Legal

Privacy Policy

D.A. Quasar Exchange Co. Ltd · Last updated: January 2025

1. Who We Are

D.A. Quasar Exchange Co. Ltd ("Quasar Exchange", "we", "us", "our") is a Cyprus-registered professional services firm regulated by ICPAC (Institute of Certified Public Accountants of Cyprus). Our registered address is in Nicosia, Cyprus. We are the data controller for personal data collected through this website and in the course of providing our services. If you have any questions about this policy, contact us at advisory@quasarexchange.cy.

2. What Data We Collect

We may collect the following personal data: • Contact information: name, email address, phone number, country of residence • Business information: company name, business type, services you are interested in • Communication records: messages sent through our contact form or by email • Website usage data: pages visited, time spent, browser type, IP address (via analytics tools) • Cookies: session and preference data (see our Cookie section below) We do not collect sensitive personal data (such as health, financial account details, or government ID numbers) through this website.

3. How We Use Your Data

We use your personal data for the following purposes: • To respond to enquiries submitted through our contact form or by email • To provide professional advisory and compliance services to clients • To send service-related communications (e.g. engagement letters, reports, invoices) • To comply with our legal and regulatory obligations as an ICPAC-regulated firm • To improve the content and functionality of this website • To send marketing communications where you have given consent (you may opt out at any time) Legal bases for processing: contract performance, legitimate interests, legal obligation, and consent (where applicable).

4. How Long We Keep Your Data

We retain personal data only for as long as necessary: • Enquiry data (non-clients): up to 12 months from last contact • Client data: for the duration of the engagement plus 7 years, as required by ICPAC regulations and Cyprus tax law • Website analytics data: up to 26 months (aggregated, anonymised) After the applicable retention period, data is securely deleted or anonymised.

5. Who We Share Your Data With

We do not sell your personal data. We may share data with: • Professional service providers acting as data processors on our behalf (e.g. cloud storage, email, accounting software) — all bound by data processing agreements • Regulatory authorities, tax authorities, or law enforcement where required by law • Our professional indemnity insurer where legally necessary We do not transfer personal data outside the European Economic Area (EEA) without appropriate safeguards.

6. Your Rights

Under GDPR, you have the right to: • Access: request a copy of the personal data we hold about you • Rectification: request correction of inaccurate data • Erasure: request deletion of your data (subject to legal retention obligations) • Restriction: request that we limit processing of your data • Portability: receive your data in a structured, machine-readable format • Objection: object to processing based on legitimate interests • Withdraw consent: where processing is based on consent, withdraw it at any time To exercise any of these rights, email us at advisory@quasarexchange.cy. We will respond within 30 days. You also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection (www.dataprotection.gov.cy).

7. Cookies

This website uses cookies to improve your experience. We use: • Essential cookies: necessary for the website to function (cannot be disabled) • Analytics cookies: help us understand how visitors use the site (anonymised data) You can control cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use this website.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our website uses HTTPS encryption. Access to client data is restricted to authorised personnel only.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page with the date of last update. Material changes will be communicated to active clients by email.

10. Contact

For any privacy-related queries or to exercise your rights: Email: advisory@quasarexchange.cy Address: Nicosia, Cyprus D.A. Quasar Exchange Co. Ltd — regulated by ICPAC

This Privacy Policy is governed by the laws of Cyprus and the EU General Data Protection Regulation (GDPR).