Privacy Policy

1. Who we are

The Benahavís Collection website and mobile app are operated by Moodarse Realty SL, a company registered in Spain with fiscal number B93532513. We are the controller of the personal information we process to provide these services.

Website: benahaviscollection.com
Privacy contact: info@benahaviscollection.com

This policy covers our website, The Benahavís Collection mobile app, and our personalised property search and viewing service. External websites and services have their own privacy policies.

2. Information we process

The information involved depends on the services you choose to use:

• Contact and account information: your name, email address, telephone number and the identifiers and credentials associated with your website or viewing account.
• Property search information: preferred areas, budget, property requirements, shortlisted homes, recommendation responses and proposed changes to your search.
• Viewing information: requests, appointments, feedback, ratings, notes, questions, replies and offer discussions.
• Content you provide: enquiry forms, messages, comments, photos, videos and other files you choose to submit.
• Technical information: information transmitted when you use an online service, such as IP address, browser or device information, request details and security or error logs, where recorded by our website and supporting services.

We receive information directly from you and from our team’s records of your enquiries and viewings. If a property representative provides information needed for an appointment, it may also be included in your viewing record.

You can browse public property listings without connecting a viewing account. Some services need contact or account information to work; if you do not provide it, we may be unable to respond or provide that service.

3. Why we use your information

We use personal information to answer enquiries, provide accounts, recommend properties, arrange viewings, record your instructions and preferences, respond to feedback, and manage our relationship with you.

The legal bases we rely on, depending on the activity, are:

• Providing a requested service or taking steps at your request before a contract: handling property enquiries, search requirements and viewing arrangements.
• Legitimate interests: administering and securing our services, preventing misuse, keeping appropriate correspondence records and resolving disputes. These interests must be balanced against your rights.
• Consent: where required for optional cookies, marketing or other optional processing. You can withdraw consent without affecting processing that was lawful before withdrawal.
• Legal obligations: retaining or disclosing particular records where applicable law requires this.

Shared submissions may generate email notifications to our agency or to you so that requests and replies can be followed up.

4. The mobile app and your viewing account

Connecting your account

Your private viewing link or access code connects the app to your viewing account. The app stores an access credential on your device so that you can remain connected between visits. Keep your link and code confidential.

Private and shared content

Feedback, questions, recommendation responses and other shared submissions are available to our team to help with your property search. Private notes and uploads marked “Private” are stored within your viewing account and excluded from the shared concierge view used by our team. They are not stored exclusively on your device; this label does not mean that they are end-to-end encrypted or technically inaccessible to authorised system administrators.

Photos, videos and files

The app uploads the files you choose to submit. Your chosen sharing setting determines whether they appear as private or shared within the viewing service. Files can contain embedded information, including location metadata. Remove information you do not wish to upload, and avoid submitting sensitive information unrelated to your property search.

Signing out

Signing out removes the viewing access credential from the app on that device. It does not delete the server-side viewing account, its records or copies already delivered in email. See the deletion section below to request removal.

5. Website accounts, comments and cookies

Website accounts

If you register for a website account, we store the information supplied in your profile. Authorised website administrators can access account information for administration and support. You can request access, correction or deletion using the contact details below.

Comments

When visitors leave comments, the website collects the information entered in the comment form and may record the IP address and browser user agent to help detect spam. Comments and any approved profile image may be publicly visible.

An email-derived hash may be sent to Gravatar to check for a profile image. See Automattic’s privacy policy. Visitor comments may also be checked by an automated spam detection service.

Cookies and local storage

The website uses cookies for features such as login, account preferences and comment convenience settings. The app may store local preferences and an account access credential to support its features.

• If you choose to save your details when commenting, the associated convenience cookies last for one year.
• A temporary cookie on the login page checks whether your browser accepts cookies and is discarded when you close the browser.
• Standard website login cookies last for two days, or two weeks if you select “Remember Me”. Screen preference cookies last for one year. Logging out removes login cookies.
• If you edit or publish an article, an additional cookie records the article ID and expires after one day.

These website cookie periods describe the standard account features and do not determine how long your viewing records are retained. You can manage cookies through your browser. Disabling necessary cookies may prevent login or other features from working. Where optional cookies or tracking technologies are used, additional details and choices should be provided through the website’s cookie controls.

