Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how personal data is collected and used on martaaragon.com. It is provided in good faith and reflects how the site actually works. It is currently under review by our legal advisors and may be updated; please check back for the latest version.

1. Who we are (Data Controller)

This website, martaaragon.com, is operated by Marta Aragón, a luxury real-estate advisory service ("we", "us", "our"). We are the data controller responsible for the personal data described in this policy.

If you have any questions about this policy or about how your personal data is handled, you can contact us at hello@martaaragon.com.

2. What personal data we collect

We only collect personal data that you choose to give us, or that is necessary for the website to function. Specifically:

• Chat assistant messages. When you use the chat assistant on this site, we process the messages you send. If you choose to share contact details (name, email or phone) and information about the property you are looking for (such as budget, location, property type or timeline), we process those too.
• Contact and enquiry forms. If you fill in a contact or enquiry form, we collect the details you provide — typically your name, email address, phone number and information about what you are looking for (your buying intent).
• Guide downloads. If you request a downloadable guide, we collect the email address you provide so we can send it to you.
• Basic site-usage and technical data. Like most websites, our hosting and infrastructure automatically process limited technical data (such as IP address and basic device/browser information) needed to serve the site securely and reliably.

We do not ask you for special-category data (such as data about health, religion, political opinions or similar), and the chat assistant asks you not to share sensitive personal information.

3. Why we use your data and our legal bases

Under the General Data Protection Regulation (GDPR), we must have a legal basis for processing your personal data. We rely on the following:

• To respond to your enquiry and take steps at your request — where you submit contact details through the chat, a form or a guide request so that we can follow up with you, we process that data to take steps at your request prior to entering into a service relationship (Art. 6(1)(b) GDPR).
• To run and improve our enquiry service — we process the content of chat conversations and enquiries on the basis of our legitimate interest in answering questions, providing our advisory service and improving it (Art. 6(1)(f) GDPR).
• To keep the site secure and working — we process basic technical data on the basis of our legitimate interest in operating a secure, reliable website (Art. 6(1)(f) GDPR).
• Marketing — we will only use your details to send you marketing (such as newsletters or property updates) if you give us separate, explicit consent (Art. 6(1)(a) GDPR). We never add you to marketing automatically, and you can withdraw your consent at any time.

4. Who processes or receives your data

We use a small number of trusted service providers ("processors") to run this site and handle enquiries. They act on our instructions under data processing agreements, and they are not permitted to use your data for their own purposes:

• Anthropic (Claude AI) — powers the chat assistant and processes the messages you send during a conversation.
• Airtable — our lead/contact management system, where contact details you submit are stored.
• Vercel — hosts the website and our Buyer's Flow dashboard.
• IONOS — hosts our messaging relay service.
• Resend — sends transactional emails, such as delivering a guide you have requested.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5. International transfers

Some of our service providers (including Anthropic, Airtable, Vercel and Resend) are located outside the European Union, primarily in the United States. Where your personal data is transferred outside the EU, that transfer is protected by the European Commission's Standard Contractual Clauses (SCCs), together with the relevant provider's data processing agreement. Our messaging relay host (IONOS) is located within the European Union.

6. How long we keep your data

• Chat leads and transcripts: we keep these for up to 24 months, after which they are deleted.
• Contact and enquiry data: we keep this for as long as needed to handle your enquiry and any resulting relationship, and then for a reasonable period afterwards, unless a longer period is required by law.
• Guide-download email addresses: we keep these to deliver the guide and, where you have given marketing consent, until you withdraw that consent or ask us to delete your data.
• Technical data: we keep this only for the short period needed to operate and secure the site.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• rectify it if it is inaccurate or incomplete;
• erase it ("right to be forgotten");
• restrict how we process it;
• object to processing carried out on the basis of legitimate interest;
• request portability of the data you have provided to us; and
• withdraw consent at any time, where our processing is based on your consent (this does not affect processing already carried out).

To exercise any of these rights, contact us at hello@martaaragon.com.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe your data has been handled improperly. You can reach the AEPD at www.aepd.es.

8. Cookies

The chat assistant on this site does not set any non-essential cookies; it only uses storage that is strictly necessary to keep your chat session working while the widget is open. Any other cookies used by the site (for example for analytics) are governed by our cookie banner, where you can manage your preferences.

9. Contact

If you have any questions about this Privacy Policy, or you want to exercise your data protection rights, please contact:

Marta Aragón — hello@martaaragon.com

10. Changes to this policy

This policy was last updated on 6 July 2026. It is an interim version currently under review by our legal advisors and may be updated. Any changes will be posted on this page with a new "last updated" date.