Privacy notice
Last updated: 13 October 2026
This notice explains how Tabela handles personal data when we contact businesses, show them example websites and work with them. It covers the information required by Articles 13 and 14 of the General Data Protection Regulation (GDPR).
Who is responsible
JR Coaching & Consulting LTD, trading as Tabela
32 Karatza, 3020 Limassol, Cyprus
Company registration no. HE 482984, VAT no. CY60253218Q
Email: studio@tabelasites.com or info@tabelasites.com
We have not appointed a data protection officer. For any question about your data, write to the address above.
What data we use and where it comes from
When we prepare an example website for a business, we use information the business has made public:
- business name, address, phone number, email address and opening hours;
- photos, logo, menu or price information and reviews published by or about the business;
- the name of a contact person, only if it is publicly listed for the business.
Sources: the business's Google Maps listing, its own website, and its public Facebook and Instagram pages. We do not buy contact lists.
If you reply to us or become a customer, we also process the content of our correspondence and the data needed for an offer, an invoice and the website itself.
Why we use it and on what legal basis
- Contacting businesses and building an example website. Our legitimate interest in offering our service to businesses (Article 6(1)(f) GDPR). Direct marketing can be a legitimate interest (Recital 47 GDPR).
- Answering your messages, preparing offers and delivering a website. Steps before or for a contract (Article 6(1)(b) GDPR).
- Invoices and accounting. Our legal obligations under tax law (Article 6(1)(c) GDPR).
- Keeping a "do not contact" list. Our legitimate interest in respecting objections and not contacting you again (Article 6(1)(f) GDPR).
If you want an offer or a website from us, we need your business details for the offer and the invoice; without them we cannot enter into a contract. You do not have to give us any data just because we contacted you.
Your right to object
You can object at any time to any processing based on our legitimate interests (Article 21(1) GDPR), and in particular to us contacting you for marketing purposes (Article 21(2) GDPR).
Just reply "stop" to any of our messages, by email, Instagram, Messenger or WhatsApp, or write to studio@tabelasites.com. We will not contact you again and will delete the example website. We keep only the contact detail we used (for example your email address, Instagram name or phone number) on a "do not contact" list, so that we can respect your objection.
Example websites
Example websites are hosted on GitHub Pages under vorschau.tabelasites.com. We send the link only to the business the example was made for; the pages are not linked from anywhere else and ask search engines not to list them. An example is deleted if the business is not interested.
Example websites set no cookies and do not count or track visits. Your browser may remember the language you chose (local storage); this stays on your device. When you open a page, GitHub, as the host, receives technical data such as your IP address in order to deliver it. Example websites may contain buttons to call or email the business, or to message us on WhatsApp; if you use them, your phone or the respective provider processes the data needed for that.
Who receives data
- Google (Google Workspace), for our email;
- GitHub, for hosting example websites and these pages;
- Meta (Instagram, Facebook Messenger, WhatsApp), only if we write to each other there; when a link is shared there, the app may load a preview of the page;
- providers of software and AI services that we use to prepare example websites, for example to sort research notes or to improve photo quality.
These providers process data for us or as independent providers of their services. Where data is transferred to the United States, this is based on one of the following: the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023), where the provider is certified under it, or the European Commission's standard contractual clauses. You can ask us for a copy of the relevant safeguards at studio@tabelasites.com.
How long we keep data
- Example websites and the related contact data: until the business tells us it is not interested, and at the latest 12 months after our last contact.
- The "do not contact" list: as long as we contact businesses, so that your objection keeps working.
- Customer data, offers and invoices: for as long as tax and company law require.
Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to receive it in a portable format, and to object to processing based on legitimate interest (Articles 15 to 21 GDPR). We do not make automated decisions about you.
You can also complain to a data protection authority, for example in Cyprus: Commissioner for Personal Data Protection, Kypranoros 15, 1061 Nicosia, commissioner@dataprotection.gov.cy, or to the authority in the country where you live or work.