Privacy Policy

Controller: Denise Guerrero (independent real estate advisor).

Business name: Kensington Malaga (operational brand presence within the Kensington Finest Properties International network).

Address: C. Cervantes, 8, planta 1, puerta 1, Málaga-Este, 29016 Málaga, Spain.

Email: denise.guerrero@kensington-international.com

Phone: +34 655 149 993

If a Data Protection Officer (DPO) is appointed, the DPO contact details will be listed here.

Depending on your interaction with us, we may collect: name, email, phone number (including WhatsApp), preferred contact method, time zone, message content, property details for valuations, and website usage data (IP, browser, pages viewed, clicks, referrer, and campaign parameters).

If call or messaging channels are enabled, we may also process call/message metadata (time, duration, routing, sender). We do not record calls unless explicitly notified and lawfully justified.

• Responding to inquiries, scheduling viewings, and sending requested information: pre-contract steps / contract (Art. 6(1)(b)) and, where applicable, legitimate interests (Art. 6(1)(f)).
• Valuations and seller advisory: pre-contract steps / contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
• Relocation support waitlist: consent (Art. 6(1)(a)).
• Security, fraud prevention, and troubleshooting: legitimate interests (Art. 6(1)(f)).
• Non-essential analytics, marketing, and call tracking: consent (Art. 6(1)(a)), managed through the cookie preferences panel.

When SMS is enabled, we require separate explicit opt-in (unchecked checkbox), display frequency and carrier-rate disclosures, and provide STOP/HELP instructions. We retain proof of consent (language shown, timestamp, and source page).

We do not sell phone numbers or SMS opt-in data, and we do not share SMS opt-in consent with third parties for their own marketing.

We may share personal data with service providers needed to operate this website and services: hosting/infrastructure, CMS/database, analytics (consent-gated), email/messaging, CRM/lead management, and call tracking providers if enabled.

We put Data Processing Agreements (DPAs) and appropriate security measures in place with processors.

Some providers may process data outside the EEA (including the United States). Where this occurs, we rely on Standard Contractual Clauses (SCCs) and supplementary safeguards where required.

• Buyer inquiries / viewing requests: typically 12 to 24 months from the last interaction.
• Seller / valuation inquiries: typically 24 to 60 months due to longer sales cycles.
• Relocation waitlist: until launch or consent withdrawal.
• Analytics data: per tool settings (commonly 14 to 26 months), consent-gated.
• Call records: typically 6 to 24 months when applicable and lawfully justified.

We may retain limited records longer where legally required or needed to establish, exercise, or defend legal claims.

You may exercise rights of access, rectification, erasure, restriction, objection, portability (where applicable), and withdrawal of consent at any time.

Privacy contact: denise.guerrero@kensington-international.com.

You also have the right to lodge a complaint with the Spanish supervisory authority (AEPD): https://www.aepd.es/.

See our Cookies Policy for cookie categories, purposes, and how to withdraw consent at any time.

We implement reasonable technical and organizational measures (for example HTTPS and access control). This site is not intended for children under 16. We may update this policy and will update the revision date accordingly.