Privacy policy
Head office
khraish@sfiberia.com
+34 672 810 563
At SF Iberia ("SF Iberia," "we," "us," or "our"), we are committed to protecting your privacy and handling personal data with security, discretion and a clear purpose. This Privacy Policy explains how we collect, use, share and protect personal data when you visit our website, contact the Madrid office or interact with our real estate advisory services.
By using this website or contacting SF Iberia, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the website or provide personal data through these channels.
1. Who we are
SF Iberia is a Madrid-based boutique real estate advisory firm working with sophisticated investors, developers, family offices and capital partners across Spain and Europe.
For data protection purposes, SF Iberia is expected to act as data controller for inquiries and website interactions. Final company registration details, registered office and privacy contact address should be inserted before launch.
2. Personal data we may collect
We may collect information that you provide directly, including name, email address, phone number, company, role, investment or development profile, inquiry type, message content and communication preferences.
We may also collect technical and usage information such as IP address, device type, browser, approximate location, language, pages visited, referral source, time on page and cookie consent preferences.
If you communicate with us by email, phone or a future form, we may keep a record of that correspondence so we can respond properly and maintain an accurate business relationship history.
3. How we use personal data
We use personal data to respond to inquiries, assess whether SF Iberia can support a mandate, prepare introductory conversations, provide relevant information about our services and manage professional relationships.
We may also use limited technical data to operate the website, protect security, understand aggregate site performance, improve content and maintain compliance records.
We do not sell personal data. We do not use inquiry content to make public claims about investors, projects, assets or transactions without appropriate authorization.
4. Legal basis for processing
Depending on the context, processing may rely on consent, pre-contractual steps requested by you, legitimate interests in operating a professional advisory business, or compliance with legal obligations.
Non-essential analytics and similar technologies should only be used with consent. You can withdraw consent at any time without affecting processing that took place before withdrawal.
5. Sharing personal data
We may share personal data with trusted service providers that support website hosting, analytics, email delivery, security, CRM, professional administration or legal compliance.
Where appropriate and subject to confidentiality, we may also share limited information with professional advisers or counterparties involved in evaluating a potential mandate. We do not disclose confidential transaction material casually or publicly.
6. International transfers
Some technology or professional service providers may process data outside Spain or the European Economic Area. Where this happens, appropriate safeguards should be used, such as adequacy decisions, standard contractual clauses or equivalent mechanisms.
7. Retention
We retain personal data only for as long as reasonably necessary for the purpose collected: to answer an inquiry, maintain a business relationship, comply with law, resolve disputes or keep appropriate professional records.
Analytics and cookie data should be retained according to the final configuration of the relevant tools and disclosed in the final cookie policy.
8. Security and confidentiality
We apply reasonable technical and organizational measures to protect personal data, including access controls, secure hosting practices and confidentiality expectations for those who handle information.
No website or transmission method is completely secure. Initial website inquiries should not include highly confidential deal files, investor lists, financial models or sensitive third-party information.
9. Your rights
Subject to applicable law, you may request access, rectification, erasure, restriction, objection, portability or withdrawal of consent. You may also have the right to lodge a complaint with the competent data protection authority.
The final privacy contact email and supervisory authority reference should be confirmed before publication.
10. Updates and contact
We may update this policy to reflect changes in law, technology or SF Iberia operations. The latest version will be published on this page with an updated date.
For privacy questions, contact SF Iberia through the contact details published on this website. Final legal contact details should be added before launch.