Privacy Policy

Last updated: 2026-05-15

1. Introduction

Welcome to CanaryInsider.com ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services, in compliance with the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and the Spanish Organic Law on Data Protection and Digital Rights (LOPDGDD).

2. Data Controller

The data controller responsible for your personal data is CanaryInsider.com. You can contact our data protection team at: Email: privacy@canaryinsider.com.

3. Personal Data We Collect

We may collect and process the following categories of personal data:

  • Account Data — When you register an account, we collect your username, email address, and password (hashed). Optional: full name, bio, and profile picture.
  • Content Data — Information you provide when creating listings, posting questions or answers, writing reviews, submitting property or business listings, and uploading images.
  • Usage Data — Automatically collected information about how you interact with our site, including IP address, browser type, device information, pages visited, and time spent. This data is collected via server logs and, with your consent, analytics tools.
  • Cookie Data — We use cookies and similar technologies. For details, see our Cookie Policy and the cookie consent banner on our website. Necessary cookies are always enabled; analytics, marketing, and preference cookies require your explicit consent.
  • Communication Data — Information you provide when contacting us via email, contact forms, or messaging other users through our platform.

4. Purpose and Legal Basis for Processing

We process your personal data only when we have a lawful basis under GDPR Article 6:

  • Consent (Art. 6(1)(a)) — For placing non-essential cookies, sending marketing communications, and processing optional profile information. You may withdraw consent at any time.
  • Contract Performance (Art. 6(1)(b)) — To provide our core services — account registration, listing management, messaging, and community features.
  • Legitimate Interests (Art. 6(1)(f)) — For site security, fraud prevention, service improvement, and aggregate analytics. We balance these against your rights and freedoms.
  • Legal Obligation (Art. 6(1)(c)) — To comply with applicable laws, tax regulations, and respond to lawful requests from public authorities.

5. Cookies and Tracking Technologies

Our website uses cookies to function properly and to enhance your experience. We categorize cookies as: Necessary (essential for site operation), Analytics (site usage measurement), Marketing (advertising and campaign tracking), and Preferences (user settings and personalization). Necessary cookies do not require consent and are always active. All other categories require your explicit consent, which you can manage via our cookie consent banner.

You can manage or withdraw your cookie preferences at any time by clicking Cookie Settings in the website footer. For detailed information about each cookie we use, please see our Cookie Policy.

6. Data Retention

  • Account data is retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it.
  • User-generated content (listings, reviews, questions, answers) may remain visible on the site after account deletion in anonymized form, unless you specifically request removal under your right to erasure.
  • Analytics data is retained for a maximum of 26 months.
  • Cookie consent preferences are stored for 12 months.

7. Your Rights Under GDPR

Under GDPR (Articles 15-21), you have the following rights regarding your personal data. To exercise any of these rights, contact us at privacy@canaryinsider.com.

  • Right of Access (Art. 15) — You may request a copy of the personal data we hold about you and information about how it is processed.
  • Right to Rectification (Art. 16) — You may request correction of inaccurate or incomplete personal data.
  • Right to Erasure — "Right to be Forgotten" (Art. 17) — You may request deletion of your personal data where there is no compelling reason for continued processing.
  • Right to Restriction of Processing (Art. 18) — You may request that we limit the processing of your personal data in certain circumstances.
  • Right to Data Portability (Art. 20) — You may request your personal data in a structured, commonly used, machine-readable format, and request its transfer to another controller.
  • Right to Object (Art. 21) — You may object to processing based on legitimate interests or direct marketing at any time.
  • Right to Withdraw Consent — Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

We will respond to all legitimate requests within one month. If your request is complex, this may be extended by a further two months, in which case we will notify you. Exercising your rights is free of charge. Where requests are manifestly unfounded or excessive, we may charge a reasonable fee or refuse to act.

8. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with:

  • Hosting and Infrastructure — Our website is hosted on servers located within the European Union / European Economic Area. Our hosting provider processes data solely for the purpose of delivering our service.
  • Analytics Services — With your consent, we use analytics tools that help us understand site usage. These tools operate under their own privacy policies.
  • Email Services — Transactional emails (registration confirmation, password reset, notifications) are sent via email service providers acting as data processors.
  • Legal Compliance — We may disclose your data to comply with legal obligations, enforce our terms, or protect our rights, property, or safety.

We do not sell, rent, or trade your personal data to third parties for their marketing purposes.

9. International Data Transfers

Your personal data is primarily processed within the European Union (Spain). Where any data transfer outside the EU/EEA is necessary (e.g., for analytics tools configured by us), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or that the recipient country benefits from an adequacy decision.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include: SSL/TLS encryption for data in transit, hashed and salted password storage, access controls and authentication, regular security assessments, and secure server infrastructure. While we strive to protect your data, no method of transmission over the Internet is 100% secure.

11. Children's Data

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us and we will delete it.

12. Right to Lodge a Complaint

If you believe our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority. The relevant authority for CanaryInsider.com is the Agencia Española de Protección de Datos (AEPD) (Spanish Data Protection Agency). You can contact the AEPD at www.aepd.es.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. When we make material changes, we will notify registered users via email and display a notice on our website. Continued use of the website after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a privacy-related concern, please contact us at: Email: privacy@canaryinsider.com. We aim to respond to all inquiries within 48 hours.

Effective date: 2026-05-15