Privacy Policy
Last updated: August 2026
1. Data Controller
Santamaría Collection — info@santamaria-collection.com — Marbella, Spain · Miami, Florida, USA
2. Data We Collect
Through the request form we collect: first and last name, email address, phone/WhatsApp, and development of interest. We do not collect sensitive data or data from minors.
3. Purpose and Legal Basis
Processing your request — to respond to your inquiry. Legal basis: pre-contractual relationship (Art. 6.1.b GDPR).
Commercial communications — only with your express consent. Legal basis: consent (Art. 6.1.a GDPR).
4. Data Recipients
Your data may be shared with: Supabase Inc. (database, US servers); Meta/WhatsApp when you complete your request via that channel; and development promoters with your knowledge. We do not sell your data.
5. Data Retention
We retain your data for a maximum of 3 years from last contact, after which it will be deleted or anonymized.
6. Your Rights
You may exercise your rights of access, rectification, erasure, objection, restriction, and portability by writing to info@santamaria-collection.com.
7. Cookies
We use only one technical language preference cookie. No tracking or advertising cookies are used.
8. Security
Data is transmitted via HTTPS/TLS and stored with Row Level Security preventing unauthorized access.