Privacy policy

Who we are

Deposit Recovery Spain is a document-preparation and process-guidance service based in Spain. We help English-speaking expats recover their rental deposits through a formal burofax and legal process support. We are not a law firm and we do not provide legal advice.

For any privacy questions, email us at hello@depositrecoveryspain.com.

What data we collect

When you submit a case through our website, we collect the information you give us:

• Your full name and ID number (NIE, passport, DNI or other)
• Your email address and phone or WhatsApp number
• The property address, tenancy dates, and deposit amount
• The landlord or agency's name, address and contact details
• Information about why your deposit is being held
• Any evidence you upload, such as contracts, payment proof, messages or photos

Why we collect it

We use your data to prepare and send a formal demand for the return of your deposit. This includes drafting your burofax, sending it via Correos, and guiding you through the next steps.

Our legal basis for processing is your consent, which you give when you tick the consent box at the end of the case form. You can withdraw your consent at any time by emailing us.

Who sees your data

Your data is only shared with people who need it to do the work:

• The small team at Deposit Recovery Spain who prepare and review your case
• The Spanish abogado who reviews the draft burofax before it is sent
• Correos, when your burofax is delivered to the address you provide
• Our secure email and file storage providers, which are based in the EU or the UK

We do not sell your data and we do not share it with anyone else unless you ask us to or we are legally required to.

Marketing

If you tick the marketing checkbox, we may email you occasionally about updates, related services or useful information for expats in Spain. We will never spam you, and you can unsubscribe at any time by clicking the link in any email or by emailing us directly.

How long we keep your data

We keep your case details for as long as necessary to complete your case, handle any follow-up, and meet our legal obligations. This is usually up to five years after your case is closed, in line with Spanish limitation periods.

Your rights

Under GDPR, you have the right to access, correct, delete, restrict or move your data. You can also object to processing or withdraw your consent. To exercise any of these rights, email us at hello@depositrecoveryspain.com. We will respond within one month.

Security

We store data in encrypted databases and file storage. Evidence files are kept in a private bucket that is not publicly accessible. Our team uses strong passwords and two-factor authentication where possible.

Cookies

We do not use cookies to track you across the web. Our site may use a small local storage key while you fill in the case form, so your answers are not lost if you refresh the page. This stays in your browser and is not sent to us until you submit the form.

Changes to this policy

We may update this policy from time to time. If we make a significant change, we will update the date at the top of this page. Continued use of the service after changes means you accept the updated policy.