Tharros Brokers exists to make Spanish property financing simpler for people who don’t live here yet. That only works if you trust us with your information — so this page tells you, plainly, what we collect, what we do with it, and what happens after you hand it to us.

What Information Ends Up With Us

What you tell us directly, and a small amount collected automatically by the website.

Directly from you. When you submit an enquiry, complete our pre-approval form, or message us via WhatsApp, you may share:

• Full name, email address, phone number
• Country of residence and nationality
• Property location, purchase price, and loan amount sought
• Employment status and income details
• Anything else you choose to include in your message

Automatically, from your visit. Standard technical data — IP address, browser type, device type, pages viewed, and how you arrived at the site — is collected to keep tharrosbrokers.com running securely and to understand how it’s used. We cover cookies specifically further down this page.

Keeping It Safe

Real technical and organisational safeguards, not just a promise.

• SSL/HTTPS encryption on every page of tharrosbrokers.com
• Secure, access-controlled hosting with regular security review
• Internal access to personal data limited strictly to team members who need it to do their job
• Data processing agreements in place with every third-party provider who touches your information

No system connected to the internet is 100% immune to risk, and we won’t pretend otherwise — but we treat your data the way we’d want a bank to treat ours. If you ever suspect unauthorised access to your information, contact us immediately.

What Happens To It Next

Why we process it, and exactly where it goes from there.

Everything we do with your information has a specific, lawful reason behind it:

What we do	Why (legal basis)
Assess your mortgage eligibility and give you a recommendation	Pre-contractual steps taken at your request
Forward your details to the Spanish banks best suited to you	Your explicit consent, given before we submit anything
Follow up on your enquiry and keep you updated	Performance of a contract / legitimate interest
Comply with AML and Know Your Customer (KYC) checks	Legal obligation under Spanish financial regulation
Improve our website using aggregated, anonymised analytics	Legitimate interest

When you’re ready to proceed, we forward the information you’ve provided to the Spanish banks best suited to your situation, and to the technology and service providers who support the processing of your enquiry (each bound by a data processing agreement). Those banks independently assess and underwrite your application — we don’t make lending decisions, set interest rates, or approve or decline anything ourselves. We will always tell you which lender(s) we’re approaching before we send your information anywhere.

Beyond that, your information only reaches:

Hosting & infrastructure	Hostinger — bound by a data processing agreement
Communication tools	Email and CRM systems — same restriction
Enquiry processing & verification	Service providers who support handling and verification of your enquiry — same restriction
Analytics	Google, anonymised and aggregated where possible
Regulators & legal authorities	Only where required by Spanish or EU law

None of these providers may use your data for their own purposes. If Tharros Brokers is ever acquired or merged with another company, your data may transfer as part of that transaction — we’ll notify you in advance wherever possible. We don’t sell, rent, or trade your personal information to anyone for their own marketing purposes. Ever.

How Long We Hold On To It

• Enquiries that don’t proceed to an application: up to 12 months from your last contact, then securely deleted
• Completed mortgage applications: up to 7 years, as required under Spanish financial and AML regulation
• Analytics data: aggregated and anonymised, retained per Google’s standard settings (up to 26 months)

Once we no longer have a legitimate reason to hold your data, we delete or anonymise it — we don’t hold onto it “just in case.”

Cookies, In Brief

• Google Analytics — understands how visitors use the site (pages visited, session duration, traffic source). Anonymised.
• Google Ads conversion tracking — measures when a visit results in an enquiry, so we can improve our advertising.
• Google Tag Manager — manages the above efficiently.
• Essential cookies — required for the site to function (security, session management).

We do not currently use any advertising or social media tracking pixels beyond Google on this site. You can control cookies through your browser settings; disabling non-essential ones won’t affect your ability to submit an enquiry. To opt out of Google Analytics specifically, visit tools.google.com/dlpage/gaoptout.

If You’re Under 18

Our services are intended exclusively for adults (18+) seeking mortgage financing. We do not knowingly collect information from anyone under 18. If you believe we’ve inadvertently collected such data, contact us and we’ll delete it promptly.

Taking Back Control

You have real, enforceable rights over your data — here’s how to use them.

If you’re a resident of the EEA, UK, or Switzerland, you have the right to:

Right	What it means
Access	Request a copy of the data we hold about you
Rectification	Ask us to correct inaccurate or incomplete data
Erasure	Request deletion (“right to be forgotten”)
Restriction	Ask us to pause processing in certain circumstances
Portability	Receive your data in a portable, machine-readable format
Objection	Object to processing based on legitimate interest or direct marketing
Withdraw consent	Where processing relies on consent, withdraw it at any time

To exercise any of these, use our contact page — we respond within 30 days. If you believe we’re handling your data unlawfully, you can lodge a complaint with:

Agencia Española de Protección de Datos (AEPD) — www.aepd.es
UK residents may also contact the ICO — ico.org.uk

A quick note on Do-Not-Track: there’s currently no universally accepted standard for how websites should respond to browser “Do Not Track” signals, so tharrosbrokers.com doesn’t alter its data practices based on them at this time. If an accepted standard emerges, we’ll update this policy.

Keeping This Page Current

We’ll update this page when our practices, services, or applicable law change. The “Last Updated” date at the top always reflects the most recent revision, and we’ll notify you directly for any material changes where possible.

Talk To Us

Copyright © 2026 THARROS Brokers