Privacy Policy.

1. Who we are

HomeNote ("HomeNote", "we", "us") provides independent buyer-side property reports for foreign buyers on the Costa del Sol. Our website is homenote.es. For any privacy question, please contact us at hello@homenote.es.

2. What information we collect

We only collect the information you choose to send us. When you submit a property through the intake form on this website, you typically share:

• Your full name
• Your email address
• Your phone or WhatsApp number (optional)
• The property link or address
• The asking price
• Your buyer goal (own use, investment or both) and decision timeline
• Whether you have already spoken to the selling agent
• Whether you already have documents from the seller
• The language you would like the report in (English or Spanish)
• Any free-text message or specific concerns you would like the report to address

When you pay for the report, our payment processor (Stripe) collects the payment information required to complete the transaction. We do not see, store or process your card details ourselves.

3. Why we collect this information

We use your information only to deliver the service you have asked us for:

• To prepare your Independent Property Report.
• To contact you about the report — delivery, follow-up questions, missing information or refund cases.
• To send you the final PDF and a payment receipt.
• To meet accounting, tax and legal record-keeping obligations.

We do not use your information for advertising, profiling or unrelated marketing.

4. Legal basis for processing

Under GDPR, our legal basis for processing your personal data is one or more of the following, depending on the data:

• Contract. Processing is necessary to deliver the report you have ordered.
• Legal obligation. For tax, accounting and record-keeping requirements.
• Legitimate interest. For limited operational purposes such as protecting our service from misuse and improving how the report is prepared.
• Consent. Where you actively choose to share optional information with us.

5. How your data is handled — tools we use

To run the service, we use a small number of trusted third parties. They each act as data processors and have their own privacy policies:

• Form submissions are processed by Formspree (formspree.io), our intake-form provider, so we can receive your property details by email. Formspree stores the submission until it is delivered to us.
• Payments are processed by Stripe. Stripe collects the payment information needed to complete the €299 transaction and sends you a receipt by email. We never see or store your full card details.
• Email and WhatsApp are used for direct communication with you, including any follow-up question and delivery of the final report PDF.
• Hosting is provided by Netlify, which serves the static website.
• Advertising measurement uses Google Ads tags to understand how our advertising performs — for example, which campaign led to an enquiry. Under Google Consent Mode, advertising and analytics storage stay switched off until you accept non-essential cookies. We do not build advertising profiles or remarketing audiences, we do not run Google Analytics, and we do not sell your data.

6. Cookies and Google Ads measurement

This website uses only the minimum cookies needed to function, together with advertising-measurement technologies from Google Ads. By default, non-essential cookies are switched off: under Google Consent Mode, advertising and analytics storage stay denied until you accept.

HomeNote may use Google Ads tags and similar technologies to understand advertising performance and improve our website. These technologies may store or access information on your device only where required consent has been given, except for essential security or functionality purposes. You can accept or reject non-essential cookies through the cookie banner and change your choice using the Cookie settings link in the footer.

7. We do not sell your data

We never sell, rent or trade your personal information. We do not share your data with real estate agents, sellers, developers, mortgage brokers or any other third party for marketing purposes. We only share information when it is strictly necessary to deliver the service (for example, with Formspree to receive the form submission and with Stripe to take payment), or when we are required to do so by law.

8. How long we keep your data

We keep your information only for as long as we need it to deliver the service and to meet our legal obligations. Typically, this means:

• Report-related correspondence and the final report PDF are kept for up to three years after delivery, to allow follow-up questions and record-keeping.
• Payment and invoicing records are kept for the period required by Spanish and EU tax law (usually six years).
• You can ask us to delete your data earlier, subject to those legal retention rules.

9. Your rights

Under GDPR and equivalent rules, you have the right to:

• Access the personal data we hold about you.
• Ask for incorrect or incomplete data to be corrected.
• Ask for your data to be deleted, where there is no legal reason for us to keep it.
• Object to or restrict certain types of processing.
• Receive a copy of your data in a portable format.
• Withdraw any consent you have given.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, write to hello@homenote.es. We respond within a reasonable time, typically within one month.

10. Security

We take reasonable, sensible steps to protect your data. Payments run on Stripe's secure infrastructure. The website is served over HTTPS. Communication is by email and trusted business tools. No system on the internet is ever 100% secure, but we treat your information with care.

11. International transfers

Some of the tools we use (such as Stripe) operate internationally. Where data is transferred outside the European Economic Area, the providers we work with rely on the safeguards required by GDPR (for example, the EU Standard Contractual Clauses).

12. Children

HomeNote is a service for adult property buyers. We do not knowingly collect data from children.

13. Changes to this policy

We may update this Privacy Policy from time to time, for example if we change tools or add new functionality. The "Last updated" date at the top of this page shows when the policy was last changed.

14. Contact

For any question about this Privacy Policy or how your data is handled, please contact: