Legal
Privacy Policy
How OneJar Ltd collects, uses and protects personal data through this website, and your rights under the GDPR. This policy should be read alongside our Cookie Policy.
1. Who we are
Data Controller: OneJar Ltd. Registered office: Berengaria Building, 25 Spyrou Araouzou Street, 3036, Limassol, Cyprus. Contact for privacy matters: hi@one-jar.com · +357 25 040 546.
2. What personal data we collect
Data you provide directly
Contact form submissions (name, email, phone, company, message); newsletter subscriptions (email, opt-in timestamp, source page); Schedule a Call bookings via Microsoft Bookings; and careers enquiries (name, email, CV or LinkedIn).
Data collected automatically
Technical data such as IP address, browser, operating system, device type, referring page and pages visited; and cookies and similar technologies (see our Cookie Policy).
Data we do not collect
We do not collect special categories of personal data (health, racial or ethnic origin, religious beliefs, sexual orientation, political opinions, trade-union membership, biometric or genetic data) through this website.
3. How we use your personal data
Responding to enquiries
To respond and progress a potential relationship. Lawful basis: legitimate interests, and steps prior to entering a contract.
Sending newsletters
To send Cyprus HR insights and updates. Lawful basis: consent — withdraw any time via the unsubscribe link.
Improving the website
Aggregated, anonymised usage analysis. Lawful basis: legitimate interests.
Careers enquiries
To assess applications and communicate. Lawful basis: steps prior to a contract, and legitimate interests in a talent pipeline, subject to your right to deletion.
Legal compliance
Where required to comply with law or defend legal claims. Lawful basis: legal obligation or legitimate interests.
4. Who we share your data with
We do not sell personal data. We share it only with service providers acting on our behalf (Microsoft Bookings for scheduling; our newsletter email provider; website analytics; hosting and infrastructure), each contractually bound to process data only as instructed by OneJar.
We may also share data with our professional advisors, and with regulatory authorities or law enforcement where legally required. We do not share data with third parties for their own marketing, and do not transfer data outside the EU/EEA without appropriate safeguards.
5. How long we keep your data
We retain data only as long as necessary, or as required by law. Contact enquiries: 24 months from last interaction. Newsletter: until you unsubscribe. Schedule a Call bookings: 24 months. Unsuccessful careers enquiries: 12 months from decision (longer with consent). Successful applications transfer to employee records. Anonymised analytics: 26 months. You can request earlier deletion at any time.
6. Your rights under GDPR
You have the right of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection (Iasonos 1, 1082 Nicosia, +357 22 818 456, commissioner@dataprotection.gov.cy). To exercise any right, contact hi@one-jar.com — we respond within 30 days.
7. Cookies, security & international transfers
This website uses strictly necessary, functional and analytics cookies; we do not currently use marketing cookies. A cookie consent banner lets you accept or decline non-essential cookies, changeable any time via the footer. See our Cookie Policy for details.
We protect data with HTTPS/TLS encryption, access controls, regular reviews of providers, staff training, and breach-response procedures, notifying you and the Commissioner where required. Where providers process data outside the EU/EEA, we rely on adequacy decisions, Standard Contractual Clauses or other GDPR Chapter V safeguards.