitimate recruitment and employment-related purposes and will handle such information in accordance with applicable data-protection legislation.

​

2.3 Technical and Usage Information

When you visit the Website, certain information may be collected automatically, depending on the Website's technical configuration and the technologies enabled on your device. This may include:

IP address;
Browser type and version;
Device type;
Operating system;
Language and regional settings;
Date and time of access;
Pages visited and interactions with the Website;
Referring website or source;
Technical information relating to Website performance and security.

Some of this information may constitute personal data under applicable law.

​

2.4 Cookies and Similar Technologies

The Website may use cookies and similar technologies.

Cookies may be used for purposes such as:

Enabling the Website to function correctly;
Maintaining security;
Remembering preferences;
Understanding how visitors use the Website;
Measuring Website performance;
Improving our services and Website;
Supporting marketing or analytics activities, where applicable.

Strictly necessary cookies may be used where permitted by applicable law.

Where consent is legally required for non-essential cookies or similar technologies, we will request your consent before placing or using those technologies.

You may manage or withdraw your cookie preferences through the Website's cookie settings, where such functionality is available.

Important: The specific cookies and third-party technologies actually deployed on the Website should be listed in a separate Cookie Policy/cookie notice and kept up to date.

3. How We Use Personal Data

We may process personal data for the following purposes:

  1. To respond to enquiries and requests submitted through the Website;

  2. To communicate with you regarding our services;

  3. To provide information about insurance products and services;

  4. To assess and follow up on requests for information;

  5. To manage and maintain relationships with clients and prospective clients;

  6. To process and administer insurance-related requests where applicable;

  7. To process employment applications and recruitment activities;

  8. To operate, maintain, secure and improve the Website;

  9. To monitor and analyse Website usage and performance;

  10. To prevent fraud, abuse, security incidents and other unlawful activities;

  11. To comply with legal and regulatory obligations;

  12. To establish, exercise or defend legal claims;

  13. To protect our rights, property, systems and business;

  14. To carry out other purposes that are compatible with the purposes for which the information was originally collected or otherwise permitted by applicable law.

​

We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by law.

4. Legal Bases for Processing

Where the GDPR applies, we process personal data on one or more of the following legal bases:

​

Consent

We may process personal data where you have given valid consent, for example where consent is required for certain non-essential cookies or direct marketing activities.

You may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

​

Performance of a Contract

We may process personal data where processing is necessary to take steps at your request before entering into a contract or to perform a contract with you.

​

Legal Obligation

We may process personal data where necessary to comply with a legal or regulatory obligation applicable to Medsure.

​

Legitimate Interests

We may process personal data where necessary for our legitimate interests or those of a third party, provided that those interests are not overridden by your fundamental rights and freedoms.

Such interests may include operating and improving our business and Website, maintaining information security, preventing fraud, responding to enquiries, managing business relationships and defending legal rights.

​

Vital Interests

In exceptional circumstances, personal data may be processed where necessary to protect someone's vital interests, where permitted by applicable law.

5. Special Categories of Personal Data

Because Medsure operates in the insurance sector, you may voluntarily provide information that is considered special category personal data under the GDPR, including health information.

Please do not submit sensitive or special category personal data through a general Website contact form unless it is specifically requested or necessary for the purpose for which you are contacting us.

Where special category personal data is processed, we will do so only where an appropriate legal basis and applicable condition under data-protection law exists.

Where possible, we will limit the collection of sensitive information to what is necessary for the relevant purpose.

6. Sharing Personal Data

We may disclose personal data where reasonably necessary for the purposes described in this Privacy Policy.

Depending on the circumstances, recipients may include:

  • Our employees, authorised representatives and professional advisers;

  • Insurance companies, insurers, underwriters and relevant insurance market participants;

  • Service providers supporting our Website and business operations;

  • Website hosting and IT service providers;

  • Email, communications and customer-management service providers;

  • Recruitment or human-resources service providers;

  • Professional advisers, including lawyers, accountants and auditors;

  • Regulatory authorities, government bodies, courts and law-enforcement authorities where required or permitted by law;

  • Other parties where disclosure is necessary to establish, exercise or defend legal rights;

  • A purchaser, successor or other relevant party in connection with a corporate transaction, merger, restructuring or sale of assets.

