Privacy Policy
Last updated: September 10th, 2026
1. Data controller
The controller responsible for personal data collected through this website is:
Diego Ocaña Aguilar — Alarife Property Advisory
NIF: 02312937B
Address: Francisco de Rojas 9, 1, 28010 Madrid, Spain
Email: diego@alarifeadvisory.com
Telephone / WhatsApp: +34 610 347 654
2. Personal data we may collect
Depending on how you use the website or contact us, we may collect:
· Name and contact information.
· Country of residence and preferred language.
· Property-search requirements and purchasing objectives.
· Preferred destinations, property type and approximate budget.
· Financing and expected purchasing timeframe.
· Information about a property you own or are considering buying.
· Property address, characteristics, occupancy and maintenance needs.
· Messages, documents, plans or photographs voluntarily submitted.
· Appointment and consultation preferences.
· Communications exchanged by email, telephone, video call or WhatsApp.
· Technical information such as IP address, browser, device and website activity, subject to your cookie choices.
Please do not send unnecessary sensitive personal data through website forms.
3. Purposes and legal bases
We process personal data for the following purposes:
Responding to enquiries
To review and answer requests submitted through forms, email, telephone or WhatsApp.
Legal basis: taking steps at your request before entering into a contract and our legitimate interest in responding to professional enquiries.
Arranging consultations and assessments
To organise private consultations, property assessments, meetings and visits.
Legal basis: taking pre-contractual steps at your request.
Preparing proposals and mandates
To assess requirements and prepare a tailored proposal or written engagement mandate.
Legal basis: taking pre-contractual steps at your request.
Providing contracted services
To conduct property searches, coordinate viewings, prepare reports, support negotiations, coordinate purchases or organise Property Care services.
Legal basis: performance of a contract.
Legal, accounting and compliance obligations
To issue invoices, maintain records, verify identities, document payments and comply with tax, accounting, anti-fraud or other applicable obligations.
Legal basis: compliance with legal obligations.
Website analytics
To understand aggregated website use and improve its content and performance through Google Analytics.
Legal basis: your prior consent. Analytics will not be activated where consent is required unless you accept analytical cookies.
Guides and updates
To send property guides, news or service updates when you expressly request them.
Legal basis: your consent. You may unsubscribe at any time.
4. Mandatory information
Fields marked with an asterisk are necessary to process the relevant request. If they are not completed, we may be unable to respond or prepare the requested assessment.
You are responsible for ensuring that the information provided is accurate and current.
If you provide information about another person, you must be authorised to do so and inform that person of this Privacy Policy.
5. Data recipients and service providers
We do not sell personal data.
Information may be processed by service providers necessary to operate the website and respond to enquiries, including:
· Hostalia, as website-hosting provider.
· WordPress, as the website content-management platform.
· CF7, used to manage website forms.
· Google Analytics, where analytical-cookie consent has been granted.
· Email, telecommunications, security and technical-support providers.
· Legal, tax, accounting, technical or other professional advisers where necessary and appropriately authorised.
Property information may also be shared with agents, developers or other relevant professionals when necessary to respond to a request or provide an agreed service. We will limit the information to what is reasonably necessary.
Public authorities may receive information where disclosure is legally required.
6. International transfers
Some technology providers may process data outside the European Economic Area.
Where this occurs, appropriate safeguards will be used as required by data-protection law, such as an adequacy decision, standard contractual clauses or another legally recognised transfer mechanism.
Users should be aware that contacting Alarife through WhatsApp or other externally selected platforms also involves processing under those providers’ own privacy conditions.
7. Retention periods
Personal data will be retained only for as long as necessary for the relevant purpose:
· General enquiries: for the time required to respond and normally no longer than one year after the last meaningful communication, unless a professional relationship develops.
· Unsuccessful proposals: normally for up to one year after closure.
· Client and contractual records: for the duration of the engagement and subsequent statutory limitation and record-keeping periods.
· Accounting and tax documentation: for the period required by applicable law.
· Marketing communications: until consent is withdrawn or the subscription becomes inactive.
· Cookie and consent records: for the period necessary to demonstrate the user’s preferences and renew consent where appropriate.
Information may be retained for longer when necessary to establish, exercise or defend legal claims.
8. Your rights
You may request:
· Access to your personal data.
· Correction of inaccurate or incomplete data.
· Erasure of data where legally appropriate.
· Restriction of processing.
· Objection to processing based on legitimate interests.
· Portability of data where applicable.
· Withdrawal of consent at any time.
Withdrawal of consent does not affect processing already carried out lawfully.
To exercise your rights, email diego@alarifeadvisory.com, identifying your request. · · Additional information may be requested where reasonably necessary to verify identity.
You may also lodge a complaint with the Spanish Data Protection Agency — Agencia Española de Protección de Datos, through https://www.aepd.es.
9. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, alteration, loss or disclosure.
However, no internet service can guarantee absolute security. Users should avoid sending passwords, banking credentials or highly sensitive documents through unsecured channels.
10. Children
The website and services are directed towards adults.
Personal data should not be submitted by persons under 18 without appropriate parental or legal-authority involvement.
11. Automated decisions
This Privacy Policy may be updated to reflect legal, operational or technological changes. The current version and its revision date will always appear on this page.
12. Changes to this policy
Alarife Property Advisory does not make decisions producing legal or similarly significant effects solely through automated processing.
13. Contact
Questions concerning privacy or personal-data processing may be sent to: diego@alarifeadvisory.com