Last updated: October 2026
This Privacy Policy (“Policy”) explains how BEESPARK INVEST LTD (“we,” “our,” or “us”) collects, uses, stores, and shares your personal data when you visit our website (the “Website”) or use our services (the “Services”). It also describes your rights regarding your data and how to exercise them.
By using our Website or Services, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue using the Website and Services.
1. Who we are
Reputation City is a reputation security consultancy operated by BEESPARK INVEST LTD, a company registered in Cyprus under number HE 455050, with its registered address at Georgiou A 83, Shop 17, Germasogeia 4047, Limassol, Cyprus.
BEESPARK INVEST LTD is the controller of the personal data described in this policy. You can contact us about data protection at hi@reputation.city.
We have not appointed a Data Protection Officer, as the law does not require one for the scale of our processing. Data protection requests are handled by our Director.
2. Key terms
- Personal Data – any information relating to an identified or identifiable natural person.
- Processing – any operation performed on Personal Data, such as collection, recording, organization, storage, use, disclosure, or deletion.
- Controller – the entity that determines the purposes and means of processing Personal Data.
- Processor – an entity processing Personal Data on behalf of the Controller.
- User / Client – any individual visiting the Website or using the Services.
Services – any products or services offered through the Website.
3. Who this policy is for
This policy explains how we handle personal data about:
- visitors to our website reputation.city;
- our clients and their representatives;
- people we contact for business, such as partners, journalists and event contacts;
- people whose information we review in the course of client work. This includes owners and executives of client companies, and people who are named in, or are the authors or publishers of, public content about our clients.
If you are in the last group, section 6 explains what we do with your information and what rights you have.
4. Information we collect from clients and website visitors
Information you give us
- name, job title and professional details, company, email address, phone number and postal address;
- information you share about your company, its owners and executives for the purposes of our work;
- billing and payment details;
- identity documents, where we ask for them to verify who we are working with. These documents may show your photo, date of birth, nationality and gender.
Information collected automatically on our website
When you visit our website, our technology providers and we collect your IP address, browser and device type, operating system, language settings, pages viewed and how you move between them, referring website, time of visit, and the preferences you set during your session. Some of this is collected through cookies. See section 10.
Information about other page
If you give us information about other people, such as your company’s owners, executives or authorised representatives, you must make sure you have the right to share it with us.
Sensitive information
We do not intentionally collect sensitive data from clients or website visitors, such as racial or ethnic origin, political opinions, religious beliefs or health data. Section 6 explains how we handle such information if it appears in public material we review.
5. Why we use your information and our legal basis
We use personal data only where we have a valid legal basis under the General Data Protection Regulation (GDPR):
- Delivering our services under a contract. Information used: contact details, information about the client company and its executives. Legal basis: contract (Art. 6(1)(b)).
- Customer support and communication about our services. Information used: contact details and our correspondence with you. Legal basis: contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
- Checking who we work with before taking on a client. Information used: company and ownership information, identity documents where requested. Legal basis: legitimate interests (Art. 6(1)(f)).
- Invoicing, accounting and tax. Information used: billing and payment details. Legal basis: contract and legal obligation (Art. 6(1)(b) and (c)).
- Answering enquiries. Information used: contact details and your message. Legal basis: legitimate interests (Art. 6(1)(f)).
- Service and administrative notices, such as changes to our terms or to this policy. Information used: name and email. Legal basis: legitimate interests (Art. 6(1)(f)).
- Newsletters and event invitations. Information used: name and email. Legal basis: consent (Art. 6(1)(a)). You can unsubscribe at any time.
- Website analytics and advertising cookies. Information used: cookie and device data. Legal basis: consent (Art. 6(1)(a)), given through our cookie banner.
- Preventing fraud and protecting the security of our website and systems. Information used: website and device data, and contact details where relevant. Legal basis: legitimate interests (Art. 6(1)(f)) and, where applicable, legal obligation (Art. 6(1)(c)).
- Responding to legal requests and protecting our legal rights. Information used: information relevant to the request or claim. Legal basis: legal obligation or legitimate interests.
We do not sell, rent, or trade personal data. We do not make decisions about people based solely on automated processing.
Newsletters and event invintations
If you subscribe to our newsletter or updates, we may send you information about our services, events, and offers. You can unsubscribe at any time by clicking the link in any of our marketing emails or by writing to hi@reputation.city.
6. Information about people we review in client work
Our clients ask us to find out how their company and its leaders appear in search engines, AI tools, media, and public registers, and to address false, outdated, or harmful information. To do this, we review publicly available information. This information may include personal data about people other than our client.
Whose information
- owners, directors and executives of client companies;
- people named in public content about our clients;
- authors, publishers and owners of websites or accounts that published content about our clients.
What information
Names, job titles, company roles, public statements, media articles, social media posts, entries in public company and court registers, and publication content about our clients. Where public sources contain allegations of wrongdoing, including allegations of criminal offenses, we may review them because they affect our client. We do not seek out information about health, religion, political opinions, sexual life or ethnic origin. If it appears in material we review, we do not record it unless it is directly relevant to the client’s case.
Where it comes from
Search engines, AI assistants, online media, social media, public company and court registers, compliance databases where accessed, and our clients.
