Who controls your data
ASTEC PUBLISHING is the data controller for personal data collected through Nerja Paradise OS. Privacy questions and rights requests can be sent through the enquiry form on this website.
Data we collect
- Account and identity data, including your email address and sign-in details.
- Enquiry and preference data, including your name, budget, preferred area, property intent, and interests.
- Purchase and subscription data, including product, status, transaction references, and billing dates. We do not receive your full card number.
- Service data, including tool inputs, reports requested, interactions, device and browser information, IP address, and security logs.
- Messages and support information you send to us.
How and why we use data
We use personal data to provide accounts and paid features, process and attribute purchases, answer enquiries, generate requested property-area guidance, maintain security, prevent fraud, improve the service, comply with legal duties, and establish or defend legal claims.
Our legal bases may include performing our contract with you, complying with law, our legitimate interests in operating and protecting the service, and consent where required.
Who receives data
We share data only where needed with service providers supporting hosting, authentication, data storage, analytics, AI processing, communications, security, and professional advice. Paddle is our Merchant of Record and receives identity, contact, payment, transaction, and subscription information needed to process purchases, prevent fraud, provide billing support, and meet legal obligations.
Property and travel providers receive information only when you choose to follow an external link or contact them. Their own privacy notices then apply. We may also disclose data where required by law or in connection with a business transfer.
International transfers and retention
Some recipients may process data outside your country. Where required, appropriate safeguards such as approved contractual clauses are used. We keep data only as long as needed for the purposes above, including contractual, tax, accounting, fraud-prevention, and legal requirements, then delete or anonymise it.
Your rights
Depending on where you live, you may ask to access, correct, erase, restrict, transfer, or object to use of your data, and withdraw consent where processing relies on it. You may also complain to your local data protection authority. We may need to verify your identity before acting on a request.
Security, cookies, and updates
We use proportionate technical and organisational measures to protect data, but no online service can guarantee absolute security. The site may use essential storage and similar technologies for sign-in, checkout, preferences, and security. We will request consent before using non-essential cookies where required.
We may update this notice as the service or law changes. The effective date above shows the latest version.