Privacy Policy

1. Who we are

BuyaPropertyinSpain ("BuyaProp", "we", "us") is operated by AI Risk Intelligence AS, a company registered in Norway. We act as the data controller for the personal data described in this policy. You can contact us at privacy@buyapropertyinspain.com.

2. What data we collect

• Contact details you submit through the contact form or buyer assessment: name, email, phone, country.
• Buyer profile: budget, preferred destinations, timeline, residency status, lifestyle preferences and any free-text message.
• Account data (staff only): email and authentication tokens for accessing the internal admin area.
• Technical data: IP address and basic request metadata logged by our hosting provider for security and abuse prevention.

3. Why we use your data

• To respond to your enquiry and provide buyer guidance (lawful basis: your consent and pre-contractual steps under Article 6(1)(b) GDPR).
• To match you with vetted local agents or partners when you ask us to (consent).
• To improve the service and prevent fraud (legitimate interests under Article 6(1)(f) GDPR).
• To comply with legal obligations such as tax and accounting record-keeping.

We do not sell your personal data and we do not use it for automated decision-making with legal effect.

4. Who we share data with

We share the minimum data needed with carefully selected processors and partners:

• Hosting & database: Supabase (EU region) and Cloudflare for infrastructure.
• Email delivery: our transactional email provider, used only to send you a reply or confirmation.
• Vetted local partners (estate agents, lawyers, mortgage brokers) only when you have asked us to introduce you. We will tell you who before sharing.

5. International transfers

Some processors may process data outside the EEA. Where they do, we rely on the EU Standard Contractual Clauses or an equivalent transfer mechanism approved under Chapter V GDPR.

6. How long we keep it

Buyer enquiries are kept for up to 24 months from your last interaction, after which they are deleted or anonymised. Accounting records are kept for the period required by law (typically 5 years).

7. Your GDPR rights

You have the right to access, rectify, erase, restrict or object to processing of your personal data, the right to data portability and the right to withdraw consent at any time. Email privacy@buyapropertyinspain.com and we will respond within 30 days. You can also lodge a complaint with your national data protection authority.

8. Cookies & tracking

BuyaProp uses only strictly necessary storage (e.g. session keys for staff login and local browser storage to remember saved destinations). We do not currently use advertising cookies or third-party analytics. If we add analytics in the future, we will request your consent first via a cookie banner. See our Cookie Policy for details.

9. Changes to this policy

We may update this policy. Material changes will be flagged on this page with a new "last updated" date.