Privacy Policy

Last updated: 8 September 2026

This policy explains how SUNNYCOAST HOMES SL handles personal data collected through sunnycoasthomestays.com and related enquiries.

1. Data controller

• Controller: SUNNYCOAST HOMES SL
• NIF: B24882714
• Address: Calle Balmes, no. 129, Portal D, Puerta 2, 08006 Barcelona, Spain
• Privacy contact: info@sunnycoast.es

2. Personal data we collect

Depending on how you contact or work with us, we may process:

• Identity and contact information, including name, email address and telephone number.
• Enquiry content and property information you choose to provide.
• Contract, service, invoicing and communication records if you become a client, supplier or referral partner.
• Technical and usage information, such as device, browser, approximate location, page interactions and cookie preferences, where permitted.
• Security records needed to protect the website and prevent misuse.

Please do not send identity documents, bank details, health information or other sensitive data through the general enquiry form unless we specifically request it through an appropriate secure channel.

3. Why we use data and our legal bases

Enquiries and quotations

We use contact and property information to respond, arrange calls or visits, prepare estimates and take steps requested before a possible contract. The legal bases are steps taken at your request before entering a contract and our legitimate interest in handling genuine business enquiries.

Providing contracted services

If we work together, we process information to administer the relationship, coordinate agreed property services, communicate, invoice and maintain business records. The legal bases are performance of the contract and compliance with legal obligations.

Website analytics

If you consent through the cookie banner, we may use Google Analytics 4 to understand website use and improve our pages. Analytics remains disabled unless the relevant consent is given. The legal basis is consent, which may be withdrawn at any time through the cookie settings.

Security and legal claims

We may process limited technical and communication records to secure our systems, prevent fraud, establish facts and exercise or defend legal claims. The legal basis is our legitimate interest and, where applicable, compliance with law.

Commercial communications

We send promotional electronic communications only where permitted by law, for example with consent or within an existing customer relationship for similar services. Every marketing message will provide a simple way to opt out.

4. Forms, email and CRM records

The owner enquiry form currently collects first name, last name, email, telephone number, subject and message. Submissions are stored in the secured WordPress administration area and delivered by email. Enquiry information may also be recorded in our Kommo CRM account so our team can respond and manage follow-up. Access is limited to authorised personnel and relevant service providers.

5. Retention

• Unsuccessful or inactive enquiries are normally retained for no longer than 12 months, unless a longer period is needed to handle an ongoing request, prevent abuse or protect legal rights.
• Client, supplier, contract and invoice records are retained for the relationship and the statutory periods required by tax, accounting and civil law.
• Analytics data is retained according to the configured Google Analytics period and only after consent.
• Security records are retained only as long as reasonably necessary for security and incident handling.

When data is no longer needed, it is deleted or securely restricted where the law requires continued retention.

6. Recipients and service providers

We do not sell personal data. Data may be accessed by providers that support hosting, email delivery, website maintenance and security, CRM and enquiry management, consent management and analytics. It may also be disclosed to professional advisers, public authorities or courts where required, and to service partners only when necessary for a requested or contracted service.

Our principal website-related providers include our hosting and email suppliers, WordPress/Elementor infrastructure, Kommo CRM, CookieYes for consent management and Google Analytics where the visitor has consented. Each provider receives only the data needed for its role.

7. International transfers

Some technology providers may process information outside the European Economic Area. Where this occurs, we rely on an applicable adequacy decision, the EU-US Data Privacy Framework where valid for the recipient, Standard Contractual Clauses or another lawful safeguard.

8. Your rights

You may request access, correction, deletion, restriction, portability or object to processing where applicable. You may withdraw consent at any time without affecting processing already carried out lawfully.

To exercise a right, email info@sunnycoast.es and identify the request. We may ask for proportionate information to verify identity. You may also complain to the Spanish Data Protection Agency (AEPD).

9. Required information

Fields marked as required are needed to respond properly. If they are not provided, we may be unable to process the enquiry. Do not provide personal data about another person unless you are authorised to do so and have informed them appropriately.

10. Automated decisions and minors

We do not use website enquiry data for decisions based solely on automated processing that produce legal or similarly significant effects. Our services and enquiry forms are intended for adults acting in relation to property or business matters.

11. Security and policy changes

We apply proportionate organisational and technical measures to protect personal data. No internet system is completely risk-free. We may update this policy when our services, providers or legal obligations change; the current version and date will always appear on this page.

Company identification and website-use terms are available in our Legal Notice. Cookie choices are explained in our Cookie Policy.