Privacy Policy
Last updated 15 September 2026
This policy explains what RIGID Engineering & Construction Ltd (trading as RIGID Residential, "we") collects when you visit rigidrent.com, send us an enquiry, or use the resident portal and the RIGID app, why we hold it, who we share it with and what you can ask us to do with it. We are the data controller for this information under the EU General Data Protection Regulation (GDPR) and the Cyprus Law 125(I)/2018.
Who we are and how to reach us
RIGID Engineering & Construction Ltd, Nicosia, Cyprus.
Email info@rigidresidential.com or call +357 99 651 856 (Mon to Fri, 9:00 to 18:00). We do not have a data protection officer; requests about your data go to this email address.
What we collect, and why
If you just visit the website. Our hosting provider records standard server logs (IP address, browser type, pages requested, time) to keep the site running and secure. We also use Vercel Web Analytics, which counts page views without cookies and without storing your IP address or a persistent identifier. Legal basis: our legitimate interest in operating a secure website and knowing which pages are used.
If you send an enquiry. The name, email address, phone number (optional), subject, category and message you type into the contact form or an apartment enquiry, and the apartment or building it relates to. We use this only to answer you and to arrange a viewing if you ask for one. Legal basis: steps taken at your request before entering into a contract, and your consent given by ticking the box on the form.
If you are a resident with a portal or app account.
- Account: your name, email address and phone number, held in Amazon Cognito so you can sign in. Passwords are stored only by Cognito in hashed form; we never see them.
- Tenancy: your apartment number, building and tenancy status, so a request or a rent record is matched to the right apartment.
- Maintenance requests: what you report, when, any photographs you attach, and whether you have allowed staff to enter while you are out.
- Rent records: amounts due and paid, due dates and your payment reference. Neither the website nor the app takes payments, and we do not hold card numbers or bank login details.
- Parking: your parking request or assigned space, if the building has parking.
- Notification token: if you allow notifications in the app, an identifier for your device so we can tell you about your requests, rent and building notices. You can switch this off at any time in your phone settings.
Legal basis for resident data: performance of your tenancy agreement, our legitimate interest in running the buildings safely and keeping records of work done, and our legal obligations to keep accounting records. Notifications rely on your consent.
If you are a member of staff. Your name, email address and role, so the portal can give you the right access and record who handled a request.
We do not use any of this data for advertising, we do not build profiles, and we do not sell it.
Cookies and local storage
The website sets cookies only when you log in, and they exist solely to keep you signed in securely. We do not use advertising or tracking cookies, so no cookie banner is shown. The full list is in our Cookie Policy.
Who else sees your data
- Our staff and building managers, who need it to answer you, carry out repairs and manage the building. Residents can only ever see their own apartment's information.
- Tradespeople and contractors we send to carry out a repair receive only what they need for that job, normally the apartment number and a description of the fault, and your phone number if access has to be arranged with you.
- Amazon Web Services (AWS), which hosts the backend and stores all resident data on our behalf in the AWS Europe (Frankfurt) region, inside the EU.
- Vercel Inc., which hosts the website and provides the cookieless page view statistics described above.
- Expo, Apple and Google, only to deliver push notifications to your phone. The text of a notification passes through their servers.
- YouTube, if you choose to play a video tour of an apartment. The video loads only after you press play, in privacy-enhanced mode; see the Cookie Policy.
- Authorities and advisers where the law requires it or where we need to establish or defend a legal claim.
Where a provider processes data outside the European Economic Area (for example Vercel, Expo, Apple or Google in the United States), the transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework or on the Commission's Standard Contractual Clauses.
How long we keep it
- Enquiries: up to 12 months after our last contact with you, unless a tenancy follows, in which case the enquiry becomes part of your tenancy file.
- Maintenance requests: closed requests are deleted automatically 60 days after they are completed.
- Account, tenancy and rent records: for as long as you are a resident, and afterwards for as long as Cyprus tax and accounting law requires us to keep financial records (currently six years after the end of the tax year concerned).
- Server logs and page view statistics: logs are kept for a short period for security and are then deleted; page view statistics contain no personal data.
Deleting your account
You can delete your account yourself from the app, under Account, or ask us to do it. This permanently removes your sign-in and your resident record, and you will no longer be able to log in. Records we must keep for legal or accounting reasons, such as the history of rent charged and paid, are retained for the period above and then deleted.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive the data you gave us in a portable format. Where we rely on consent, you can withdraw it at any time without affecting what was done before. Write to info@rigidresidential.com and we will respond within one month. We may ask you to confirm your identity first.
If you are unhappy with our response, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority in the EU country where you live.
Security
Data is encrypted in transit and at rest. Sign-in tokens are kept in HttpOnly cookies on the website and in the secure keychain on your phone. Access is limited to staff who need it, and every backend request is checked against your role before any data is returned.
Children
The website, portal and app are meant for adults who rent or enquire about an apartment. We do not knowingly collect data from anyone under 18.
Changes to this policy
We will post any changes on this page and update the date at the top. If a change affects residents in a significant way, we will also tell you through the portal or the app.