Carcy
Check a car
Legal & Compliance

Privacy & Cookie Policy

How Carcy collects, uses, and safeguards information when you request a vehicle pre-purchase inspection report in Cyprus.

Last updated: September 15, 2026 • Compliant with EU GDPR & Cyprus Law 125(I)/2018

1. Data Controller

Carcy ("Carcy", "we", "us", or "our"), operating at carcy.me, acts as the data controller for personal data processed through our automotive pre-purchase audit platform in the Republic of Cyprus.

If you have any questions regarding your privacy, data rights, or wish to request data deletion, you can contact our privacy desk at: [email protected].

2. Information We Collect

We believe in minimal data collection. We only collect information strictly required to perform car checks and deliver your audit report:

Bazaraki Listing URLsThe public link to the car advertisement you submit for verification (e.g. make, model, year, listed price, mileage, seller specifications).
Email Address (Optional)If provided, we use your email solely to deliver the completed vehicle analysis report and notify you of inspection progress. You can submit requests and view reports online via your reference code without providing an email.
Technical Reference Codes & Audit LogsA unique 5-digit alphanumeric code (e.g. CCY-XXXXX) and an access token generated to allow you to look up your vehicle inspection report online.

3. Legal Basis and How We Use Your Data

Under GDPR Article 6, our processing of your information is based on:

  • Performance of a Service / Contract: Analyzing vehicle listings, calculating fair market valuations, cross-referencing import data, and generating mechanical inspection reports.
  • User Consent: Sending the completed audit directly to your provided email address.
  • Legitimate Interests: Preventing automated abuse, maintaining platform security, and refining Cyprus automotive pricing benchmarks.

4. Cookie & Local Storage Policy

Carcy takes a privacy-first stance on cookies. We do not use third-party advertising cookies or cross-site tracking trackers.

Essential Operational Cookies & Storage

We only use strictly necessary technical session cookies (for administrative passcode authentication) and local memory to display your reference codes. These cookies do not store personally identifiable profiles or track you across the web.

5. Third-Party Sharing & Disclosure

We never sell, rent, or trade your personal information or submitted listing requests to third-party advertisers or insurance brokers.

Vehicle specifications and listing links are processed through our automated inspection systems and shared with our independent inspection partners in Cyprus only when on-site inspection services are requested. Inspection photos are stored with your private report. No contact details are shared with sellers or third parties without your explicit authorization.

6. Your Rights Under EU GDPR

As an individual in Cyprus / the European Union, you hold the following rights:

Right of AccessRequest a complete copy of all data associated with your email or reference code.
Right to Erasure ("To Be Forgotten")Request immediate and permanent deletion of your inspection requests and email.
Right to RectificationCorrect or update any inaccurate contact details or listing information.
Right to Object & RestrictOpt out of any further notifications or processing at any time.

7. Data Retention & Security

We retain vehicle inspection request records only for as long as necessary to fulfill the inspection service and allow users to access their reports. You may request deletion of your record at any time by emailing [email protected] with your reference code.

All network transmissions are secured via TLS encryption (HTTPS), and administrative dashboards are protected by strict token authentication.

Questions or Requests?

Contact Our Data Protection Officer

For data access requests, deletion requests, or questions regarding our Cyprus automotive inspection verification practices: