Privacy Policy

The controller of the personal data collected through this website is Nexa Prime Homes, a professional project operated by its founding partners with operational base in Málaga (Spain).

For any matter related to the protection of your personal data — including the exercise of the rights described in section 7 — you may contact us through the following channels:

• Email: hello@nexaprimehomes.com
• Phone: +34 673 52 51 96 (Carlos, founding partner)

We collect only the personal data strictly necessary to deliver a quality service to you. Specifically:

• Contact data you provide when you complete the book-a-call form or write to us by WhatsApp/email: first name, surname, email address, phone number and, optionally, the content of the message you choose to share (search preferences, target budget, timeline, etc.).
• Technical browsing data automatically collected by our infrastructure (Vercel) for the correct operation of the site: IP address, session identifier, browser type, device, preferred language and pages visited. These data are used exclusively for technical and security purposes.
• Preferences stored on your own device (browser localStorage), such as properties marked as favourites, the recent history of properties viewed and the units selected for comparison. This information never leaves your device; we do not have access to it.

We do not collect sensitive data (political or religious orientation, health data, sexual orientation, biometrics, etc.), nor do we use advertising cookies (Meta Pixel, TikTok, remarketing) or automated profiling technologies. We do use Vercel Web Analytics and Speed Insights (cookieless, aggregated data without identification) and — only if you give explicit consent in the cookie banner — Google Analytics 4 with Consent Mode v2, IP anonymisation and Google Signals disabled. If you decline, GA4 runs in cookieless ping mode without profiling. See full details in section 4 and in the Cookies Policy.

Every piece of data we collect is used for a specific purpose and under a clear legal basis:

• Handling your request and keeping in touch with you regarding properties, services or queries (basis: pre-contractual performance at your request and/or consent, GDPR art. 6.1.b and 6.1.a).
• Complying with our legal and contractual obligations arising from any real estate operation that may materialise (basis: compliance with a legal obligation, GDPR art. 6.1.c).
• Ensuring the site's technical security and preventing abuse (basis: legitimate interest of the controller, GDPR art. 6.1.f).
• Sending follow-up information about your enquiry, similar properties or related opportunities, for as long as the professional relationship lasts (basis: legitimate interest).

We do not sell your personal data, nor do we share it with third parties for commercial or advertising purposes. We only share information with the technological providers strictly necessary to operate the service:

• Vercel Inc. — hosting, content delivery network (CDN), Web Analytics and Speed Insights provider. Processes technical browsing data and aggregated usage metrics under EU Standard Contractual Clauses (SCC). Both Analytics and Speed Insights are cookieless and process only aggregated data (no individual identification possible). More: vercel.com/legal/privacy-policy.
• Google LLC — Google Analytics 4 provider, active only if you have given explicit consent in the cookie banner. With your consent, processes aggregated browsing data with IP anonymisation enabled (last octet truncated), Google Signals disabled, and ad personalisation disabled. Without your consent, it operates in cookieless ping mode: sending an anonymous aggregate ping without cookies or profiling. International transfer is covered by Standard Contractual Clauses and the EU-US Data Privacy Framework. More: policies.google.com/privacy.
• Mapbox — interactive property map provider. Receives your IP address solely to serve map tiles. Policy: mapbox.com/legal/privacy.
• Meta Platforms (WhatsApp) — only if you choose to start a conversation through the WhatsApp button. In that case you also accept the WhatsApp privacy policy: whatsapp.com/legal/privacy-policy.

These processors are bound by contractual obligations ensuring a level of data protection equivalent to that required by GDPR.

Some of our technological providers (Vercel, Mapbox, Meta) are headquartered in the United States. International transfers are carried out under the EU-US Data Privacy Framework and, failing that, under Standard Contractual Clauses approved by the European Commission, which guarantees an adequate level of protection.

We retain personal data only for as long as necessary to fulfil the purposes described:

• Information enquiries: for the duration of the active conversation and up to 24 months after the last contact, unless you request earlier deletion.
• Sales or brokerage operations: for the duration of the professional relationship and afterwards for the legal retention period of commercial and tax documentation (up to 10 years under the Spanish Commercial Code).
• Technical browsing data: in accordance with the retention policies of our technological providers (typically between 30 and 180 days).

Data protection law grants you the following rights, which you may exercise free of charge at any time by emailing us at hello@nexaprimehomes.com:

• Access — know what data of yours we process.
• Rectification — correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — delete your data when no longer necessary.
• Objection — object to processing on grounds related to your particular situation.
• Restriction — restrict processing in certain circumstances.
• Portability — receive your data in a structured format and transfer it to another controller.
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

We will respond to your request within a maximum of one month from receipt. To verify your identity we may request supporting documentation.

If you consider that the processing of your personal data infringes data protection regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es or C/ Jorge Juan, 6, 28001 Madrid.

This website is not directed at children under 14 and we do not knowingly collect personal data from minors. If you become aware that a minor has provided us with data, please contact us and we will proceed with its immediate deletion.

We apply reasonable technical and organisational measures to protect your data against unauthorised access, accidental loss, alteration or improper disclosure: HTTPS encryption on all communications, infrastructure with certified providers, access to data restricted to operational necessity, and periodic review of security measures.

We may update this privacy policy to adapt it to regulatory, technical or operational changes. Updates will be published on this page with the revised effective date. We recommend periodic review of this document.