Skip to content

Privacy Policy

Expat Property Group (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This notice explains what we collect when you use this website, why we collect it, who we share it with, and the rights you have under UK and EU data protection law.

If anything below is unclear or you want to make a request about your personal data, email us at privacy@expatpropertygroup.com.

1. Who we are

Expat Property Group is a property specialist that helps individuals, primarily UK and US expats living in or moving to Spain or Portugal, find a home abroad and connects them with vetted local partners such as estate agents, lawyers, mortgage brokers and currency specialists. We are the data controller for personal information you provide directly through this website.

We are not your estate agent, lawyer, tax adviser or financial adviser. When we introduce you to a partner, that partner becomes an independent data controller for any further interaction you have with them, under their own privacy policy.

2. What information we collect

When you use our contact or enquiry form

  • First name and last name (optional)
  • Email address (required)
  • Phone number (optional)
  • The property or location you’re interested in
  • The contents of your message

When you join our mailing list

  • Email address
  • The page or form where you signed up (for example footer, guide), so we can see which content brought you to us
  • The date you subscribed

When you simply browse the site

  • Technical data such as IP address, browser type, device type, pages viewed and time spent, used to keep the site secure and performant
  • Cookies (see section 7)

We do not knowingly collect special-category data (such as health, religion or political views) and ask that you do not send it to us via the contact form. We do not run advertising pixels or behavioural tracking, but we do use Google Analytics to understand which content is most useful to visitors (see sections 4 and 7).

3. How we use your information and our legal basis

  • Responding to enquiries. Legitimate interest (we cannot reply without your contact details) and, where relevant, taking steps to enter into a contract.
  • Sending you our newsletter and property updates. Your consent. You can withdraw it at any time using the unsubscribe link in every email or by emailing us.
  • Introducing you to a partner. Legitimate interest and your consent at the point you ask to be put in touch with an estate agent, lawyer, mortgage broker or currency specialist.
  • Site security, fraud prevention and platform stability. Legitimate interest in protecting our service and visitors.
  • Compliance with legal obligations. For example responding to lawful requests from a regulator or court.

4. Who we share your information with

We share personal data only with service providers who help us run this website and with partners we explicitly introduce you to. We do not sell your data, and we do not share it for third-party marketing.

  • Hosting and infrastructure: Cloudways, a managed platform running on DigitalOcean.
  • Transactional email: our chosen mail provider delivers contact-form submissions and notification emails.
  • Analytics: Google Analytics 4 (Google LLC, United States), which collects aggregated, pseudonymous data about how visitors use the site (pages viewed, approximate location, device type) so we can improve our content.
  • Content delivery and fonts: our web fonts and some interface scripts are delivered through content delivery networks (Google Fonts, Fontshare and jsDelivr), which may log your IP address as a necessary part of serving those files.
  • Property partners: estate agents, lawyers, mortgage brokers and currency specialists, only when you have asked us to introduce you, and only the details you have provided for that purpose.
  • Site security and spam filtering: security and anti-spam measures that process limited technical data (such as IP addresses and submission metadata) to block malicious traffic.

5. International transfers

Some of the providers above are based outside the UK and EEA (for example Google and certain underlying infrastructure and content-delivery providers). Where personal data is transferred to a country without a UK adequacy decision, we rely on the UK International Data Transfer Agreement, or the European Commission’s Standard Contractual Clauses with the UK addendum, as the safeguard under Article 46 of the UK GDPR.

6. How long we keep your information

  • Mailing list subscribers: until you unsubscribe, then for a short further period on a suppression list so we do not re-contact you in error.
  • Contact form submissions: up to 24 months from your last interaction, unless ongoing communication or a legal obligation requires us to keep them longer.
  • Server logs and security data: typically up to 12 months, then automatically purged.

7. Cookies

We use a small number of cookies and similar technologies:

  • Strictly necessary: set by our caching layer (Breeze) so pages load quickly. These cannot be switched off.
  • Analytics: Google Analytics 4 sets cookies (such as _ga and _ga_*) to recognise returning visitors and measure aggregated usage. We do not use these cookies for advertising.

For more detail on the specific cookies we set, see our cookie policy. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on, or block all cookies through your browser settings; doing so may affect the functionality of some features.

8. Your rights

Under the UK and EU GDPR you have the right to:

  • request a copy of the personal data we hold about you (a subject access request);
  • ask us to correct inaccurate or incomplete information;
  • ask us to delete your data (“right to be forgotten”) where we have no overriding lawful reason to keep it;
  • restrict or object to our processing of your data;
  • withdraw consent for marketing at any time; and
  • receive your data in a portable, machine-readable format.

To exercise any of these rights, email privacy@expatpropertygroup.com. We will respond within one calendar month.

9. Marketing communications

Every email we send includes an unsubscribe link. Clicking it removes you from our list immediately. You can also opt out by replying to any of our emails and asking to be removed.

10. Children’s privacy

This website is not intended for and is not knowingly marketed to anyone under the age of 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Security

The site is served over HTTPS, hosted on a managed platform with active firewalling and intrusion prevention, and protected by measures that block malicious traffic. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.

12. Links to other websites

Our site contains links to third-party websites (including partner firms, our social media profiles and external resources). This notice does not cover those sites, so please read each site’s own privacy policy before sharing personal data with them.

13. Changes to this notice

We update this notice from time to time. The effective date below shows when it was last changed. Material changes will be flagged on this page; minor wording fixes will not.

14. How to contact us and complain

For any privacy-related question, write to privacy@expatpropertygroup.com.

If you are not satisfied with our response, you have the right to complain to the data protection authority for your country of residence. The three most relevant to our audience are:

United Kingdom: Information Commissioner’s Office (ICO)

  • Website: ico.org.uk/make-a-complaint
  • Telephone: 0303 123 1113
  • Post: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, United Kingdom

Portugal: Comissão Nacional de Proteção de Dados (CNPD)

  • Website: cnpd.pt
  • Telephone: +351 213 928 400
  • Post: Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal

Spain: Agencia Española de Protección de Datos (AEPD)

  • Website: aepd.es
  • Telephone: 901 100 099 / +34 912 663 517
  • Post: C/ Jorge Juan, 6, 28001 Madrid, Spain

Residents of other countries may complain to the supervisory authority for their place of residence or the place of the alleged infringement.

Effective date: 28 June 2026