Privacy Policy

Last updated: 12 November 2026

U.O.M. Travel Agency Limited
Registration No. HE 391579 (Republic of Cyprus) · Tax Identification Code (TIC) 10391579V
Archiepiskopou Leontiou & Lefkosias 254, Maximos Court Block A, Flat/Office 18, Ground floor, 3020 Limassol, Cyprus
Tel. +357 99 199052 · Email it@uomtravel.com

1. Who we are

This website, uomtravel.com, is operated by U.O.M. Travel Agency Limited (“we”, “us”), a company registered in the Republic of Cyprus. U.O.M. Travel Agency Limited was acquired under its legacy registered corporate name and operates exclusively in IT infrastructure, network security, and B2B software development. The company conducts no travel agency or tourism services.

We are the controller of the personal data described in this policy. We process personal data in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, the “GDPR”) and Cyprus Law 125(I)/2018 on the protection of natural persons with regard to the processing of personal data.

2. Personal data we collect

• Enquiries. When you use a contact form on this website, you give us your name, email address, a subject and your message. The form sends your message to our business mailbox; the website does not keep a separate copy of form submissions.
• Orders. When you buy a product or service, our online shop (WooCommerce) records the details you enter at checkout, such as your name, company name, email address, telephone number and billing address, together with what you ordered, the price, the date and the payment status. You check out as a guest; we do not create customer accounts on this website.
• Payments. Card and Revolut Pay payments are handled by Revolut. You enter your card details into Revolut’s secure payment form; we never see or store your full card number or security code. Revolut tells us whether a payment succeeded and gives us a transaction reference.
• Project information. While we deliver a service, you may share business information with us, such as system details, access credentials or data held in software we build for you. Where we process personal data on your behalf in that work, we do so as your processor (see section 9).
• Technical data. When you visit the website, our web server automatically records technical information such as your IP address, browser type, the pages requested and the date and time, in server logs used for security and troubleshooting.
• Cookies. See section 7.

We do not ask for special categories of personal data, and our services are not directed at children.

3. Why we use your data and our legal basis

• To answer your enquiry and prepare a proposal: steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR), or our legitimate interest in responding to business enquiries (Article 6(1)(f)).
• To process your order, take payment, deliver the service and support you: performance of our contract with you or your company (Article 6(1)(b)).
• To keep accounting and tax records: compliance with our legal obligations under Cyprus law (Article 6(1)(c)).
• To keep the website secure, prevent fraud and fix problems: our legitimate interests (Article 6(1)(f)).
• To establish, exercise or defend legal claims: our legitimate interests (Article 6(1)(f)).

We do not sell your personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing. We do not use the information you give us through this website for marketing unless you have separately agreed to receive it, and you can opt out at any time.

4. Who we share data with

We use carefully selected service providers that process data on our behalf under contract:

• Amazon Web Services (AWS) hosts this website and its database in the AWS Europe (Frankfurt) region in Germany.
• Revolut processes card and Revolut Pay payments, including fraud checks. Revolut is also an independent controller of the data it needs to process payments and to meet its own legal obligations, under its own privacy policy.
• Google provides our business email (Google Workspace), which delivers contact form messages and order emails. This website also loads fonts from Google Fonts, so your browser connects to Google’s servers and Google receives your IP address.

We may also share data with our professional advisers (such as accountants, auditors and lawyers), with banks and payment providers where needed to complete or investigate a payment, and with public authorities, courts or regulators when the law requires it.

5. International transfers

This website is hosted in the European Union. Some of our providers, such as Google, may process data outside the European Economic Area, including in the United States. Where that happens, the transfer is protected by a European Commission adequacy decision (for example the EU–U.S. Data Privacy Framework for certified companies, or the decision for the United Kingdom) or by the European Commission’s Standard Contractual Clauses.

6. How long we keep data

• Orders, invoices and payment records: for as long as Cyprus tax and accounting law requires us to keep them.
• Enquiries that do not lead to an order: up to 24 months after our last contact, then deleted.
• Project information: for the duration of our contract and for as long afterwards as needed to support you, resolve disputes or meet legal obligations, then deleted or returned to you.
• Server logs: for a limited period, for security and troubleshooting.

7. Cookies

This website uses only strictly necessary cookies: WooCommerce cookies that keep your cart and checkout working (for example woocommerce_cart_hash, woocommerce_items_in_cart and wp_woocommerce_session_ cookies), and Revolut’s cookies on the checkout page that are needed to process your payment securely and to prevent fraud.

We do not use analytics, advertising, social media or order-tracking cookies, and we do not use Google Analytics. You can block or delete cookies in your browser settings, but the cart and checkout will not work without the strictly necessary cookies.

8. How we protect your data

The website uses encrypted (HTTPS) connections. Access to the website administration and to our business systems is limited to authorised people and protected by passwords and other access controls. Payments are handled by Revolut, so card details never reach our servers.

9. Data we process for our clients

Where we process personal data on behalf of a client as part of a service, for example data held in software we build, host or support for that client, the client is the controller and we act as its processor. We process that data only on the client’s documented instructions and under a data processing agreement that meets Article 28 of the GDPR.

10. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected, to have it erased, to restrict its processing, to receive it in a portable format, to object to processing based on our legitimate interests, and to withdraw any consent you have given at any time (without affecting processing that took place before). To exercise any of these rights, email it@uomtravel.com. We may need to confirm your identity. We will reply within one month; for complex requests this may be extended by up to two further months, and we will tell you if it is.

11. Complaints

If you are unhappy with how we handle your personal data, please contact us first so we can put it right. You also have the right to lodge a complaint with a supervisory authority: in Cyprus, the Office of the Commissioner for Personal Data Protection (www.dataprotection.gov.cy), or the authority in the EU country where you live or work.

12. Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last changed.

13. Contact us

U.O.M. Travel Agency Limited, Archiepiskopou Leontiou & Lefkosias 254, Maximos Court Block A, Flat/Office 18, Ground floor, 3020 Limassol, Cyprus.
Email it@uomtravel.com · Tel. +357 99 199052

See also our Terms of Service and our Refund & Cancellation Policy.