Privacy Policy

This policy explains how we process personal data collected through this website, its forms and its advertising measurement tools, in accordance with the General Data Protection Regulation (GDPR), Spanish Organic Law 3/2018 and other applicable rules.

1. Data controller

The controller of this website, operated under the trade name Spain Property Advisory Group, is Eva Lorenzo Servicios Inmobiliarios SCoop, tax ID F19764083, with registered address at Avenida Victoria, 2, 30007 Murcia, Spain. You can contact us about data protection at info@spainpropertyadvisorygroup.com.

2. Data we collect

• Form data: name, email, optional phone number and country of residence.
• Advisory preferences: budget range, property type, desired features, area, investment criteria, purchase timeline, buyer intention, language and any voluntary free-text information.
• Technical data: page requested, date and time, browser or device information, IP address and security logs generated when the website and its providers deliver the service.
• Consent choices saved by the cookie settings tool.
• Only after advertising consent: landing page, referrer, Google click identifiers such as GCLID, GBRAID or WBRAID, and UTM campaign parameters.

3. Purposes

• Respond to your request and prepare a tailored report or advisory proposal.
• Manage operational communications and reasonable follow-up relating to your request.
• Record how a request reached the website and measure Google Ads campaign performance, according to your advertising consent choice.
• Maintain website security and comply with legal or administrative obligations.

4. Legal bases

Form data is processed on the basis of your consent and, where applicable, to take pre-contractual steps requested by you. Data required to comply with legal obligations is processed on that basis. Advertising storage, advertising identifiers and our own campaign attribution record are used only after the separate advertising consent requested in the cookie settings tool.

5. Google Ads measurement and Consent Mode

We use a Google tag for the Google Ads account identified as AW-18320625897. Consent Mode v2 is configured with advertising and analytics permissions denied by default. In advanced consent mode, the Google tag may load and send limited, cookieless technical and consent signals when permission is denied; it does not receive permission to write or read advertising cookies in that state. If you accept advertising, Google Ads may use advertising storage and identifiers to measure conversions and campaign performance.

The standard lead conversion is triggered only after our server confirms that the form was submitted successfully. Our website code does not attach the name, email address or telephone number to that standard conversion event. Enhanced conversions, which can use hashed user-provided contact data, are not currently implemented in the website code and must not be enabled in the Google Ads account without first reviewing the consent flow and this policy.

6. Retention

We keep lead data for the time needed to handle the request and carry out reasonable follow-up. Unless a legal obligation or later contractual relationship requires otherwise, inactive leads should be reviewed and deleted or anonymized within a maximum of 24 months. Campaign attribution kept in the browser expires after 90 days and is removed earlier after a successful form submission, withdrawal of advertising consent or deletion of browser storage. Consent choices are renewed at least every 12 months. Providers may keep their own records for the periods described in their terms and legal obligations.

7. Data sharing and providers

We do not sell personal data. It may be processed by providers needed to operate the service: Vercel Inc. for hosting, Supabase Inc. for private lead storage, Resend for internal email notifications, Vercel Web Analytics for consent-based analytics and Google Ireland Limited / Google LLC (Google Ads) for advertising measurement. They act under their applicable contractual and data protection terms.

You can read the Google Privacy Policy and manage or obtain information about advertising privacy through Google's Business Data Responsibility resources.

8. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers must be covered by an adequacy decision, standard contractual clauses or another safeguard recognized by the GDPR. Please consult each provider's privacy information for its current locations and transfer mechanisms.

9. Your rights and consent choices

You may request access, rectification, erasure, objection, restriction, portability and withdrawal of consent by contacting info@spainpropertyadvisorygroup.com. You may change optional cookie choices at any time through the Cookie Policy without affecting the lawfulness of prior processing. You may also lodge a complaint with the Spanish Data Protection Authority.

10. Profiling and security

Google Ads may use conversion modelling and advertising signals to estimate campaign performance. We do not use this website data to make decisions that produce legal or similarly significant effects for you solely by automated means. We apply reasonable technical and organizational safeguards, although no Internet-connected system can guarantee absolute security.