Privacy policy

Last updated: 3 November 2026 · Version 1.1

We only ask for the information we need to help you, we keep it safe, and we never sell it. This policy explains what we collect, why, and what you can do about it, in line with the EU General Data Protection Regulation (GDPR) and Spanish data protection law (LOPDGDD).

1. Who is responsible for your data

• Data controller: José David Suárez Orons, founding partner of David & Daughters Real Estate Company S.L. (in the process of incorporation), trading as Suárez Estates
• Tax ID (DNI): 33301671V
• Address: Rúa Rosalía de Castro, 24, 4.º, 15117 Laxe (A Coruña), Spain
• Email for privacy matters: hello@suarezestates.com

2. What data we collect

When you fill in a form on this website (contact, a property you’re interested in, or our free guide), we collect:

• your first name and email address;
• your country;
• your phone or WhatsApp number, if you choose to give it;
• your answers to the form questions (for example, what you’re looking for, your approximate budget or when you’d like to move);
• any message you write to us;
• the page where you filled in the form and, if you reached us through one of our adverts or another website, which one it was;
• the date you accepted this policy and the version you accepted.

To protect the forms against abuse, we also record your IP address temporarily.

We also count visits to the website, without cookies and without storing your IP address or anything that identifies you, to know which pages and adverts are useful.

When you write to us by email or WhatsApp, we receive the details you share in that conversation.

We don’t ask for sensitive data. Please don’t include it in your messages.

3. Why we use it and on what legal basis

You can withdraw your consent at any time, without it affecting anything we did before. Every email we send includes a link to unsubscribe.

4. How long we keep it

• Enquiries and contacts: for as long as we are in touch about your project, and for a maximum of 24 months after our last contact. After that we delete it.
• If you become a client: for as long as the law requires us to keep records related to the contract.
• If you unsubscribe or ask us to delete your data: we delete it, keeping only what we are legally required to keep.

5. Who we share it with

We never sell your data. We only share it with service providers who help us run Suárez Estates, under a contract that obliges them to protect it and use it only on our instructions:

• LucusHost (Spain): hosting of the website and its database.
• Jadimsky (Spain): our marketing and web agency, which manages the website, the forms and our email communications.
• Our email service provider: to send you the guide and our emails.
• Meta Platforms (Facebook / Instagram): only if you accept advertising cookies, we let Meta know that you contacted us, so we can measure our adverts. Your email, phone and first name are sent in an encrypted (hashed) form, together with your IP address and browser details.

If you choose to contact us on WhatsApp, that conversation is also subject to WhatsApp’s own privacy policy (Meta Platforms).

We will only share your data with public authorities when the law requires it.

6. International transfers

We store your data in the European Union. If any provider processes data outside the European Economic Area, we make sure it is protected by the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.

7. How we protect it

Your data is sent over an encrypted connection (HTTPS) and stored encrypted. Only the people who need it to help you can see it, using personal accounts with two-step verification, and every access is recorded.

8. Your rights

You can ask us at any time to:

• access the data we hold about you;
• correct it if it’s wrong;
• delete it;
• object to or restrict how we use it;
• receive it in a portable format;
• withdraw your consent.

Just write to hello@suarezestates.com. We may ask you to confirm your identity, and we will reply within one month.

If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or to the data protection authority in your country.

9. Age

This website is aimed at adults. We don’t knowingly collect data from anyone under 18.

10. Changes to this policy

If we change this policy, we will publish the new version here with its date. If the change is important, we will let you know.