Privacy Policy

Introduction

Welcome to the privacy notice of MICHAELS PROPERTIES LTD.

MICHAELS PROPERTIES LTD respects your privacy and is committed to protecting your personal data. This notice explains how we collect and use your personal data when you visit www.theunihome.com to browse or reserve a property (regardless of where you access it from), and outlines your privacy rights and how the law protects you. MICHAELS PROPERTIES LTD manages the marketing, letting and sale of properties listed on our website.

This notice is presented in a layered format so that you can navigate directly to the sections most relevant to you. A glossary is included at the end to clarify key terms used throughout this notice.

1. Important Information and Who We Are

Purpose of this notice: this privacy notice explains how we collect and process your personal data through your use of this website, including data provided when you subscribe to updates, newsletters, offers or promotions, or when you make an enquiry or booking. Our website is not directed at children, and we do not knowingly collect data relating to minors. This notice should be read alongside any other privacy or fair-processing notices we may issue on specific occasions.

Controller: MICHAELS PROPERTIES LTD is the controller responsible for your personal data (referred to as 'the Company', 'we', 'us' or 'our').

Contact details: if you have questions about this notice or our data practices, you can reach us by email at [email protected].

Complaints: we hope to resolve any concern you raise about our use of your information directly. However, you also have the right to lodge a complaint with the Cyprus Commissioner for Personal Data Protection.

Changes to this notice: we review this notice regularly. This version was last updated in July 2026. Please check back periodically for updates, and let us know if your personal details change.

Third-party links: our website may include links to third-party websites, plug-ins or applications. We do not control these third-party sites and are not responsible for their privacy practices; we encourage you to review the privacy notice of every site you visit.

2. The Data We Collect About You

Personal data means any information that can identify an individual. It excludes anonymised data. Certain 'special categories' of sensitive data, such as health information, require additional protection. We may collect, use, store and transfer the following categories of data:

Identity Data: name, username, identification or passport number, nationality, and gender.

Contact Data: current and billing address, delivery address, email address, and telephone numbers.

Emergency Contact Data: names and phone numbers of next of kin or emergency contacts.

Guarantor Data: name, identification details, nationality, address and contact information of any guarantor.

General Data: information such as how you heard about us.

Financial Data: payment card details, including cardholder name, card number, expiry date and security code.

Transaction Data: details of payments and services purchased from us.

Technical Data: IP address, login data, browser type, time zone, and device information.

Profile Data: username, password, purchases, preferences, feedback and survey responses.

Usage Data: information about how you use our website and services.

Marketing and Communications Data: your preferences for receiving marketing and communications from us.

We also collect Aggregated Data, such as statistical or demographic information, which is not treated as personal data unless it is combined with other information that could identify you.

We may occasionally process special categories of sensitive personal data, but only where we have your explicit consent, need to comply with a legal obligation, or it is required in the public interest, and always with appropriate safeguards in place.

If you fail to provide certain personal data that we are contractually or legally required to collect, we may be unable to perform an agreement with you, which could result in cancellation of a reservation or contract; we will notify you if this occurs.

3. How Your Personal Data Is Collected

We collect personal data through direct interactions, such as when you complete an application form, create an account, subscribe to our updates, request marketing materials, enter a promotion, or contact us by phone, email or post.

We also collect Technical Data automatically as you interact with our website, using cookies, server logs and similar technologies. Please see our Cookie Policy for further details.

4. How We Use Your Personal Data

We only use your personal data when the law permits, most commonly where processing is necessary to perform a contract with you, is in our legitimate business interests (balanced against your rights), or is required to comply with a legal obligation. In rarer cases, we may process data to protect your vital interests or for reasons of public interest.

We generally do not rely on consent as our legal basis, except when sending direct marketing communications by email or text. You may withdraw such consent at any time by contacting us.

Purposes for which we use your data include registering you as a client, processing bookings and payments, managing our relationship with you, administering and securing our website, delivering relevant content and advertising, using analytics to improve our services, and making relevant property recommendations.

5. Marketing

We may use your Identity, Contact, Technical, Usage and Profile Data to understand what products or offers may interest you. You will receive marketing communications only if you have requested information, made a booking, or registered on our website without opting out.

You can ask us to stop sending marketing messages at any time by contacting us; this will not affect any data provided in relation to an existing booking or purchase.

Most browsers allow you to manage or disable cookies; please see our Cookie Policy for more information.

We will only use your data for the purpose it was collected, unless a new purpose is compatible with the original one or you are notified of any change.

6. Disclosure of Your Personal Data

We may share your personal data with internal group companies, external service providers such as payment processors, and professional advisers including lawyers, auditors and insurers, all of whom are required to protect your data and use it only for specified purposes. We may also disclose data in connection with a sale, merger or restructuring of our business.

7. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, or disclosure, and we limit access to employees, agents and contractors with a genuine business need. We maintain procedures to respond to any suspected data breach and will notify you and any relevant regulator where legally required.

8. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, tax or regulatory requirements. Data required for tax purposes is generally retained for up to twelve (12) years, while other data is typically retained for a maximum of three (3) years after our contractual relationship ends, unless a longer period is required by law or necessary to resolve a dispute.

9. Your Legal Rights

Under applicable data protection law, you have the right to:

Request access to the personal data we hold about you.

Request correction of inaccurate or incomplete data.

Request erasure of your data where there is no valid reason for us to continue processing it.

Object to processing based on legitimate interests or direct marketing.

Request restriction of processing in certain circumstances.

Request the transfer of your data to you or a third party.

Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, please contact us at [email protected]. We do not usually charge a fee for such requests, though we may charge a reasonable fee for repetitive or excessive requests, and we may ask you to verify your identity before responding. We aim to respond within thirty (30) working days.

10. Glossary

Legitimate Interest means our interest in conducting and managing our business to provide you with the best possible service, balanced carefully against your rights and interests.

Performance of Contract means processing necessary to fulfil a contract with you, or to take steps at your request before entering into one.

Compliance with a Legal Obligation means processing necessary for us to comply with applicable law or regulation.

Internal Third Parties refers to other companies within our corporate group that may act as joint controllers or processors.

External Third Parties includes service providers such as payment processors, and professional advisers including lawyers, auditors, bankers and insurers based in Cyprus.