Embedded content and external services

Listings and articles may contain embedded videos, images or other content. Embedded services may collect information, set cookies and recognise you if you are signed into their service. Their own privacy policies apply. The same applies when you choose external sign-in, WhatsApp, email, maps or other third-party services.

Website media

Images published on public website pages may be accessible to visitors, including any embedded metadata. This differs from the visibility settings used inside the private viewing service.

6. Who receives your information

Depending on the service involved, information may be received by:

• Authorised members of our team who manage enquiries and property searches.
• WPMU DEV, which provides our website hosting and hosted email service, together with the infrastructure and authorised support providers involved in delivering those services. Other providers may support storage, security or technical maintenance where required.
• Property agents or representatives where relevant details are needed to arrange a viewing or fulfil your enquiry. Private notes and private uploads are excluded from the shared concierge records.
• Professional advisers, authorities or other recipients where a disclosure is legally required or necessary to establish, exercise or defend a legal claim.
• External services you choose to use, such as social sign-in, messaging, mapping or embedded media providers.

If you request a website password reset, your IP address may be included in the reset email.

International processing

Our website and viewing service are hosted by WPMU DEV in London, United Kingdom. Transfers from the European Economic Area to the United Kingdom are covered by the European Commission’s UK adequacy decision, within its scope and while it remains in force. Hosting in London does not mean that every supporting service or authorised support activity takes place there. Contact us for details of the providers, processing locations and safeguards relevant to your information.

7. Security

The mobile app communicates with our online viewing service using HTTPS. Access credentials control access to individual viewing accounts, and the service distinguishes private from shared content in its viewing interface. No online service can guarantee absolute security. Contact us promptly if you believe your access link, code or account has been compromised.

8. How long we keep information

We keep information for the purpose for which it was collected and apply the following retention schedule:

• Active property searches and viewing accounts: while your search or our service relationship remains active. After 12 months without meaningful contact, we review the account and remove information that is no longer necessary, unless you have asked us to continue the service.
• Records needed to handle complaints or claims: we retain only the relevant contact details, instructions, correspondence, appointment records and evidence for up to five years after the service ends or our last meaningful contact, whichever is later. Access to this archive is restricted and it is not used to restart marketing. If a complaint or claim arises, or an applicable legal period requires longer retention, the necessary records are kept until that matter and its retention obligations are resolved.
• Private notes and uploaded media: we review these when an account becomes inactive and normally remove them within 12 months of the service ending or last meaningful contact, whichever is later. We do not keep all photos, videos or private notes for five years merely because a complaint might arise. Particular material is retained longer only where necessary for an identified dispute, legal obligation or continuing service.
• Other legally required records: where a transaction or activity creates a separate statutory retention obligation, the relevant records are kept for the applicable period.
• Public comments: approved website comments may remain published while relevant to the discussion, subject to moderation and valid deletion requests. This does not extend the retention period for unrelated private viewing records.

Deletion requests are assessed when received; the periods above do not prevent earlier deletion where required. Where the law requires information to be blocked rather than immediately destroyed, it is restricted to the legally permitted purposes and destroyed when that requirement ends.

Relevant email correspondence follows the same retention criteria as the underlying enquiry or service record, including copies held in agency email software. WPMU DEV creates daily hosting backups and retains hosting backups for 30 days before removing them. Deleted information may therefore remain in existing recovery backups until those backups expire. If a backup is restored, applicable deletion requests must be reapplied. WPMU DEV’s standard hosting logs are retained for seven days according to its hosting documentation. This seven-day period does not cover separately retained application records, security-plugin logs, downloaded logs or copies preserved for an identified incident; those require their own necessary retention period.

9. Your data protection rights

Subject to applicable conditions, you can request access, correction, erasure, restriction of processing or a portable copy of your information. You can object to processing based on legitimate interests and to direct marketing. Where we rely on consent, you can withdraw it.

Email info@benahaviscollection.com to exercise your rights. We may ask for proportionate information to verify your identity. We normally respond within one month; if a lawful extension is necessary, we will explain this.

You can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), or another competent supervisory authority.

10. Request account or data deletion

Following identity verification where necessary, we will handle your request under applicable data protection law. If specific information must be kept for a legal obligation or another lawful exception, we will explain the categories, reasons and applicable retention period. Signing out or uninstalling the app is not a deletion request.

11. Changes to this policy

We may update this policy to reflect changes to our services or data handling. The date at the top identifies the latest revision. Where required, we will provide additional notice or request consent before introducing new processing.