Privacy Policy

Marbella Agency ("we", "us", "our") is a buyer-side real estate advisory based in San Pedro de Alcántara, Marbella, Spain. We are the data controller for personal information submitted through marbellaagency.com. Contact: hello@marbellaagency.com

We collect only what you actively provide: • Quiz responses, name and email (when you submit the property match quiz at /find-your-match) • Name, email, phone and message (when you use any contact form) • Newsletter subscription email (where applicable) We collect technical data automatically: IP address, browser type, pages visited, referring URL. This is standard server-log information and is retained for security and analytics purposes only.

We use your data to: • Respond to your enquiry • Send the personalised area match and follow-up emails (if you took the quiz and opted in by submitting your email) • Send our quarterly market update (only if you opted in) • Improve the website and quiz based on aggregate, anonymised analytics We never sell, rent, or share your personal data with third parties for marketing purposes.

We process your data under two lawful bases: • Consent (Art. 6(1)(a)) — when you actively submit the quiz, contact form, or newsletter signup • Legitimate interest (Art. 6(1)(f)) — when you visit the website, for analytics, security, and improving our service You can withdraw consent at any time by emailing hello@marbellaagency.com.

We use only essential cookies (for the language preference and quiz state) and analytics cookies (Google Analytics 4 and Meta Pixel, where the user has not opted out). You can decline non-essential cookies via the cookie banner on first visit, or by disabling them in your browser settings. The quiz and contact forms function without analytics cookies.

We share data with the following processors, each bound by a Data Processing Agreement (DPA): • Resend — transactional email delivery (US-based, GDPR-compliant DPA) • Vercel — website hosting (US-based, EU data residency available) • Vercel KV — lead data storage for the email nurture sequence (EU region) • Google Analytics 4 — anonymised analytics • Meta Pixel — paid advertising attribution (only fires on /find-your-match) We do not use third-party CRMs, mass-email tools, or data brokers.

We retain your data for: • Active enquiries — until you tell us you are no longer interested • Closed enquiries — 24 months from last contact, then deleted • Closed property purchases — 10 years (legal requirement for Spanish property transactions) • Newsletter subscriptions — until you unsubscribe You can request deletion of your data at any time.

You have the right to: • Access the personal data we hold about you • Correct inaccurate or incomplete data • Request deletion ("right to be forgotten") • Restrict or object to processing • Data portability — receive your data in a structured, machine-readable format • Withdraw consent at any time • Lodge a complaint with your local data protection authority For Norwegian residents: Datatilsynet (datatilsynet.no). For Spanish residents: Agencia Española de Protección de Datos (aepd.es). To exercise any of these rights, email hello@marbellaagency.com. We respond within 30 days.

Some of our processors (Resend, Vercel, Google, Meta) are based in the United States. Transfers are governed by the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable.

We update this policy when our practices change. The "Last updated" date at the top of the page reflects the most recent revision. Material changes are notified by email to active subscribers.

Questions about your data or this policy: hello@marbellaagency.com We are not required to appoint a Data Protection Officer under GDPR Art. 37, but the founder (Erlend Sand) is responsible for data protection matters and personally reviews every request.