  • ​

We require service providers processing personal data on our behalf to process such data in accordance with applicable data-protection requirements and our instructions, where required by law.

We do not sell your personal data.

7. International Transfers

Some of our service providers or business partners may process personal data outside Cyprus or the European Economic Area ("EEA").

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is lawful under applicable data-protection legislation.

​

Depending on the circumstances, this may include relying on:

  • An adequacy decision of the European Commission;

  • Standard Contractual Clauses approved by the European Commission;

  • Appropriate safeguards recognised under applicable law; or

  • Another lawful transfer mechanism.

​

You may contact us for further information regarding applicable safeguards for international transfers.

8. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including for the purposes of satisfying legal, accounting, regulatory, insurance and reporting requirements.

The appropriate retention period will depend on factors including:

  • The nature and purpose of the information;

  • Whether we have an ongoing relationship with you;

  • Legal and regulatory retention requirements;

  • Limitation periods for potential legal claims;

  • Our legitimate business and record-keeping requirements.

When personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our retention procedures and applicable law.

9. Data Security

We take reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

However, no method of transmission over the Internet or method of electronic storage can be guaranteed to be completely secure.

You should therefore exercise appropriate caution when submitting personal information online.

10. Your Data Protection Rights

Subject to applicable law and certain limitations, you may have the following rights in relation to your personal data:

​

Right of Access

You may request confirmation as to whether we process your personal data and request a copy of the personal data we hold about you.

​

Right to Rectification

You may request correction of inaccurate or incomplete personal data.

​

Right to Erasure

In certain circumstances, you may request deletion of your personal data.

​

Right to Restriction

In certain circumstances, you may request that we restrict the processing of your personal data.

​

Right to Object

You may object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing.

​

Right to Data Portability

Where applicable, you may request to receive personal data that you have provided to us in a structured, commonly used and machine-readable format and request its transmission to another controller.

​

Right to Withdraw Consent

Where processing is based on consent, you may withdraw your consent at any time.

​

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

11. How to Exercise Your Rights

To exercise your rights or ask questions about the processing of your personal data, please contact us at:

Email: info@medsure.com.cy
Address: Medsure Medicare Insurance Brokers (Cyprus) Ltd, Ayias Elenis 36, Galaxias Commercial Center, 4th Floor, Office 404, 1061 Nicosia, Cyprus
Telephone: +357 22 279484

We may need to request additional information from you to verify your identity before fulfilling certain requests.

We will respond to valid requests within the timeframe required by applicable law.

12. Right to Lodge a Complaint

If you believe that our processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with the competent data-protection supervisory authority.

For individuals in Cyprus, the relevant supervisory authority is the:

Office of the Commissioner for Personal Data Protection (Cyprus)

You may contact the supervisory authority through its official channels for information about making a complaint.

You may also contact us first so that we can attempt to address your concerns.

13. Children's Privacy

The Website is intended primarily for adults and business users.

We do not knowingly collect personal data from children where such collection is not permitted by applicable law.

If you believe that a child has provided personal data to us without appropriate consent or authorisation, please contact us so that we can review the matter and take appropriate action.

14. Third-Party Websites

The Website may contain links to third-party websites or services.

This Privacy Policy applies only to the Medsure Website and does not apply to third-party websites.

We are not responsible for the privacy practices, content or security of third-party websites. We recommend reviewing the privacy policies of any third-party websites you visit.

15. Marketing Communications

Where permitted by law, we may use your contact information to provide information about Medsure's services or other communications that may be relevant to you.

Where applicable, we will obtain the consent required by law before sending electronic direct marketing communications.

You may opt out of marketing communications at any time by following the unsubscribe instructions contained in the relevant communication or by contacting us directly.

16. Automated Decision-Making and Profiling

Unless otherwise expressly communicated to you, we do not use the Website to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

If this changes, we will provide the information required by applicable data-protection legislation.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business, Website, technology, legal requirements or data-processing practices.

When we make changes, we will update the "Last Updated" date at the top of this Privacy Policy.

We encourage you to review this Privacy Policy periodically.

18. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or the way we process personal data, please contact:

Medsure Medicare Insurance Brokers (Cyprus) Ltd

Ayias Elenis 36
Galaxias Commercial Center
4th Floor, Office 404
1061 Nicosia
Cyprus

Email: info@medsure.com.cy
Telephone: +357 22 279484

bottom of page