1. Who we are

The Cyprus Gemological Laboratory (CGL) is operated by Aris Tsiropoulos Ltd, 3 John Kennedy Avenue, 1075 Nicosia, Cyprus. Aris Tsiropoulos Ltd is the controller of the personal data described in this policy.

This policy explains what personal information we collect, why we use it and what your rights are. It applies to clients of the laboratory and to visitors to cglcyprus.com.

2. What we collect

When you submit an item to the laboratory, we record:

  • your name;
  • your telephone number, email address and postal address;
  • a description of the item you leave with us;
  • the service requested, the fee and your signature on the receipt.

We do not ask for an identity document, except when you collect an item without your receipt or on behalf of someone else.

When you contact us by telephone, email or WhatsApp, we receive your contact details and the content of your message.

When you visit our website, we receive limited technical information, described in section 7.

We do not collect special categories of personal data, such as information about health or beliefs.

3. Why we use your information

  • To receive, examine and return your item, and to prepare your certificate or report: necessary to perform our contract with you.
  • To contact you about your item: necessary to perform our contract with you.
  • To issue invoices and keep accounting records: required by law.
  • To keep a record of the certificates and reports we have issued, so they can be verified later: our legitimate interest in the integrity of our documents.
  • To answer your enquiries: our legitimate interest in responding to people who contact us.

We do not use your details for marketing, and we do not send newsletters or offers to laboratory clients.

We do not make decisions about you by automated means, and we do not sell personal data.

4. Who sees your information

Your information is handled by the staff of Aris Tsiropoulos Ltd. We share it only where necessary, with:

  • our accountants and auditors, for invoicing and tax records;
  • the providers of our website, email and IT systems, who act on our instructions;
  • an insurer, lawyer or other person, when you ask us to send them your report;
  • public authorities, where the law requires it, including anti-money laundering rules.

Messages you send us through WhatsApp are also handled by WhatsApp under its own privacy policy.

If any of our providers processes data outside the European Economic Area, we rely on the safeguards required by data protection law.

5. How long we keep it

  • Receipts, invoices and accounting records: 7 years, as required for tax and accounting purposes.
  • Certificates and appraisal reports: permanently, so that documents can be verified at any time.
  • Enquiries that do not lead to a service: 12 months.

When a record is no longer needed, we delete it or destroy it securely.

6. Certificate verification

Every CGL certificate is recorded in our laboratory database and can be checked on the Verify Certificate page of this website. The verification page shows the details of the stone only. It does not show the name or contact details of the client who submitted it.

7. Our website and cookies

When you visit cglcyprus.com, our server records standard technical information, such as your IP address, browser type and the pages you view. We use this to keep the website secure and working properly.

The website uses only the cookies needed for it to work. We do not use analytics or advertising cookies.

The map on our Contact page is provided by Google Maps. When it loads, Google receives technical information such as your IP address and may set its own cookies under its own privacy policy.

Our website links to other sites, including Facebook and LinkedIn. Those sites have their own privacy policies.

8. Your rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • ask for a copy of the personal data we hold about you;
  • ask us to correct data that is inaccurate;
  • ask us to delete your data, where we are not required to keep it;
  • ask us to restrict how we use your data, or object to our use of it;
  • receive your data in a portable format.

To use any of these rights, contact us using the details below. We will reply within one month. We may ask you to confirm your identity first.

Some records, such as invoices and certificate records, must be kept for legal reasons or to protect the integrity of our documents. We will tell you if this applies to your request.

9. Contact and complaints

Cyprus Gemological Laboratory (CGL)
Operated by Aris Tsiropoulos Ltd
3 John Kennedy Avenue, 1075 Nicosia, Cyprus
Tel: +357 22 518130 · Email: [email protected]

If you are not satisfied with how we handle your personal data, you have the right to complain to the Office of the Commissioner for Personal Data Protection of the Republic of Cyprus (www.dataprotection.gov.cy).

10. Changes to this policy

We may update this policy from time to time. The current version is always available on this page.

Last updated: 9 October 2026