Why and on what bias
We rely on legitimate interests (Art. 6(1)(f) GDPR): our clients’ interest in knowing what information about them is available and in correcting information that is false or unlawful, and our interest in providing this service. We have assessed these interests against the rights of the people concerned. We limit what we collect to what the client case needs. Where public content contains allegations of criminal offences, we review it only to the extent needed to identify and correct false or unlawful information about our client, or to establish, exercise or defend legal claims. We do not build records of criminal allegations about individuals.
What we do and do not do
- We check facts against several sources before treating them as accurate.
- We request removal or correction of content only when it is false, outdated, unlawful or breaks the rules of the platform. We do not request removal of accurate reporting because a client finds it unfavorable.
- When we contact a publisher or author, we use contact details they have made public for that purpose.
- We do not publish personal data about the people we review.
Why we may not contact you directly
In most cases, it is not possible or would involve disproportionate effort to inform every person named in public content we review. We publish this policy so that information about our processing is available to them (Art. 14(5)(b) GDPR). If you think we hold information about you, contact us, and we will tell you.
7. Who we share information with
- our clients, in reports about their own case;
- freelance specialists who work on our projects, under written confidentiality and data processing agreements;
- business partners who work with us on a specific client project, where this is needed to deliver the service, under confidentiality obligations;
- technology providers that host our email, files and website, and provide AI-assisted analysis, search monitoring and SEO tools. We use only providers that offer data processing terms compliant with the GDPR;
- payment providers, such as Stripe, PayPal, Wise and Revolut Business;
- publishers, platforms and search engines, when we send a correction or removal request;
- our accountant, auditors and legal advisers;
- public authorities, where the law requires it;
- a buyer, investor or successor, if our business is merged, sold or restructured.
Providers and specialists who process personal data on our behalf do so under written agreements, only on our instructions and with appropriate confidentiality safeguards.
8. Transfers outside the European Economic Area
Some of our providers and freelance specialists are located outside the EEA, including the United States, Ukraine, Georgia, Armenia, the UAE, Kazakhstan, and other countries. Some of these countries may not offer the same level of data protection as the EU. Where a country does not have an EU adequacy decision, we use the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.
9. How long we keep information
We keep personal data only as long as we need it for the purposes described in this policy, or as long as the law requires. Our retention periods are:
- Client case files and audit material: 24 months after the end of the engagement, or longer if a legal claim is pending.
- Evidence records for correction and removal requests: 6 years after the end of the case, as they may be needed for legal claims.
- Monitoring logs: for the duration of the retainer plus 12 months.
- Accounting and tax records: 6 years, as required by Cyprus law.
- Enquiries that did not lead to a contract: 12 months.
- Newsletter subscribers: until you unsubscribe.
After these periods, we securely delete or anonymize the information.
10. Cookies
Our website uses cookies that are needed for it to work and, with your consent, analytics and advertising cookies. The tools we use include:
- Google Analytics, for website analytics;
- Microsoft Clarity and Hotjar, for user experience analysis;
- Google Ads, Meta Pixel and LinkedIn Insight Tag, for advertising and remarketing;
- Google Tag Manager, for tag management;
- All in One SEO Pack, for site functionality.
Non-essential cookies are set only after you accept them in the cookie banner. You can change your choice at any time. You can also block or delete cookies in your browser settings, but some parts of the website may not work correctly without the necessary cookies. Details are in our Cookie Policy: https://reputation.city/cookie-policy/.
11. How we protect information
- access to client files is limited to the people working on that project;
- two-factor authentication on email, file storage and work tools;
- confidentiality and data processing agreements with every freelance specialist;
- encrypted connections (SSL/TLS) on our website;
- secure servers and firewalls;
- regular security monitoring and review of access rights;
- anonymization of case details in any material shared outside the company.
No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a data breach is likely to put your rights at risk, we will notify the Commissioner for Personal Data Protection and, where required, you.
12. Your rights
You have the right to:
- ask whether we hold information about you and receive a copy (right of access);
- ask us to correct inaccurate or incomplete information;
- ask us to delete information, where there is no longer a reason to keep it (“right to be forgotten”);
- ask us to restrict how we use it;
- object to our use of your information based on legitimate interests, including in client work. We will stop unless we have compelling reasons that override your interests, or we need the information for legal claims;
- object at any time to the use of your information for direct marketing. We will then stop using it for that purpose;
- withdraw consent at any time, where we rely on consent. This does not affect processing carried out before you withdrew it;
- receive information you gave us in a portable format, and ask us to send it to another controller where technically possible, where processing is based on contract or consent.
Send requests to hi@reputation.city. We will answer within one month. We may ask you to confirm your identity first. Some rights may be limited where we must protect the confidentiality of a client or the rights of others, but we will explain the reason.
You can also complain to the Commissioner for Personal Data Protection, Cyprus (www.dataprotection.gov.cy), or to the data protection authority in the EU country where you live or work.
13. Children
Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a child, we will delete it promptly.
14. Changes to this policy
We update this policy when our services or legal requirements change. We publish the updated version on our website, and the date at the top shows the latest version.
15. Contact
BEESPARK INVEST LTD (Reputation City)
Georgiou A 83, Shop 17, Germasogeia 4047, Limassol, Cyprus
Email: hi@reputation.city
Phone: +357 96 728521
Website: https://reputation.city/
