legal

Privacy Policy

Elite Lawyer Spain· Last updated: July 2026

1. Who we are

Elite Lawyer Spain is the commercial name of C & K Servicios Legales S.L., a Spanish limited company (NIF: B 92305564) registered in Spain, providing legal services in the field of luxury real estate law. Our registered address is Avda. Ricardo Soriano 14, 2º C. 29601 Marbella, Málaga, España.

This Privacy Policy explains how we collect, use, store and protect the personal data we receive through our website elitelawyerspain.com and through direct communications with our clients and prospective clients.

2. What data we collect and why

2.1 Contact and enquiry data

When you submit an enquiry through our contact form or reach out to us via email, phone or WhatsApp, we collect the information you provide, which may include:

- Full name

- Email address

- Phone number

- Nationality and country of residence

- Details of your property enquiry (location, budget, type of transaction)

- Any other information you choose to share

Legal basis: Legitimate interest (Art. 6(1)(f) GDPR) and, where you have given explicit consent, your consent (Art. 6(1)(a) GDPR). For clients who proceed to instruct us, the processing is necessary for the performance of a contract (Art. 6(1)(b) GDPR).

2.2 Website analytics data

We use Google Analytics 4 to understand how visitors interact with our website. This tool collects anonymised data such as pages visited, time spent on site and device type. No personally identifiable information is collected through analytics without your consent.

Legal basis: Consent (Art. 6(1)(a) GDPR), managed through our cookie consent banner.

2.3 Communication data

When you communicate with us by email or WhatsApp, we retain records of those communications for the purposes of responding to your enquiry and maintaining accurate records of our client relationships.

3. How we use your data

We use your personal data exclusively for the following purposes:

- To respond to your enquiry and provide the legal services you have requested

- To maintain records of our client relationships

- To send relevant information about our services where you have consented to receive it

- To comply with our legal and professional obligations as a law firm

- To improve our website and the quality of our services

We do not use your data for automated decision-making or profiling.

4. Who we share your data with

We do not sell, rent or trade your personal data to third parties. We may share your data with:

- Service providers who help us operate our website and communications (such as GoHighLevel for our CRM and website hosting, and Google for analytics). These providers process data on our behalf under data processing agreements.

- Professional advisors (notaries, tax advisors, land registries) where necessary to provide you with the legal services you have instructed us to carry out.

- Regulatory authorities where we are required to do so by law or professional regulation.

5. How long we keep your data

- Enquiry data (not converted to client): 2 years from last contact

- Client data: 10 years from the end of the legal matter, in accordance with Spanish professional regulations for law firms

- Analytics data: As configured in Google Analytics 4 (maximum 14 months by default)

6. Your rights

Under the GDPR and Spanish data protection law (LOPDGDD), you have the right to:

- Access the personal data we hold about you

- Rectify inaccurate or incomplete data

- Erase your data (subject to our legal retention obligations)

- Restrict processing of your data

- Object to processing based on legitimate interest

- Data portability where processing is based on consent or contract

- Withdraw consent at any time where processing is consent-based

To exercise any of these rights, please contact us at [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

7. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses SSL encryption (HTTPS) and our CRM platform (GoHighLevel) is hosted on secure, GDPR-compliant infrastructure.

8. Changes to this policy

We may update this Privacy Policy from time to time. The date of the most recent update is shown at the top of this page. Continued use of our website after any changes constitutes your acceptance of the updated policy.