Privacy policy

Last updated: November 2026

1. Who we are

TOTAL SUPPORT SOLUTIONS KS LTD (“Total Support Solutions”, “we”, “us” or “our”) is the data controller responsible for the personal data collected through this website. We are a defence-consulting company registered in Cyprus under company number HE 454471, with our registered office at Lordou Vyronos 2, Office 101, 1096 Nicosia, Cyprus.

For any question about this policy or about how we handle your personal data, you can contact us at ap@tss-ks.com.

2. What personal data we collect

When you complete the “Request a briefing” contact form, we collect:

• your full name;
• your organisation (if provided);
• your email address;
• your telephone number (if provided);
• the area of interest you select;
• the content of the message you send us;
• a record of the consent you give when submitting the form; and
• your IP address and browser details, which our form provider records with each message (see section 5).

We do not ask for special-category data through this website, and you should not send us classified, sensitive or export-controlled information via the contact form.

3. Lawful basis for processing

We process the data submitted through the contact form on the basis of your consent (Article 6(1)(a) of the GDPR), which you give by ticking the consent box before submitting your request. The hCaptcha check described in section 5 starts before you submit, so it relies instead on our legitimate interest in keeping the form free of spam and abuse (Article 6(1)(f) of the GDPR). Delivering and protecting the website through Cloudflare (section 5) relies on our legitimate interest in keeping the site secure and available, on the same legal basis. Where we later correspond with you about a specific engagement, we may also rely on the performance of, or steps taken to enter into, a contract.

4. How we use your data

We use the personal data you provide only to:

• respond to your enquiry and arrange the briefing or conversation you request;
• understand the requirement, tender or system you are asking about; and
• keep a record of our correspondence with you.

We do not use your data for automated decision-making or profiling.

5. Sharing and disclosure

We do not sell your personal data. We may share it with trusted service providers who host our website or handle form submissions on our behalf. We may also disclose data where required to comply with a legal obligation.

Our website is delivered through Cloudflare (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA), which helps protect it against malicious traffic. Every request your browser makes to this site passes through Cloudflare, which processes your IP address and details of the request; its request logs can include the page you asked for, the page you came from and your browser’s details. Cloudflare acts as our processor, under its Data Processing Addendum, for the logs of visits it makes available to us and for the content that passes through its network. Its privacy policy states that it is a controller for other information it collects, such as information it uses to identify and block malicious activity. Cloudflare states that it keeps this log data for a limited period, without publishing a fixed one. It also asks your browser to report errors in connecting to this site, for seven days after your visit; Cloudflare states that it uses the IP address in these reports only to work out your network, country and metro area, and does not log it.

Messages sent through the contact form are delivered to us by email through Web3Forms, a form service operated from India by Web3Creative, which processes them on our behalf under its data processing agreement. Web3Forms keeps a copy of each message, with the sender’s IP address and browser details, for one year and, to filter spam, may send the sender’s IP address and email address to the spam-protection services CleanTalk and Akismet.

To keep automated abuse out, the form also uses hCaptcha, a service of Intuition Machines, Inc. in the United States. hCaptcha loads only when you start filling in the form. It then processes your IP address, information about your browser and device, and how you interact with the page (such as mouse movements, scrolling, key presses and touch), to tell people from automated programs. The check runs under Web3Forms’ hCaptcha account rather than one held by us.

The map on our contact page is provided by OpenStreetMap (OpenStreetMap Foundation, United Kingdom) and loads as soon as you open that page, whether or not you use the form. Your browser then connects to OpenStreetMap’s servers, which receive your IP address and technical information about your browser. OpenStreetMap serves the map through a worldwide network, so the server that answers may be outside the European Economic Area.

These services involve transfers of personal data outside the European Economic Area, including to the United States and India. Cloudflare and Intuition Machines are certified under the EU–U.S. Data Privacy Framework, and the data processing agreements of Cloudflare and Web3Forms include the EU Standard Contractual Clauses for transfers that need them. If you would rather not use the contact form and the services behind it, you can email us directly at ap@tss-ks.com.

6. Retention

We keep the personal data submitted through the contact form only for as long as necessary to handle your enquiry and any resulting engagement, and to meet our legal and record-keeping obligations. When it is no longer needed, we securely delete or anonymise it. (Specific retention periods to be confirmed by the client on review.) The copy held by Web3Forms is deleted automatically after one year (see section 5).

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct inaccurate or incomplete data;
• ask us to erase your data;
• restrict or object to our processing;
• data portability; and
• withdraw your consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at ap@tss-ks.com. You also have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus.

8. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. No transmission over the internet can be guaranteed to be completely secure, but we work to protect the data you share with us.

9. Cookies

This website uses only the cookies necessary for it to function. We ask for your consent before setting anything that is not strictly necessary, and you can decline without losing access to any part of the site. Two outside services may set their own security cookies, whatever you chose in the cookie banner:

• hCaptcha (see section 5), once you start filling in the contact form. hCaptcha describes its cookies as necessary for security, load balancing, accessibility and anonymous service statistics; details are in hCaptcha’s privacy policy.
• Cloudflare (see section 5), only if it asks your browser to pass a security check. It then sets a cookie called cf_clearance, so that you are not checked again for a while (30 minutes by Cloudflare’s default). Cloudflare describes its cookies as strictly necessary. When we checked in November 2026, Cloudflare set no cookies during ordinary visits.

You can also block or delete cookies through your browser settings at any time.

10. Changes to this policy

We may update this policy from time to time. Any changes will be published on this page with a revised “last updated” date.

11. Contact

Questions about this policy or your personal data can be sent to ap@tss-ks.com, by telephone on +357 22 322353, or by post to TOTAL SUPPORT SOLUTIONS KS LTD, Lordou Vyronos 2, Office 101, 1096 Nicosia, Cyprus.