1. Who we are
Hometailor (“we”, “us”, “our”) operates the website hometailor.com and provides property search, market information, and real estate agency services across Costa del Sol, Spain.
We are the data controller for the personal information described in this policy. Contact details are in section 11.
2. Data we collect
Information you provide directly
- Enquiry and lead forms, name, email address, phone number, property preferences, buying timeline, and any free-text messages you submit via our contact form, viewing request modal, valuation request, or newsletter sign-up.
- WhatsApp communications, messages you send via the WhatsApp links on our site are received by our WhatsApp Business account and stored within that platform.
Information collected automatically
- Usage data, pages visited, search queries, filters applied, properties viewed, and time spent on pages.
- Technical data, IP address, browser type, operating system, referring URL, and device type.
- Cookies and similar technologies, see section 8 and our Cookie Policy.
Information from third parties
We may receive information about you from property portals, partner agencies, or referral partners when they refer an enquiry to us.
3. How we use your data
| Purpose | Data used |
|---|---|
| Responding to property enquiries and viewing requests | Name, email, phone, property details |
| Providing free property valuations for sellers | Name, email, phone, property details, selling intentions |
| Sending our property newsletter (with your consent) | Email, coast preference |
| Improving the website and personalising search results | Usage data, cookies |
| Analytics and business performance monitoring | Anonymised usage data |
| Complying with legal obligations | Any data required by law |
We do not use your data for automated profiling that produces legal or similarly significant effects.
4. Legal basis for processing
We rely on the following legal bases under GDPR Article 6:
- Legitimate interests, responding to enquiries you initiate, improving our website, and general business administration.
- Consent, sending marketing emails or newsletters. You may withdraw consent at any time by clicking “unsubscribe” or emailing us.
- Contract performance, processing data necessary to fulfil any service agreement with you (e.g. a property sale mandate).
- Legal obligation, retaining records required by Spanish tax or anti-money-laundering law.
5. Sharing your data
We share personal data only where necessary:
- Service providers, hosting (Vercel), database (Supabase), and analytics providers acting as data processors under our instruction and bound by data processing agreements.
- Co-operating agencies, if a property you enquired about is listed by a partner agency, we may share your name and contact details with that agency to facilitate the viewing or transaction.
- Legal requirements, if required by law, court order, or regulatory authority.
We do not sell your personal data to third parties. We do not use your data for advertising on external platforms without your explicit consent.
6. Data retention
- Lead and enquiry data, retained for 3 years from your last interaction, then deleted or anonymised.
- Transaction-related data, retained for 7 years to comply with Spanish tax and anti-money-laundering obligations.
- Newsletter subscribers, retained until you unsubscribe.
- Analytics data, aggregated and anonymised after 14 months.
7. Your rights
Under GDPR you have the following rights regarding your personal data:
- Access, request a copy of the data we hold about you.
- Rectification, ask us to correct inaccurate data.
- Erasure, request deletion of your data where there is no legitimate reason for us to retain it.
- Restriction, ask us to limit processing of your data.
- Portability, receive your data in a structured, machine-readable format.
- Objection, object to processing based on legitimate interests.
- Withdraw consent, where processing relies on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, email us at privacy@hometailor.com. We will respond within 30 days. If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD, Agencia Española de Protección de Datos).
8. Cookies
We use cookies and similar technologies to make our website work and to understand how it is used. For full details, see our Cookie Policy.
9. Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction. These include encrypted connections (TLS), row-level security on our database, and access controls limited to authorised personnel.
No transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.
10. Changes to this policy
We may update this policy from time to time. Material changes will be notified via a notice on our website and, where we hold your email address, by email. The “last updated” date at the top of this page always reflects the current version.
11. Contact
For any data protection questions or to exercise your rights:
- Email: privacy@hometailor.com
- Post: Hometailor, Spain (address to follow)
We will respond to all requests within 30 days of receipt.