Privacy Policy

1. Who we are

Triple L Estates & Investments ("we", "us", "our") is a real estate advisory firm registered in Spain, with offices at Centro de Negocios, Puerta de Banus, 29660 Marbella, Málaga, Spain.

We are the data controller for the personal information you provide to us through our website, lead-generation forms, advertising campaigns on Facebook and Instagram, Google Ads, our strategy-session landing page, our contact form, or direct messages via WhatsApp, Telegram, email, or phone.

2. What information we collect

We collect the following categories of personal data:

• Contact details — your name, email address, phone number, and preferred messaging channel (WhatsApp, Telegram, email).
• Enquiry details — budget range, preferred location, property type, timeline, reason for relocation, and any free-text notes you share with us.
• Advertising identifiers — when you submit a Facebook or Instagram lead form, Meta provides us with your submission data and the advertising campaign ID. When you click a Google Ads link, we receive a GCLID.
• Website analytics — pages visited, referral source, approximate location (country/region only), device type, and browser.
• Communications — message history and delivery status across WhatsApp, email, and our on-site chat.

3. How we use your information

We use your data only for specific purposes:

• To respond to your enquiry and arrange private advisory sessions or property viewings.
• To send you relevant property listings, investment opportunities, and market insights via your preferred channel.
• To manage our customer relationship through our internal CRM (Supabase) and our email marketing platform (ActiveCampaign).
• To improve our advertising on Facebook, Instagram, and Google so we can reach people with genuine interest in Marbella real estate.
• To comply with our legal obligations under Spanish law, EU GDPR, and anti-money-laundering rules.

4. Legal basis for processing

Under the GDPR, we process your personal data on the following legal bases:

• Consent — when you voluntarily complete a form, tick a subscription box, or reply to our messages.
• Legitimate interest — to follow up with leads who expressed interest through advertising, and to improve our services.
• Contract performance — once you engage our services formally, to deliver them.
• Legal obligation — to meet Spanish tax, financial, and AML requirements.

5. Who we share your data with

We never sell your personal data. We share it only with carefully chosen service providers who act on our instructions under written data-processing agreements:

• Supabase — database and authentication infrastructure (EU region).
• ActiveCampaign — email marketing platform (US, Standard Contractual Clauses in place).
• Meta Platforms (WhatsApp, Facebook, Instagram) — for messaging and advertising delivery.
• Google — for advertising, analytics, and Workspace email.
• Resales Online — property listing provider.
• Netlify and DigitalOcean — hosting providers.
• OpenAI — AI assistant for responding to website chat enquiries (messages only, no identifiers).
• Legal, tax, and notary professionals — only when you have engaged us and require their services.

6. International data transfers

Some of our processors (notably ActiveCampaign, OpenAI, and Google) are based in the United States. Where data leaves the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards to ensure your information receives an adequate level of protection.

7. How long we keep your data

We retain your enquiry and contact data for as long as you remain a prospective or active client, and for up to 3 years after our last interaction, unless you ask us to delete it sooner.

Records linked to completed property transactions are kept for a minimum of 10 years to meet Spanish legal and anti-money-laundering requirements.

8. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Request deletion of your data ("right to be forgotten").
• Restrict or object to certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

To exercise any of these rights, email us at info@lll-estates.com. We will respond within 30 days.

9. Cookies and tracking

Our website uses essential cookies to keep you signed in and remember your preferences. With your consent, we also use analytics cookies (Google Analytics) and advertising cookies (Meta Pixel, Google Ads) to understand how visitors use the site and to measure the performance of our advertising.

You can manage your cookie preferences at any time via the cookie banner or your browser settings.

10. Security

We take reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), encrypted storage, access controls, and authentication on our CRM. No system is perfectly secure, but we treat the information you share with us as we would our own.

11. Children

Our services are not directed to people under 18. We do not knowingly collect data from minors. If you believe a minor has submitted personal data to us, please contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you by email.