Privacy policy

Who we are

todiktio.com.cy is a Renewable Labs product, operated by SK Renewable Laboratory Limited. SK Renewable Laboratory Limited is the controller: it decides how the personal data described here is used. Postal address: Egyptou 10, Nicosia 1097, Cyprus. For anything about your data, contact us at [email protected].

What data we process

• Parcel lookups. When you select a parcel we query the public sources at the moment of the lookup. To count the free reports, we record which parcel was opened on which day, together with a random identifier stored in your browser, or with your account if you are signed in. The identifier is pseudonymous: it holds no name, but it becomes linked to your email if you later leave it in a contact request (see below). We do not use these records for profiling or advertising.
• Account. If you sign in, we keep your email, a display name if you give one, the parcels, projects, site checks and watch lists you create, the reports you open (to count your daily allowance), your purchases and, if you subscribe, your plan and Stripe customer reference. If you choose «Continue with Google» where it is offered, Google shares your name, email address and profile picture with our sign-in service. You can request deletion.
• Payments. Payments run through Stripe. We never see or store card details.
• Title deed. For the professional parcel check, after payment you can upload the plot’s title deed (PDF or photo). It is stored privately and seen only by our team, solely to prepare your check. When you upload it, our team gets an email notice with a private download link that expires after 24 hours; the document itself is not attached to that email. It is optional at the time; if you do not upload it we will ask for it by email. You can request its deletion.
• Analytics. With your consent, we use Google Analytics for traffic statistics (see «Cookies and analytics» below).
• How you found us. When paying for a parcel check you may optionally pick how you heard about us, from a fixed list of choices (no free text). It is used only to understand, in aggregate, how customers find the service; it is not used to identify you or build a profile, and the order completes normally if you leave it blank.
• How you arrived. The free parcel check counts its uses with the random browser identifier described above, created only when you select a parcel. Alongside it we keep one broad category for how you reached the site (for example Instagram, Google, direct) and, if you came from one of our ads, the campaign name. We do not keep the address of the page you came from or your IP address, and we create no identifier for someone who only reads the site. Separately, with no identifier and no cookie, we count each arrival on the site: the same broad category, the campaign name and medium from our own ad link, and the page you landed on. That count is not linked to you, to your later visits or to the browser identifier, so it needs no «Accept». Linked to the browser identifier, the category and campaign are recorded only if you choose «Accept» on the cookie banner. Neither is recorded if your browser sends a «Global Privacy Control» or «Do Not Track» signal. We leave our own browsers out of these counts by opening the site on them with a special link (?internal=1). Any browser that opens such a link is marked in the same way, with the same browser identifier, even without «Accept» and even if it sends those signals, because the mark only reduces what we count. Nothing else is recorded, and opening any page with ?internal=0 removes the mark.
• How the map performs. To improve the map, we record anonymously how long a parcel search takes and what came back (for example found, not found, the Land Registry was slow), how long each part of the report takes, and whether the report was closed before it was ready. Each record holds only such fixed values, the duration, the language, whether the device is a phone or a computer, and the day (not the time). It holds no identifier, not the parcel or anything you typed, no IP address and no cookie, so it is not linked to you or to any other record and needs no «Accept». It is not made if your browser sends a «Global Privacy Control» or «Do Not Track» signal.
• Contact request about a parcel. On the free report you may optionally leave your email so we can write to you about that specific parcel. We keep the email, the parcel number and the free check’s browser identifier, only to reply to you and to understand where you found us. Our email provider (Resend, see «Third parties») delivers it to us. We also record the email, the parcel number and, when we know it, the source of your visit in our own customer management system, hosted by Supabase, to keep track of our reply; the browser identifier is not transferred there. We share it with no one else, do not add you to any list and do not send you marketing emails. You can ask for it to be deleted from all our systems.
• Parcel report by email. On the free report you may optionally ask for the key findings about the parcel to be sent to your email. We keep what we keep for a contact request above, plus when the report was sent, and record it the same way. Your email is used only to send you this report and at most one more message about the same parcel, a few days later, about the professional check. If you do not want that second message, reply to the first. We do not add you to any list and send you no other emails. You can ask for it to be deleted from all our systems.
• Quote for several plots. If you ask for a quote for two or more plots, we receive your email and the list of plots with their outlines, only to prepare and send you the quote.

Cookies and analytics

The core site works without tracking cookies. Google Analytics is loaded only if you choose «Accept» on the consent banner; until then nothing is requested from Google and no analytics cookie is written. Once you accept, Google Analytics, provided by Google Ireland Ltd, sets cookies (_ga, _ga_…) holding a pseudonymous identifier and receives your page views; the data may be processed by Google LLC in the USA under the EU-US Data Privacy Framework. It never runs on the sign-in and account pages. You can change your choice at any time from «Cookie settings» in the footer; «Decline» stops Google Analytics and deletes its cookies.

Third parties

We rely on:

• Supabase (database, accounts, sign-in and file storage)
• Render (hosts the website)
• Cloudflare (content delivery)
• Stripe (payments)
• Resend (sending our service emails, including notices to our team about orders, quote and contact requests, which contain your email address and plot references, and the parcel report you ask us to email you)
• Postmark (notices to our team from our customer management system, which may contain your email address and plot reference)
• Google (Analytics, only after «Accept»; sign-in, only if you choose «Continue with Google»; satellite imagery, only if you switch on the «Google» map layer)

Each processes data only for the purpose described here. Some of them are based in the USA or may process data there; where a provider processes data outside the EU, it does so under the safeguards in its data processing terms.

The map images come from Esri, OpenFreeMap and the Department of Lands and Surveys. Your browser fetches them directly, so those services see your IP address, as with any website; we send them nothing else. If you switch on the «Google» satellite layer, Google Maps loads in your browser and Google sees your IP address and the part of the map you are viewing.

Legal bases

• Purchases, the title deed and your account: to perform the service you asked for (GDPR Art. 6(1)(b)); purchase records also to meet our tax obligations (Art. 6(1)(c)).
• Contact and quote requests: to act on your request (Art. 6(1)(b)); linking a contact request to how you found us: our legitimate interest in knowing which channels work (Art. 6(1)(f)).
• Counting free reports and bot protection: our legitimate interest in offering a limited free service and protecting it from abuse (Art. 6(1)(f)).
• Running the website, the map and our service emails: our legitimate interest in providing a working and secure website (Art. 6(1)(f)).
• Counting arrivals without cookies or identifiers (how many people arrive, from which broad source and campaign): our legitimate interest in knowing whether our ads work (Art. 6(1)(f)).
• Anonymous records of how the map performs (search and report times and results, with no identifiers): our legitimate interest in finding what is slow or broken and fixing it (Art. 6(1)(f)).
• Google Analytics and campaign measurement linked to the browser identifier: your consent (Art. 6(1)(a)), given with «Accept».

We make no automated decisions about you and do no profiling. Giving your email is needed only to buy a check, create an account or get a reply; the map and the free report work without it.

How long we keep data

We are setting a fixed period for each kind of data (contact and quote requests, title deeds, purchase records and the free-check records), and it will be published on this page. Until then, you can ask us at any time to delete your data at [email protected]. Invoices are kept for the period tax law requires.

Your rights

Under the GDPR you have the right to access, rectify, erase and port your data, to restrict processing and to object to it. You can withdraw any consent at any time from «Cookie settings» in the footer; this does not affect what was done before. To exercise a right or have your data deleted, write to us at [email protected] from the address concerned; we may ask you to confirm it is yours, and we reply within one month. You can also complain to the Commissioner for Personal Data Protection in Cyprus (www.dataprotection.gov.cy).