Privacy Policy

Last updated 28 October 2026

What we collect, why we collect it, and what you can ask us to do about it. This describes the service as it is actually built, not as a template imagines it.

This document is a draft. It describes how the service actually works, but no lawyer has reviewed it. Do not rely on it, and do not take payment against it, until one has.

Who is responsible for your data

Mediterranean.Properties is operated by Price Properties Global LLC, which decides how personal data here is used — in data protection terms, the controller.

We have not yet appointed a representative in the Union. Article 27 of the GDPR requires one of a controller outside the EU that offers services into it, and we are outside it. Until one is appointed and named here, write to us directly — naming a representative we have not appointed would send you to an address that reaches nobody.

Several of the markets we list are in the European Union — Guadeloupe, Martinique, French Guiana, Saint Martin and Saint Barthélemy are French territories, and Bonaire, Saba and Sint Eustatius are Dutch. If you are in the EU or UK, the GDPR applies to how we handle your data and the rights below are legal entitlements rather than courtesies.

What we collect

Only what the site needs to work. In practice that is:

  • Your account — name, email address and a hashed password, or your Google account identifier if you sign in that way. Agents and owners may also add a phone number, a biography, and agency name, website and logo.
  • Listings you publish — everything you type into the listing form, plus the photographs you upload. This is published deliberately; treat it as public.
  • Enquiries you send — your name, email, phone number if you give one, your message, and any dates you ask about. These are passed to the agent or owner of the listing, which is the entire point of sending one.
  • Things you save — saved properties and saved searches, so we can show them back to you and email you when a saved search picks up new matches.
  • Market alert requests — if you ask to hear about a market from one of the cost guides, we store the email address and the country you asked about, and nothing else.
  • Contact reveals — when a signed-in visitor reveals an agent's phone number we record that it happened, so the agent can see interest in their listings.
  • Reports — if you report a listing we keep the reason, anything you write, and your email if you give one. Reports are kept even if you later delete your account, because deleting an account should not erase the evidence against a listing.

What we deliberately do not collect

Worth stating plainly, because most sites in this category do the opposite:

  • No third-party analytics, advertising or tracking scripts. There is no Google Analytics, no advertising pixel, and no session-recording tool on this site.
  • No IP address storage. We use IP addresses in memory to rate-limit form submissions, and they are never written to the database.
  • Page views are counted, not attributed. Listing view statistics are a running total per property per day, split by the kind of page the visit came from — our search, a destination page, another website, a QR code — read from the address your browser sends with the click. They do not record who viewed anything.
  • No card details. Payments are handled by Paddle, who act as merchant of record. Card numbers never reach our servers.

Cookies

Two, both strictly functional, and neither used for advertising or cross-site tracking:

  • A session cookie, set when you sign in, which is what keeps you signed in. Removing it signs you out.
  • A small cookie named cp_rv, which remembers how many agent phone numbers you have revealed as a signed-out visitor, so we can apply the free-reveal limit. It holds a list of agent identifiers and nothing that identifies you.

How your data is used

  • To let you sign in, publish listings, and manage them.
  • To pass your enquiries to the agent or owner you sent them to.
  • To email you saved-search alerts, which you can turn off per search.
  • To show agents aggregate interest in their own listings.
  • To take payment for a subscription or a placement, through Paddle.
  • To investigate reported listings and act on them.

We do not sell personal data, and we do not share it with advertisers. Contact details on listings are shown only to signed-in visitors, and are removed from the page entirely for everyone else rather than merely hidden from view.

The legal basis for each use

The GDPR asks us to say not only what we do with your data but what entitles us to do it. Each use above rests on one of these:

  • Performing a contract with you — your account, your listings, your subscription and the payments for it. Without this data there is no service to give.
  • Our legitimate interests — passing an enquiry to the agent it was addressed to, counting views so an agent can see interest in their own listings, keeping the site up and refusing abuse of it, and keeping a moderation record. We have weighed these against your interests and kept the data to what each needs.
  • Your consent — saved-search alert emails, which you turn off per search or in your account, and which we stop sending the moment you do.
  • A legal obligation — tax and accounting records for payments, and acting on a valid notice about a listing.

Where we rely on legitimate interests you may object, and where we rely on consent you may withdraw it, without affecting anything done before you did.

Where your data is held

Price Properties Global LLC is established outside the European Economic Area, so data you give us reaches a controller outside it. Where data is transferred out of the EEA we rely on the European Commission's standard contractual clauses with the providers that hold it, and we keep the transfer to what the service needs.

We do not publish a list of server locations that we would then have to keep true. If where your data physically sits matters to you, ask and we will tell you what is the case at the time you ask.

Who else sees it

  • The agent or owner you contact — they receive your enquiry, including your email and any phone number you provide.
  • Paddle, if you buy something, as merchant of record for the payment.
  • Our email provider, to deliver enquiry notifications and alerts.
  • Our hosting and database provider, which stores the data on our behalf.
  • Our error-monitoring service, when something on the site fails: the page it happened on, the browser, and the error itself — not what you typed into a form, and not your IP address.

How long we keep it

Account data for as long as the account exists. Listings until you delete them. Enquiries and reports are kept after an account is deleted, because they belong to the conversation and to the moderation record respectively rather than to the account alone.

Your rights

If you are in the EU or UK, each of these is an entitlement, not a courtesy:

  • A copy of the personal data we hold about you, and a portable copy of what you gave us, in a machine-readable form.
  • Correction of anything inaccurate, and completion of anything half-recorded.
  • Deletion. You can close your account yourself from your account settings, which deletes it.
  • Restriction — telling us to hold data but stop using it — while a dispute about its accuracy or our grounds is settled.
  • Objection to any use that rests on our legitimate interests.
  • Withdrawing consent to anything you consented to, at any time.
  • Complaining to your national data protection authority. You do not have to come to us first, though we would rather you did.

No decision here is made about you by automated means in a way that has a legal or similarly significant effect: what the site decides automatically is which listings rank where, and that follows the plan and the paid placement the pricing page describes.

Write to [email protected] and we will respond within one month.

Reporting a listing, and the Digital Services Act

Reporting a listing, having a listing of yours restricted, and who to write to about either are set out on the Digital Services Act page, along with our contact points for users and for authorities.

Changes

If this policy changes materially we will change the date at the top and, where the change affects how we use data you have already given us, tell account holders by email.