Privacy Notice

Privacy Notice
  1. General
This Privacy Notice sets out how SAINT GEORGE & BLUE CROSS PRIVATE HOSPITAL LTD (hereinafter referred to as “Institution”, “we”, “our”, or “us”) collects and processes personal data for the provision of services to its customers (“you”, “your”). Where the data held are on individuals, this document also sets out the rights of those individuals in respect of that personal data. This Privacy Notice includes all the information the Company, as controller under the law and the General Data Protection Regulation, Regulation (EU) 2016/679 (“GDPR”), has an obligation to provide you with, as data subject of the data it collects and processes. Any questions relating to this Privacy Notice or requests in respect of personal data should be directed to the Data Protection Officer at
  1. Who We are
The St George & Blue Cross Private Hospital Ltd is the outcome of a merge that took place in 01/04/2012 when two of the best-known private hospitals in Paphos, St George Private Hospital and Blue Cross Medical Centre, have merged. The purpose of this merge was to form a comprehensive care center that is unique to the Paphos region. Our combined experience, expertise and resources, and our state-the-art medical equipment, allows us to offer a very high standard of care and at the same time provide complete and comprehensive treatment to our patients. Our Vision is to become a centre of excellence in not only the Paphos region but in Cyprus and that is why we follow local and international standards of care. The St George & Blue Cross Private Hospital Ltd is accredited and licensed to provide comprehensive care services by the Cyprus Ministry of Health. Our medical centre offers a large group of internationally trained and acknowledged physicians. Our nursing staff headed by a British trained Matron, is fully qualified and trained according to British nursing care standards. Our physicians and support staff offer the most up-to-date in- and out-patient treatments in a committed and dedicated manner for a truly unique healthcare experience. Blue Cross Hospital is located at 51 Demokratias, Avenue P.O.Box 62213, 8062, Paphos, Cyprus and St. George Hospital is located at 29 Eleftherios Venizelos Avenue, P.O. Box 62259, 8062, Paphos, Cyprus. We strive to protect personal data and apply high standards of conduct when it comes to privacy issues. We ensure that its applicants are provided with the appropriate training in order to handle personal data securely and in accordance with the laws. Furthermore, we endeavor to ensure that any parties with whom we co-operate apply the same high standards when it comes to data protection and privacy as we do.
  1. What Information we collect
When you visit our internet website(s), our social media pages or our online advertising channels we may ask you to provide us with certain information so that we can communicate with you about our products and services. You are not obliged to provide us with such information, but if you choose not to, you may miss out on events and special offers and certain services may not be available to you. The personal information we will ask you to provide is the following:
  1. Title
  2. Full Name
  3. Telephone Number
  4. Email
  1. Why we collect the information
Here at the Institution we take your privacy seriously and will only use your personal information in accordance with our Personal Data Protection Policy, in order to communicate with you about our services and to improve the quality of our services. The purposes for which we collect your personal information are as follows:
  1. To arrange an appointment, you have request through the contact page on our website
  2. To investigate and follow up on any comments, inquiries and complaints you may have and to resolve any disputes and problems which may have arisen with respect to the use of our services.
  3. To obtain feedback from you that will help us to improve and/ or further the provision of our facilities and services.
  4. To communicate with you about our services that may be of interest to you.
  5. To communicate with you about products and/or services of our affiliates that may be of interest to you.
  6. To inform you about promotional events, special offers, etc.
  7. To enable us to perform our obligations towards you.
  8. To comply with a legal obligation to which we may be subject.
  9. Any other purpose specifically requested and/or agreed by you
Your personal information is processed and stored in our central offices located in Pafos. It will be accessed only by our employees or contractors who are authorized to do so under a duty of confidentiality and only for the purposes stated above. We do not collect any personal data other than that specifically mentioned above, and we do not use your personal data without your explicit consent unless you ask us to do so.   You do not have an obligation to provide us with your personal data, but if you don’t we will not be able to provide you with our services. We do not carry out any automated decision-making activities, including profiling, using your personal information.
  1. Recipients of your personal information
Reasonable endeavors are made to ensure that data is only accessible by those with a need for access to fulfil the purposes set out above. We use third party service providers to store and process personal data in certain ways which are useful for the purposes of our services, such as and, which allow us to host the website, send you newsletters and company updates. These service providers are only allowed to process your personal data to the extent necessary to provide the services we have requested from them.  
  1. Retention of data
The Institution retains personal data in accordance with the Data Retention Policy. Any personal data provided to us is retained to fulfil the purposes for which the data was collected, as stated in paragraph 4 above. After the fulfilment of the purposes for which the personal data was collected, such data will be destroyed, and a Destruction Certificate will be retained in our records, unless destruction is prohibited for legal, regulatory or technical reasons. Any data kept by us for marketing and information purposes will be retained until you inform us that you no longer wish to receive such information. Any requests for further information in relation to the continued processing of specific data and requests for destruction of data should be made to For further information on Our retention and destruction processes, please visit the Our Data Retention Policy at Any requests for further information in relation to the continued processing of specific data and requests for destruction of data should be made to
  1. Your rights
Should you believe that any personal information we hold on you is incorrect or incomplete, you have the ability to request to see this information, rectify it or have it deleted by contacting us at In the event that you wish to complain about how we have handled your personal data, please contact us at or in writing to our clinics in Pafos, Cyprus. We will then look into your complaint and work with you to resolve the matter. In response to such requests, we reserve the right to require the individual making the request to provide certain details about himself/herself so that we can validate that the individual is indeed the person whom the data refers to. The Institution is required to respond to the request of the individual within 40 days and it will endeavor to do so wherever possible. If you still feel that your personal data has not been handled appropriately according to the law, you can submit your complaint with the Office of the Commissioner for Personal Data Protection, at 1 Iasonos Street, 2nd Floor, 1082 Nicosia, tel. +357 22 818456, email address  

Opening Hours

Monday - Friday: 8.30 - 18.30
Saturday: 10.30 - 16.30
Sunday: 10.30 - 16:30