Privacy Policy

Dale Kirkwood LTD · www.water.cy · Last updated 27 September 2026

Who we are

Dale Kirkwood LTD ("GEKO Water", "we") is the data controller for personal data processed through www.water.cy. Contact: info@water.cy.

Data we collect

Account: name, email address, password (hashed), phone number, delivery city.
Deliveries: saved addresses (label, street, coordinates), delivery notes, order history.
Subscriptions: plan, delivery day, household size, subscription status.
Payments: payment status and order references. Card details are processed by our payment provider (Revolut) and never reach our servers.
Technical: essential cookies/local storage needed to run the app (see our Cookie policy).

Why we process it (legal basis)

Contract: to create your account, take orders, deliver water, and manage subscriptions.
Legal obligation: invoicing and tax records.
Consent: non-essential cookies, if we ever add them.

Retention

Account data is kept while your account is active. Order records are kept for 6 years for tax purposes. You can request deletion of your account at any time; records we must keep by law are anonymised where possible.

Your rights (GDPR)

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. You may withdraw consent at any time. You can also lodge a complaint with the Cyprus Commissioner for Personal Data Protection (dataprotection.gov.cy). To exercise any right, email info@water.cy — we respond within 30 days.

Sharing

We share data only with processors needed to run the service: our payment provider (Revolut), hosting, and mapping/search services (address lookup). We never sell your data.

Security

Data is stored encrypted in transit and at rest, access is restricted, and payment data is handled exclusively by PCI-DSS-certified Revolut.