Privacy Policy
Last updated: 31 August 2026
1. Data controller
- Identity: Hispan Estates Ltd.
- Company Registration Number (CRO): pending allocation
- Registered office: Hibernian Buildings, Cork, Ireland
- Privacy contact email: edward@hispanestates.com
2. What data we collect
Through the preference quiz and the contact form on the Site, we collect:
- Identification data: your name (first name on the quiz, full name on the contact form).
- Contact data: email and, on the contact form, phone number if you choose to provide it.
- Search preferences: property type, area, budget, timeline and other quiz answers.
- Browsing data collected automatically through cookies (see section 6).
3. Why we process your data
- To respond to your enquiry and put you in touch with an agent.
- To select properties matching the preferences given in the quiz.
- To analyse use of the Site for statistical purposes (see section 6, analytics cookies).
No automated decisions are made, and no profiling with legal effects on the user is carried out.
4. Legal basis
Depending on the processing activity, we rely on the following legal bases under Regulation (EU) 2016/679 (GDPR):
- Responding to your enquiry and to your quiz answers — Article 6(1)(b), steps taken at your request prior to entering into a contract.
- Advertising and measurement cookies — Article 6(1)(a), your consent, given through the cookie notice and withdrawable at any time.
- Keeping a record of enquiries and complying with our own legal obligations — Article 6(1)(c) and, where applicable, Article 6(1)(f), our legitimate interest in maintaining accurate business records.
5. How long we keep your data
Enquiry and quiz data is kept for as long as there is an active business relationship or an ongoing interest from you in our services, and in any event for no longer than 24 months from our last contact with you, unless you ask us to delete it sooner or we are required to keep it longer to comply with a legal obligation. Browsing data linked to cookies is retained for the periods set out in the table in section 6.
6. Cookies and tracking technologies
This Site uses its own cookies, necessary for it to function, and third-party advertising and measurement technologies (Google Ads and the Meta Pixel), which are only loaded after you give your consent through the cookie notice. If you select "Necessary only", no third-party tracking is loaded at all.
| Cookie / technology | Provider | Purpose | Duration |
|---|---|---|---|
| he_cookie_consent | First-party | Remembers your cookie preference | 12 months |
| Technical cookies | First-party | Necessary for the Site's basic functionality | Session |
| _gcl_au and related Google Ads cookies | Google Ireland Ltd. | Measures whether a visit or enquiry originated from one of our Google adverts | Up to 90 days |
| Meta Pixel (_fbp, fr) | Meta Platforms Ireland Ltd. | Measures whether a visit or enquiry originated from one of our Facebook or Instagram adverts, and allows us to show relevant adverts to people who have visited the Site | Up to 90 days |
Where we run advertising campaigns, Google and Meta act as independent controllers or joint controllers for the data collected through these technologies, in accordance with their own terms. We receive only aggregated reporting; we do not receive the identity of individual users from these platforms.
You can withdraw your consent at any time by reopening the cookie notice from the Site's footer, or by clearing cookies in your browser settings. You can also manage advertising preferences directly with Google and Meta.
Where data is transferred outside the European Economic Area (for example, to servers in the United States), that transfer takes place under the safeguards provided for by applicable law, such as the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.
7. Recipients
Data is not shared with third parties except where legally required, or with providers strictly necessary to deliver the service. These currently include our web hosting and email provider, our collaborating agents and legal advisors in Spain where this is necessary to progress your property search, and — only if you have accepted advertising cookies — Google Ireland Ltd. and Meta Platforms Ireland Ltd. for advertising measurement. We never sell your data, and we do not share the details you submit through the forms with third parties for their own marketing purposes.
8. Your rights
You may exercise your rights of access, rectification, erasure, restriction, objection and portability at any time by writing to edward@hispanestates.com, along with a copy of a document confirming your identity.
As the company is registered in Ireland, the competent supervisory authority is the Irish Data Protection Commission (DPC) (www.dataprotection.ie). However, under Article 77 of the GDPR, you may also lodge a complaint with the data protection authority in your own country of residence — for example, the Spanish Agencia Española de Protección de Datos (www.aepd.es) if you live in Spain — which will forward it to the competent authority.
9. Security
Reasonable technical and organisational measures are applied to protect personal data against unauthorised access, loss or alteration.
This document is a standard template and does not constitute legal advice. We recommend it be reviewed by a data protection lawyer familiar with Irish law before publication.