Legal information

Privacy policy

Last updated: 9 September 2026.

Controller: VARELT, a trading name professionally based in Barcelona, Spain.

Scope and source

This policy applies to information provided directly by people using varelt.com, contacting us by email or enquiring about VARELT Buyer, VARELT Private or a property. The website does not initially request identity documents, deeds, Land Registry records, bank details or special-category data.

Buyer information

VARELT Buyer forms may collect name, phone, email, approximate budget, preferred areas, timing, finance position, essential requirements, comments, language, web source, date and evidence of consent.

Owner and property information

VARELT Private forms may collect name, phone, email, approximate address, neighbourhood or municipality, property type, floor area, bedrooms, condition, expected price, occupancy, current listing or agency relationship, comments, language, web source, date and evidence of consent.

Purposes and legal bases

We process data to respond, assess service or property fit, arrange conversations, manage dossier or private-access requests and provide requested follow-up. Where a contract exists, data is also used to deliver and administer the service. Legal bases include consent, requested pre-contract steps, contract performance and applicable legal obligations.

Required information

Required fields are necessary to process an enquiry. Without them we may be unable to respond or assess fit. Submitting a form does not mean property acceptance, engagement or a guarantee of purchase or sale.

Recipients and providers

We do not sell personal data. We use Cloudflare for hosting and security, Notion for organisation and CRM and Resend for email notifications. They act as processors or technical providers under appropriate safeguards. Data is only disclosed to advisers or professionals where necessary, legally justified and previously explained.

International transfers

Some providers may process information outside the European Economic Area. Where applicable, processing relies on an adequacy decision, standard contractual clauses or another legally recognised safeguard. Further information may be requested by email.

Retention

Enquiries are retained while handled and for a reasonable follow-up period, then deleted or anonymised when no longer needed unless restricted retention is required for liabilities. Contract data is retained for the relationship and applicable legal periods.

Your rights

You may request access, correction, deletion, restriction, objection or portability and withdraw consent by emailing hola@varelt.com. You may also complain to the Spanish Data Protection Agency at aepd.es.

Automated decisions, children and security

We do not make legally significant solely automated decisions or create advertising profiles. Services are not directed at people under 18. We apply reasonable security measures and update this policy when processing or providers change.