PRIVACY POLICY

Sambi Top Gear Motors (“we”, “us”, “our”) is a used car dealership at Petrombei Mavromichali 3, Agios Athanasios 4102, Limassol, Cyprus. We are the data controller responsible for your personal data.

For any privacy question or request, contact us at sambitopgearmotors@gmail.com or call +357 99 929 323.

We only collect what we need to respond to you and run our business:

• Contact & enquiry data — your name, email address, phone number, and the contents of any message when you submit a contact form, vehicle sourcing request, valuation request, or booking.
• Chat data — messages you send to our AI assistant so it can help you find a vehicle.
• Usage & device data — analytics such as pages visited, approximate region, device type, and how you interact with the site, collected via cookies and online identifiers. IP addresses are truncated and not stored by us (see our Cookie Policy).

We do not knowingly collect data from anyone under 18.

• To respond to your enquiries and provide quotes, valuations, and bookings.
• To source and present vehicles that match your request.
• To improve our website and understand how visitors use it.
• To meet our legal and accounting obligations.

Our legal bases for processing are your consent (e.g. analytics cookies), the performance of a contract or steps taken at your request, and our legitimate interests in operating and improving the business.

Our website includes an AI chat assistant and an AI price engine, powered by Anthropic. When you use them, the text you enter is processed to generate a response. We do not use these tools to make solely automated decisions that produce legal or similarly significant effects about you.

Please don’t share sensitive personal information (such as ID or financial details) in the AI chat.

We never sell your personal data. We share it only with trusted service providers who help us operate, under appropriate safeguards:

• Supabase — secure database hosting for enquiries and inventory.
• Resend & Twilio — to deliver enquiry notifications to our team.
• Web3Forms — to process contact form submissions.
• Anthropic — to power our AI chat assistant.
• Google Analytics — for website usage statistics.
• Microsoft Clarity — for heatmaps and session recordings that show how visitors use the site. Form fields and text you type are automatically masked.
• Vercel — website hosting and delivery.

Some of our service providers (including Anthropic, Resend, Twilio, Google, and Microsoft) are based outside the European Economic Area, primarily in the United States. When your data is transferred outside the EEA, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework — so that your data continues to receive an equivalent level of protection.

We keep your data only for as long as we genuinely need it:

• Enquiries that don’t lead to a purchase — up to 24 months after our last contact, unless you ask us to delete them sooner.
• Customer & transaction records — for as long as required by Cypriot tax and accounting law (typically 6 years).
• AI chat messages — kept only briefly to provide the conversation, then deleted.

When data is no longer needed, it is securely deleted or anonymised.

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request erasure of your data (“right to be forgotten”).
• Object to or restrict processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time.

To exercise any of these rights, email sambitopgearmotors@gmail.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus.

We may update this policy from time to time. The “last updated” date above always reflects the current version.