Privacy Policy

The controller of your personal data is:

• Tobin & Downes SL
• CIF: B04982757
• Registered address: Avenida Ricardo Soriano, Ed. Azahara nº 29, 29601 Marbella, Málaga, Spain
• Contact: hello@tobindownes.com

Through the enquiry, valuation, buyer-brief and call-request forms on this website we may collect:

• Name
• Email address
• Phone number (including WhatsApp, where you provide it)
• Property preferences (location, type, budget, timeline)
• Property details you provide for a valuation (address, size, condition, features)
• Any additional information you include in your message

We may also collect limited technical data (IP address, browser type, pages visited) via cookies and analytics tools, as described in our Cookie Policy.

• To respond to your enquiries and requests for information
• To prepare and deliver private property valuations
• To build curated shortlists, including off-market opportunities
• To arrange viewings, calls and follow-up communications
• To improve our services and measure the effectiveness of our marketing

We rely on your consent (Article 6(1)(a) GDPR), given when you submit a form or accept marketing cookies. You may withdraw your consent at any time by contacting us at hello@tobindownes.com. Withdrawal does not affect the lawfulness of processing carried out before that point.

Enquiry data is stored in our own website database and synchronised to our customer relationship management (CRM) system, HubSpot, which acts as our data processor. HubSpot processes personal data on our instructions under a written data processing agreement and applies appropriate safeguards for any international transfers.

We do not use your data for any purpose other than those set out in this policy, and we do not share it with third parties for their own marketing purposes.

We keep your personal data only for as long as is necessary to fulfil the purpose for which it was collected — typically for the duration of our relationship with you, and thereafter for any period required by Spanish tax and commercial law. You can ask us to delete your data at any time and we will do so unless we are legally required to retain it.

We do not sell your personal data. We share it only with trusted service providers who help us operate our business (for example our CRM, email and hosting providers), all of whom are contractually bound to protect it and to process it strictly on our behalf.

Subject to GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data (rectification)
• Request erasure of your data ("right to be forgotten")
• Request data portability
• Object to, or restrict, certain processing
• Withdraw your consent at any time
• Lodge a complaint with the Spanish Data Protection Authority (AEPD, aepd.es)

To exercise any of these rights, email hello@tobindownes.com from the address associated with your enquiry. We respond within one month.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. No system is entirely secure, but we take our duty of care seriously.

We may update this policy from time to time. The latest version is always available on this page, with the "Last updated" date at the top.