Legal
Privacy Policy
Last updated: September 2026
This policy explains what personal data Luma collects through lumaspain.com, why we collect it, how it is stored and what rights you have over it.
Who is responsible for your data
The data controller is [LEGAL ENTITY TO CONFIRM], operating the website lumaspain.com (“Luma”). Registered address and company registration details: [LEGAL ENTITY TO CONFIRM]. You can contact us about privacy matters at [CONTACT EMAIL TO CONFIRM].
What data we collect
We only collect data you choose to send us through a form on this website:
- Buyer Guide forms (homepage and guide): first name and email address.
- Optional buyer profile step: country of residence, WhatsApp number, buying timeline, purpose of purchase, budget range, financing need, renovation interest and areas of interest.
- Luma Weekly newsletter: first name and email address.
- Property Analyzer: first name, email address and the property listing URL you share.
- Neighborhood matcher: the answers you select, and your email address if you choose to save your shortlist.
We do not ask for identity documents, financial account details or payment information. The website has no user accounts and no login.
Why we use it
- To send you the Madrid Buyer Guide and the content you requested.
- To send Luma Weekly and related Madrid property information, where you asked for it.
- To reply to a property analysis request or a direct question.
- To understand which topics are useful, so we can improve the guide.
The legal basis is your consent, given when you submit a form, and our legitimate interest in responding to your enquiry. You can withdraw consent at any time.
Who processes your data
We keep the number of third parties deliberately small. Today, the following services process form submissions on our behalf:
- Lovable — website hosting, application delivery and the database where form submissions are stored.
- Notion — our internal CRM, where a lead record (name, email, WhatsApp, location, source, timeline, property type, budget and notes) is created or updated.
- Lovable's managed email service — used to send confirmation and guide emails from the madrid.lumaspain.com sending domain.
- Google Fonts — serves the website typefaces; your browser requests these files from Google when a page loads.
We do not sell your data, and we do not share it with estate agents, developers or advertisers.
Email as your identifier
Your email address is used as the unique identifier for your record. If you submit more than one form, we update your existing record rather than creating a duplicate, and we do not overwrite existing information with blanks.
How long we keep it
We keep your data for as long as you remain interested in Madrid property content, or until you ask us to delete it. You can unsubscribe from any email we send, or write to us and we will remove your record.
Your rights
Under the GDPR you can request access to your data, correction, deletion, restriction of processing, portability, and you can object to processing. Write to [CONTACT EMAIL TO CONFIRM] and we will respond within one month. If you are not satisfied, you may lodge a complaint with the Spanish data protection authority (Agencia Española de Protección de Datos).
Changes to this policy
If we add a service that processes personal data, we will update this page and the date above before it goes live.