Privacy Policy

Who we are

Cretan Coast develops residential property in Kalyves, Chania, Crete. For any question about this policy or the data we hold, write to info@cretancoast.com.

What we collect

When you submit the enquiry form we store the name, email address, chosen area of interest and message you entered, together with the time you gave consent, the page you submitted from and your browser’s user-agent string.

We also store a one-way cryptographic hash of your IP address. The address itself is never written down. The hash exists only so we can tell that several submissions came from the same place within a few minutes and stop automated abuse — it cannot be turned back into an IP address.

We do not use advertising or analytics cookies, and we do not track you across other websites.

Why we hold it, and on what basis

We use these details for one purpose: to answer your enquiry and to talk to you about the properties you asked about. The legal basis is the consent you give with the checkbox on the form. You are never added to a marketing list as a side effect of enquiring.

Who else processes it

Two service providers handle this data on our behalf. Supabase stores the enquiry in a database hosted in the European Union. Resend delivers the notification we receive and the confirmation you receive. Neither uses your data for their own purposes.

The map on the location page is served by Mapbox. It loads with the rest of the page, so opening that page sends your IP address and the usual request details to Mapbox before you interact with the map. Mapbox uses this to deliver the map tiles and to measure its own usage. Nothing you type into the form reaches them.

The site is served by Vercel, which processes the technical request data any web server sees.

How long we keep it

Enquiries are kept for as long as the conversation is live and for two years afterwards, so we can pick up a thread that goes quiet and comes back. After that they are deleted. You can ask us to delete yours sooner at any time.

Your rights

Under the GDPR you can ask us for a copy of the data we hold about you, ask us to correct it, ask us to delete it, or withdraw your consent. Write to info@cretancoast.com and we will respond within one month. If you are not satisfied with our answer you may complain to your national data protection authority.