Suncoast XPSSuncoast XPS — Expat Services in Costa del Sol

Privacy Policy

Last updated: April 2026

1. Who we are

Costa del Sol Expat Services ("we", "our", "us") provides relocation, immigration, and business setup advisory services for individuals and companies moving to Spain's Costa del Sol. This policy explains how we handle your personal data when you use our website or engage our services.

2. Data we collect

We may collect the following information:

  • Contact details — name, email address, phone number, provided via our enquiry form.
  • Enquiry details — client type, timeline, services of interest, and any message you include.
  • Usage data — pages visited, browser type, device information, and IP address, collected via cookies and analytics tools (only with your consent).

3. How we use your data

We use your personal data to:

  • Respond to your enquiry and provide the services you request.
  • Communicate with you about your engagement or potential engagement.
  • Improve our website and services through anonymised analytics (with consent).
  • Comply with legal obligations.

4. Legal basis for processing

Under the EU General Data Protection Regulation (GDPR) and Spain's Ley Orgánica de Protección de Datos (LOPDGDD), we process your data on the following bases:

  • Consent — for analytics cookies and marketing communications.
  • Legitimate interest — to respond to enquiries and manage client relationships.
  • Contractual necessity — to deliver services you have engaged us to provide.
  • Legal obligation — where required by Spanish or EU law.

5. Cookies

We use the following cookie categories:

  • Strictly necessary — required for the site to function (e.g. storing your cookie choice). Always active; no consent required.
  • Analytics — Google Analytics, used to understand how visitors use the site. Only set with your explicit consent.
  • Marketing — Google Ads, used to measure and improve our advertising. Only set with your explicit consent.

On your first visit you will see a cookie banner allowing you to accept all, reject non-essential, or choose which categories to enable. You can change your choice at any time by clicking Cookie preferences in the footer.

6. Data sharing & third-party processors

We do not sell your personal data. We may share information with trusted third parties only when necessary to deliver our services — for example, immigration advisors, legal professionals, or property agents involved in your relocation. All third parties are bound by confidentiality obligations.

We also rely on the following processors to operate the website and respond to enquiries:

  • Hosting & database — our cloud hosting provider, used to host the site and securely store enquiry data within the EU/EEA where possible.
  • Email delivery — used to send notification emails when you submit an enquiry.
  • Google Analytics (Google Ireland Ltd.) — only loaded with your analytics consent. IP addresses are anonymised.
  • Google Ads (Google Ireland Ltd.) — only loaded with your marketing consent.

Where data is transferred outside the EEA, we rely on the European Commission's Standard Contractual Clauses or equivalent safeguards.

7. Data retention

We retain enquiry data for up to 24 months after your last interaction with us. Client engagement records are retained for the duration required by applicable law. You may request deletion at any time.

8. Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Request erasure of your data ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability — receive your data in a structured, common format.
  • Withdraw consent at any time.

To exercise any of these rights, please contact us using the details below.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our systems use encryption in transit (TLS) and at rest.

10. Contact

If you have questions about this policy or wish to exercise your data rights, please contact us at: privacy@costadelsol-expat.com

You also have the right to lodge a complaint with Spain's data protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.