Privacy Policy
Last updated: March 2026
1. Introduction
Gala Estates ("we", "us", "our") is a Costa del Sol property consultancy. We are committed to protecting and respecting your privacy. This policy explains how we collect, use, and safeguard your personal data when you use our website (www.galaestates.es) or contact us via our forms, email, or WhatsApp. For any privacy-related questions, please contact us at info@galaestates.es.
2. Data We Collect
We may collect the following personal data: (a) Contact form data β your name, email address, phone number, message, and preferred contact channel (WhatsApp or email); (b) Property inquiry metadata β which property you enquired about, the source page, and your selected language; (c) Technical data β your IP address, browser type, and device information collected via server logs; (d) Language preference β stored locally on your device via localStorage (i18nextLng) to remember your chosen language.
3. How We Use Your Data
We use your personal data to: respond to your property enquiries and provide the information you requested; contact you via your preferred channel (WhatsApp or email); match you with suitable properties on the Costa del Sol; improve our website and services; and comply with legal obligations.
4. Legal Basis (GDPR Article 6)
We process your personal data on the following legal bases: Consent (Article 6(1)(a)) β you explicitly consent to data processing when you check the consent box on our contact forms; Legitimate interest (Article 6(1)(f)) β we have a legitimate interest in responding to business enquiries and maintaining client relationships; Contract performance (Article 6(1)(b)) β processing necessary to take steps at your request prior to entering into a property transaction.
5. Data Storage & Processing
Your data is stored securely using Supabase cloud infrastructure (servers located within the EU). We retain your contact form data for up to 24 months after your last interaction, after which it is securely deleted. Third parties who may process your data include: Supabase (database hosting and edge functions), WhatsApp/Meta (if you choose WhatsApp as your preferred contact channel), and Netlify (website hosting). We do not sell your personal data to any third party.
6. Your Rights (GDPR)
Under the General Data Protection Regulation, you have the right to: access β request a copy of the personal data we hold about you; rectification β request correction of inaccurate data; erasure β request deletion of your personal data ("right to be forgotten"); restriction β request that we limit how we use your data; data portability β request your data in a structured, machine-readable format; objection β object to processing based on legitimate interest. To exercise any of these rights, please email us at info@galaestates.es. We will respond within 30 days.
7. Cookies & Local Storage
Our website uses minimal local storage. We store a single item β i18nextLng β in your browser's localStorage to remember your preferred language across visits. This is not a cookie and contains no personal data. We do not use third-party tracking cookies, advertising cookies, or analytics cookies. No data is shared with third-party advertising networks.
8. Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.