Skip to content

Privacy policy

What personal data Before You Buy Property collects, why, who processes it, how long we keep it and your rights.

Last updated: 10 October 2026

Who is responsible for your data

The data controller is Oleg Chupryna, who runs this website. For anything about your data, write to [email protected].

We handle personal data under the EU General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

You can read the website without giving us any data

We do not ask you to register and we do not use advertising or tracking. We collect personal data only when you write to us or sign up for emails.

What we collect and why

When Data Purpose Legal basis
Contact and offer forms Name, email, phone (optional), your message, the page and development you wrote from To answer your request Steps you ask for before a possible agreement (GDPR art. 6.1.b); for general questions, our legitimate interest in answering you (art. 6.1.f)
Introduction to a lawyer or mortgage broker (only if you tick the box) The same details To pass them to the firm named in the form so it can contact you Your consent (art. 6.1.a)
“Email me this breakdown” Email, the calculator link To send you the link Your request (art. 6.1.b)
Newsletter (double opt-in) Email, language, dates of sign-up, confirmation and unsubscribe To send occasional emails about rate changes and new guides Your consent (art. 6.1.a)

With each request we also store which version of the consent text you saw and the campaign tags (utm) in the page address, if any. We do not store your IP address or browser details with your request.

Until a lawyer or broker is chosen, no firm is named in the form, and your details are not passed to anyone.

Spam protection

Our forms use Cloudflare Turnstile to check that a request comes from a person. It loads only when you start filling in a form, and Cloudflare processes technical data about your device and connection for that check only. Our legal basis is our legitimate interest in keeping the forms free of spam and abuse (art. 6.1.f).

Visitor statistics

We count visits with Cloudflare Web Analytics, which works without cookies and does not identify you or follow you across websites.

Who processes data for us

  • Cloudflare (Cloudflare, Inc.): hosting the website, receiving form requests, the database that stores them, spam protection, visitor statistics and forwarding email sent to our address.
  • Resend (Resend, Inc.): sending our emails, from its EU region.
  • Google (Gmail): our mailbox, where your messages and our replies are kept.
  • The lawyer or broker named in the form: only if you tick the box to share your details.

Each provider processes data only on our instructions, under its data processing terms. Cloudflare, Resend and Google are based in the United States; data sent there is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses in their terms.

Maps and videos

Map pages load map images from OpenStreetMap’s servers, which receive your IP address to deliver them. Pages with a video use YouTube’s privacy-enhanced mode (youtube-nocookie.com) or Vimeo; the video provider receives data when the video loads or plays.

How long we keep data

  • Requests sent through the forms, and our emails about them: up to two years after our last message, then deleted, unless the law requires us to keep them longer (for example, invoices for a paid service).
  • Newsletter: until you unsubscribe. After that we keep only your email and the dates of sign-up and unsubscribe, to show that we respected your choice. Sign-ups that are never confirmed are deleted within three months.

Your rights

You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing it, ask for a copy in a portable format, and withdraw consent at any time (this does not affect processing before you withdrew). Write to [email protected]. Every newsletter email has an unsubscribe link.

If you think we have not handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).

Changes

If we change how we handle data, we will update this page and its date.