Privacy Policy

Last updated: October 27, 2026

Welcome to MESOGILL HOLDINGS LTD (hereafter referred to as "MESOGILL", "we", "us" or "our"), a company registered in Cyprus, with registered address at 155 Arch. Makariou III, Proteas House, 5th Floor, 3026 Limassol, Cyprus.

This Privacy Policy explains how we collect, use, store and protect personal data of visitors to our website and of persons who contact us. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the applicable laws of the Republic of Cyprus. By using our website, you acknowledge that you have read and understood this Privacy Policy.

1. Introduction

MESOGILL HOLDINGS LTD acts as the data controller for the personal data described in this Privacy Policy. We process personal data only where we have a lawful basis to do so, namely:

• Consent — where you have given clear consent for a specific purpose (for example, marketing communications or non-essential cookies);
• Performance of a contract — where processing is necessary to respond to your request or to enter into or perform a contract with you;
• Legitimate interests — where processing is necessary for our legitimate interests, such as ensuring the security of our website and improving our services, provided those interests are not overridden by your rights.

2. Information we collect

2.1. Information you provide to us

When you submit the contact form on our website or contact us by email, we may collect the following data: your name, company name, email address, phone number or messenger username, and the content of your message. We use this data to respond to your request and to discuss possible cooperation.

2.2. Log data

When you visit our website, our servers may automatically record information that your browser sends ("Log Data"). This may include your IP address, browser type and version, the pages of our website you visit, the time and date of your visit, the time spent on those pages and other statistics. We process Log Data on the basis of our legitimate interest in ensuring the security and proper operation of our website.

3. Cookies and tracking technologies

Cookies are small text files placed on your device when you visit a website. We may use the following types of cookies:

• Strictly necessary cookies — required for the website to function properly. They cannot be switched off in our systems.
• Analytical / performance cookies — help us understand how visitors use the website, so that we can improve its content and performance.
• Targeting / remarketing cookies — may be used by us and our advertising partners to show you relevant advertising on third-party websites.

Non-essential cookies are used only with your consent where required by law. You can manage or delete cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the website.

4. Google Analytics

Our website may use Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to collect information about how visitors use the website, such as pages visited and time spent on the site. This information is used in aggregated form to compile reports and to help us improve the website.

You can prevent the collection of data by Google Analytics by adjusting your browser settings or by installing the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

5. How we use your data

We may use the personal data we collect for the following purposes:

• to respond to your inquiries and requests submitted via the contact form or email;
• to prepare proposals and to enter into and perform contracts with you;
• to provide, operate and maintain our website;
• to analyse website usage and improve our website and services;
• to ensure the security of our website and prevent fraud;
• to send you newsletters and marketing communications, where you have consented to receive them.

Where processing is based on your consent, you may withdraw it at any time by using the unsubscribe link in our emails or by contacting us at agency@mesogill.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

6. Service providers and third parties

We may engage trusted third-party companies and individuals to perform services on our behalf, such as website hosting, analytics, email delivery and CRM services. These service providers have access to your personal data only to the extent necessary to perform these tasks and are obliged not to disclose or use it for any other purpose. We do not sell your personal data to third parties.

7. International data transfers

Your data may be processed in Cyprus and in other countries where our service providers operate, including the United States (for example, in connection with Google Analytics). Where personal data is transferred outside the European Economic Area, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

8. Compliance with laws and disclosure

We may disclose your personal data where required to do so by law or in response to valid requests from public authorities, such as a court order, subpoena or request from law enforcement agencies.

9. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to comply with our legal, accounting and reporting obligations, to resolve disputes and to enforce our agreements. When personal data is no longer needed, we delete or anonymise it.

10. Your data protection rights under GDPR

If you are located in the European Economic Area, you have the following rights regarding your personal data:

• the right to access the personal data we hold about you;
• the right to rectification of inaccurate or incomplete data;
• the right to erasure ("right to be forgotten");
• the right to restriction of processing;
• the right to object to processing;
• the right to data portability;
• the right to withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us using the details below. We will respond to your request within one month. You also have the right to lodge a complaint with a supervisory authority — in Cyprus, the Office of the Commissioner for Personal Data Protection.

11. Links to other sites

Our website may contain links to third-party websites. If you click on a third-party link, you will be directed to that site. These websites are not operated by us, and we strongly advise you to review their privacy policies. We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

12. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.

13. Children's privacy

Our website and services are intended for businesses and are not directed to anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us, and we will take steps to delete such information.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Where changes are significant, we may also notify you by email or by a notice on our website.

15. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us: