Privacy Policy
Last updated: 16 October 2026
This Privacy Policy explains how personal data is handled when you use berkos.co, contact us through the website or speak to our team. It applies to this website only. The Israeli website berkos.co.il has its own policies.
1. Introduction and data controller
The data controller for personal data collected through this website is Berkos Serene Residences Ltd (company registration number HE 433204), registered office Andrea Kalvou 5, Floor 1, Office 101, 3085 Limassol, Cyprus.
Individual property projects shown on this website may be developed or sold by other legal entities within the BERKOS group. If you go on to reserve or buy a property, the seller named in your contractual documents may also process your data as a separate controller, and will inform you of this.
2. Information we collect
- Details you give us: name, telephone number, email address and the content of your messages.
- Consent choices: privacy consent, marketing consent and your cookie choice.
- Submission context: the date and time, the page address you submitted from and the language version of the site.
- Usage information, only if you accept analytics cookies: pages viewed, approximate location, device and browser type, and how you reached the site.
3. Website enquiries and contact forms
When you submit the homepage form or the Contact page form, your details are first saved in our lead database and then forwarded through Zapier to our customer relationship management (CRM) system, Zoho CRM, so that our team can reply. Each submission receives a unique reference so that it is not recorded or forwarded twice.
4. Property enquiries and sales communications
We use your details to answer your questions, send information you request about projects, arrange calls or viewings and follow up on your enquiry. If you proceed with a reservation or purchase, further information will be collected under the relevant contractual documents.
5. Kobi digital assistant and WhatsApp communications
Kobi is BERKOS's AI-powered digital property assistant, operated by BERKOS on our WhatsApp channel. The website shows a pop-up inviting you to contact Kobi, and also contains standard WhatsApp links to our team. Clicking these opens WhatsApp, operated by WhatsApp (Meta). No message is sent until you choose to send it.
When you message Kobi, your messages (including any voice messages) are handled through WOZTELL, which stores and displays the conversation history for our team. Conversation content is sent to OpenAI through its API to generate replies and, for voice messages, to transcribe them. Replies are generated automatically and our team may review the conversation and take over. Lead details are passed to Zoho CRM, where our team can view the WhatsApp conversation history through the WOZTELL integration.
WhatsApp, WOZTELL and OpenAI also process data under their own terms. The pop-up stores small records in your browser to avoid showing it again too often (see the Cookie Policy).
6. Blog email form
The blog includes a form where you can leave your email address to register interest in future BERKOS updates. Your email address, the page and the language version you used are saved in our lead database. We do not currently send newsletters or marketing emails, and no email marketing service is connected. Submitting your address does not by itself authorise future marketing; before any marketing emails are sent, we will make sure there is a valid legal basis and a way to opt out. You can ask us to delete your address at any time.
7. Website analytics and cookies
We use Google Analytics 4 only if you click Accept in the cookie banner. Full details are in our Cookie Policy.
8. Purposes and legal bases
- Replying to enquiries and taking pre-contract steps at your request: steps prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to people who contact us (Article 6(1)(f)).
- Storing email addresses submitted through the blog email form: your consent (Article 6(1)(a)). Any future marketing emails will only be sent on a lawful basis and with a way to opt out.
- Kobi WhatsApp assistant: steps at your request prior to a contract and our legitimate interest in answering enquiries (Article 6(1)(b) and (f)).
- Analytics through Google Analytics 4: your consent (Article 6(1)(a)).
- Keeping records of enquiries and protecting our legal position: our legitimate interests (Article 6(1)(f)).
- Meeting legal, tax and anti-money-laundering obligations: legal obligation (Article 6(1)(c)).
9. Service providers and recipients
We share personal data only with providers that help us run the website and handle enquiries:
- Lovable and its infrastructure providers: website hosting and lead database.
- Zapier: forwarding website enquiries to our CRM.
- Zoho: Zoho CRM (European service, crm.zoho.eu), used by our sales team to manage leads and to view WhatsApp conversation history through the WOZTELL integration.
- WOZTELL: operates our WhatsApp assistant Kobi and stores and displays conversation history.
- OpenAI: processes Kobi conversation content to generate replies, including voice message transcription.
- Google: Google Analytics 4 (with consent) and the Google Maps map embedded in the footer (with consent).
- WhatsApp (Meta): when you choose to message us on WhatsApp.
We may also share data with professional advisers, or with authorities where required by law.
10. International transfers
Some of the providers listed above, or their sub-processors, may process personal data outside the European Economic Area, including in the United States. Where personal data is transferred outside the EEA, such transfers are intended to take place under a recognised legal mechanism, such as an adequacy decision (including the EU-US Data Privacy Framework, where the provider is certified) or the European Commission's Standard Contractual Clauses offered in the provider's terms. The safeguards that apply depend on the provider. You can contact us for more information.
11. Data retention
We retain personal information relating to property enquiries and prospective customers for as long as reasonably necessary to respond to enquiries, manage prospective transactions and fulfil applicable legal obligations. We have adopted a policy of reviewing prospect records after 12 months of meaningful inactivity. Continued retention after that point depends on a legitimate, documented need or an applicable legal obligation; otherwise the information will be deleted or anonymised. Different retention periods may apply to completed transactions, contractual records and information required for legal or regulatory purposes.
Meaningful activity includes substantive customer communication, an active property enquiry, negotiation, transaction progress or documented follow-up requiring continued retention. Automated messages, internal record views and system updates do not reset the inactivity period. Requests for erasure or objection are handled when received, independently of this review.
Email addresses submitted through the blog email form are kept until you ask us to remove them, or until they are no longer needed for the purpose described above, subject to any applicable legal retention requirements.
Our verified Google Analytics 4 settings are: event data retention of 2 months and user data retention of 14 months. Reset on new user activity is enabled. Where this setting applies, new activity resets the relevant user's retention period.
These settings apply to the relevant user-level and event-level data controlled by GA4 retention settings. They do not necessarily determine how long aggregated analytics reports or all data held by Google are retained. See our Cookie Policy for cookie durations and consent controls.
12. Information security
The lead database can only be read by staff accounts that we have specifically authorised. Data travels over encrypted connections. No method of storing or sending data is completely secure, but we take reasonable steps to protect it.
13. Your rights
Under the GDPR you may ask to access, correct or delete your personal data, restrict or object to its processing, and receive your data in a portable format. You may object at any time to processing based on our legitimate interests and to direct marketing. To make a request, contact us using the details below.
14. Withdrawing consent
You can withdraw consent at any time. For cookies, use the Cookie Settings link in the website footer. To have an email address submitted through the blog form deleted, contact us. Withdrawal does not affect processing that took place before it.
15. Complaints
You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy) or to the supervisory authority where you live or work. We would appreciate the chance to address your concern first.
16. External websites and third-party services
This website links to third-party services such as WhatsApp, Instagram, Facebook, YouTube, LinkedIn, TikTok and Google Maps. Their handling of your data is governed by their own policies.
17. Changes to this policy
We may update this policy. The date at the top shows when it was last changed.
18. Contact details
- Berkos Serene Residences Ltd, company registration number HE 433204
- Registered office: Andrea Kalvou 5, Floor 1, Office 101, 3085 Limassol, Cyprus
- Business address: Apostolon Petrou & Pavlou 27, Limassol, Cyprus
- Telephone: +357 77 788 776
- Email: info@berkos.co