Privacy Notice

1. Who we are (Data Controller)

Kaluma Living is a real-estate service operated by Marta Aragón Barroso (NIF 44138671S), on the Costa del Sol, Spain. We are the data controller responsible for the personal data described in this notice.

For any question about privacy, or to exercise your rights, write to us at privacy@kalumaliving.com. For general enquiries, info@kalumaliving.com.

2. What personal data we collect, and when

We collect personal data that you choose to give us, or that is necessary for the website to function. Specifically:

• When you send an enquiry — through our contact form, or by messaging us: your name, email address, phone number, the property or area you are interested in, and anything you tell us in your message.
• When you use our property quiz — your answers about the area, budget and property profile you are looking for, together with the contact details you provide so we can follow up.
• When you request a guide or lead magnet — the name and email address you provide, so we can send you the requested guide.
• When you sign up to our newsletter — the name and email address you provide.
• When you use the chat helper on the site — the chat helper is a simple guided questionnaire (not an AI assistant). It collects the area, budget, name and email you enter and passes them to us as an enquiry.
• When you book a call — if you choose to schedule a call, our booking provider collects your name, email and scheduling details (see “Who processes or receives your data”).
• When you browse the website — standard technical and usage information collected through analytics, such as pages viewed, approximate location, and device and browser type, together with information stored in cookies. See “Cookies and analytics” below.

We do not ask you for special-category data (such as data about health, religion or identity documents) through our forms.

3. Why we use your data, and our legal bases

Under the General Data Protection Regulation (GDPR) we must have a legal basis for processing your personal data. We rely on the following:

• To answer your enquiry and take steps at your request. When you contact us through a form, the quiz, the chat helper or a guide request, we use your details to reply and to take the steps you have asked for before any possible agreement. Legal basis: steps taken at your request prior to a contract, and our legitimate interest in responding to you (Art. 6(1)(b) and 6(1)(f) GDPR).
• To deliver a guide you have requested. We use the email address you give us to send the specific guide you asked for. Legal basis: steps at your request / legitimate interest (Art. 6(1)(b) / (f) GDPR).
• To send you our newsletter and marketing emails. When you sign up to our newsletter, we enrol you — on the basis of your consent — into our full email programme: our seven-part “Before You Buy” guide series, followed by our weekly letter and a periodic property mailing. We rely on your consent (Art. 6(1)(a) GDPR and Art. 13 of the ePrivacy Directive), and you can withdraw that consent and unsubscribe at any time using the link in every marketing email or by writing to us.
• To keep the site secure and working. We process basic technical data — such as server and access logs — on the basis of our legitimate interest in operating a secure, reliable website (Art. 6(1)(f) GDPR).
• To understand and improve our website through analytics. We use Google Analytics to understand, in aggregate, how our website is used. The lawful basis for analytics cookies is your consent (Art. 6(1)(a) GDPR and Art. 5(3) of the ePrivacy Directive). Please see “Cookies and analytics” below for how analytics currently work on our site.

We do not sell your data, and we do not use it for automated decisions that produce legal effects on you.

4. Who processes or receives your data

We use a small number of trusted service providers (“processors”) to run this site and handle enquiries. They act on our instructions under data processing agreements and are not permitted to use your data for their own purposes:

• Airtable — securely stores and organises the enquiries and leads we receive.
• Resend — delivers the emails we send in connection with your enquiry, guide requests and (where you have consented) our marketing emails.
• Google Analytics (GA4) — helps us understand, in aggregate, how our website is used.
• Vercel — hosts our website, serves its pages and provides standard hosting-level security.
• Sanity — the content system behind our Journal (editorial articles). Journal images are served through Sanity’s content delivery network, which means loading an article page involves a request to Sanity.
• Anthropic — helps us draft Journal articles in the background. This is an editorial/content tool only; it does not process visitor or enquiry data.
• Calendly — only if you choose to book a call, in which case Calendly collects your name, email and scheduling details to arrange it.

We may also share information where we are legally required to, for example with public authorities when the law obliges us.

WhatsApp (Meta). If you choose to contact us through WhatsApp, your message and phone number are handled through WhatsApp. When you do so, Meta acts as an independent controller under its own privacy terms, not as our processor.

We do not sell your personal data, and we do not share it with third parties for their own marketing.

5. International transfers

Some of the trusted services we use are based outside the European Union. Several of our providers (including Airtable, Resend, Google, Vercel, Anthropic and Calendly) are based in, or process data in, the United States, outside the European Economic Area (EEA). Where your personal data is transferred outside the EEA, we rely on appropriate safeguards — the EU-US Data Privacy Framework (for providers certified under it) and/or the European Commission’s Standard Contractual Clauses (SCCs), together with each provider’s data processing agreement — so that your data keeps an equivalent level of protection.

You can ask us for more detail about these safeguards using the contact address above.

6. How long we keep your data

We keep your information only as long as we need it:

7. Your rights

Under the GDPR and Spanish data protection law, you can ask us to:

• access the personal data we hold about you;
• correct anything that is wrong or incomplete (rectification);
• erase your data (erasure), where the law allows;
• restrict or object to how we use it, including objecting to processing based on our legitimate interest;
• receive your data in a portable format (portability);
• withdraw consent at any time, where we relied on your consent — including unsubscribing from marketing — which does not affect processing already carried out.

To exercise any of these rights, write to privacy@kalumaliving.com. We will respond within the time the law allows, normally within one month. There is no charge for making a request.

If you are not happy with how we have handled your data, you have the right to complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), www.aepd.es. We would appreciate the chance to resolve it with you first.

8. Cookies and analytics

We use only a limited number of cookies to help the website function properly and to understand how visitors use it. Our website uses cookies for two purposes:

• Strictly-necessary cookies — for example a “lang” cookie that remembers the language you chose. These are needed for the site to work and do not require consent.
• Analytics cookies (Google Analytics / GA4) — these help us understand how the site is used.

We want to be transparent about how analytics currently work on our site: Google Analytics loads on every page, and we do not yet operate a cookie-consent banner that lets you refuse analytics cookies before they are set. We are working to introduce granular cookie controls. In the meantime, you can manage or block cookies through your browser settings, and you can opt out of Google Analytics across all websites using Google’s browser opt-out add-on.

9. Carefully selected experiences

Kaluma Living may recommend selected hotels, wellness centres, restaurants, architects, designers, concierge services and other experiences that we believe reflect our philosophy of living. These recommendations are made with care and based on our own selection criteria. Where you choose to visit or book through one of these external providers, your relationship with them will be governed by their own privacy policies and terms of service.

10. Trusted partners

From time to time we may collaborate with carefully selected partners whose services complement the Kaluma Living experience. Where a collaboration exists, we will always seek to be transparent about the nature of that relationship. Any commercial partnership will never influence our commitment to recommending experiences that genuinely align with our values.

11. Contact

If you have any questions about your privacy, we’d be happy to help. If you want to exercise your data-protection rights, please contact Marta Aragón Barroso at privacy@kalumaliving.com. For general enquiries, you can reach us at info@kalumaliving.com.

12. Changes to this notice

We may update this notice from time to time. The date at the top shows when it last changed. If we make an important change, we will make it clear on this page.