Privacy policy

1. Controller and contact

Technical and website platform controller: Sitio Uno Inc., with an operating address in Miami, Florida, United States.

To exercise your rights or ask privacy questions, use the contact email published on this site (if configured) or the form on the Contact page. You can also use the data-deletion page linked below.

2. Data we collect

Site forms: name, email, phone (if provided), preferred channel (call or email), message, intent (inquiry or visit), declared source (“how you heard about us”), proposed visit slots, language, page URL, related property and first-touch attribution (UTM, fbclid, _fbp/_fbc cookies when present), plus a technical IP hash and user agent to prevent abuse.

Meta Pixel and Conversions API: event IDs, page URL, ad/click data when applicable, and conversion information (for example Lead or Schedule) with hashed user data (email/phone) sent server-side only when marketing consent allows it.

Meta Lead Ads: if you submit an instant form on Instagram or Facebook, Meta delivers the lead (name, contact details and form answers) per the ad setup; we treat that as a commercial inquiry.

Google Analytics 4: site usage measurements (page views, events such as view_item or generate_lead) with anonymised IP when consent allows it.

Cookies and local storage: necessary technical cookies; measurement/advertising identifiers (Meta, Google) under Consent Mode v2; and first-touch attribution in the browser (about 90 days).

YouTube videos: only after you press play; YouTube may set its own cookies under its policy.

3. Purpose

Responding to inquiries, arranging visits and following up on International Immobiliare properties.

Measuring and improving advertising campaigns (Meta, Google), lead attribution and site performance.

Preventing spam, fraud and form abuse.

Meeting legal or security obligations when required.

We do not sell your data or share it with third parties for their independent marketing.

4. Legal basis

Legitimate interest and/or pre-contractual steps when we handle your information or visit request.

Consent for non-essential cookies, analytics and advertising (Consent Mode v2; in the EU/EEA they are denied by default until you accept).

Legal obligations when applicable law requires them.

5. Third parties involved

Meta Platforms (Pixel, Conversions API, Lead Ads, Instagram/Facebook): measurement and ad leads. Meta policy: https://www.facebook.com/privacy/policy

Google (Analytics 4, on-demand YouTube embeds): analytics and video playback.

Supabase: database, admin authentication and media storage.

Vercel: website hosting, platform analytics and deployment infrastructure.

SendGrid (if configured): confirmation and inquiry notification emails.

Cloudflare Turnstile (if configured): form anti-spam protection.

6. Retention

Inquiries and CRM data are kept for as long as needed for the commercial relationship and internal follow-up, then deleted or anonymised when no longer needed, unless a longer legal retention applies.

Browser attribution identifiers expire around 90 days. Measurement logs at Meta/Google follow those providers’ retention policies.

7. Your rights

You may request access, rectification, update or deletion of your personal data, and object to or restrict certain processing where the law allows.

To exercise these rights, email the site contact address or use the data-deletion page. We will respond within a reasonable time and no later than 30 days (or any shorter period required by applicable law).

8. Data deletion

You can request deletion of the data we hold about you (site inquiries, related leads and internal notes) through the dedicated data-deletion page. No Meta data-deletion callback is required: the process is manual and verifiable.