Privacy and Data Protection Policy

Last updated: 29 July 2026.

This Privacy and Data Protection Policy explains how the business operating under the trade name The Angel Collective collects, uses, stores, shares and protects personal data through its website and related communications.The protection of the privacy and personal data of our website visitors, prospective buyers, property owners, clients and professional partners is important to us.

1. Data Controller

The controller responsible for the processing of personal data is: Legal name: ZYGOUNAS NIKOS Trade name: The Angel Collective Registered address: Egnatias 72, ioannina Email: contact@theangel-collective.com. For any questions, requests or concerns regarding this Policy or the processing of your personal data, please contact us using the email address above.

2. Scope of This Policy

This Policy applies to personal data collected when you:visit or use our website;complete a contact form;request access to a private property portfolio;express an interest in buying, selling or investing in property;subscribe to our newsletter;contact us by email, telephone, messaging service or another available communication channel;enter into, or consider entering into, a professional relationship with The Angel Collective.

3. Personal Data We Collect

The personal data we collect depends on how you interact with us and which services you request.

3.1 Identity and Contact Information

We may collect:your full name;your email address;your telephone number;your country of residence;your preferred method of communication.

3.2 Property Search and Buyer-Enquiry Information

When you request information about a property or access to a private portfolio, we may collect:your preferred location or locations;the type of property you are seeking;your intended price range or available budget;the intended use of the property;your expected purchasing timeframe;your property requirements and preferences;any additional information included in your enquiry.

3.3 Property Owner and Seller Information

When you contact us regarding the potential sale or representation of a property, we may collect:your identity and contact information;the general location and characteristics of the property;information regarding ownership or authority to market the property;photographs, floor plans, surveys, title-related documents or other materials you provide;information required to assess a potential professional relationship.Please do not submit passwords, complete bank account details, highly sensitive identity documents or other information that is unnecessary for an initial enquiry through a standard website form.Where additional documentation is required, we may provide a more appropriate and secure method of transmission.

3.4 Newsletter Information

When you subscribe to our newsletter, we may collect: your name, your email address, the date and method of subscription, information relating to the delivery, opening or interaction with our communications, where supported by the relevant email platform and permitted by law.

3.5 Technical and Website-Usage Information

When you visit the website, we may collect certain technical and usage data, including:your Internet Protocol address;your device type and operating system;your browser type and version;your language settings, your approximate geographical region, the pages you visit, the date, time and duration of your visit, the website or source from which you reached our website;information concerning website performance, security incidents and technical errors.Some of this information is collected using cookies and similar technologies.

4. How We Collect Personal Data

We may collect personal data:directly from you when you submit a form or communicate with us;automatically through cookies, analytics technologies and technical logs, from professional partners who lawfully refer or introduce you to us;from publicly available sources where this is necessary for a legitimate professional purpose.

5. Purposes and Legal Bases for Processing

We process personal data only where we have an appropriate legal basis.

5.1 Responding to Enquiries

We use your personal data to:respond to your questions;provide information about properties or services;understand and assess your requirements;arrange a telephone call, online meeting or in-person meeting;evaluate a potential property acquisition, sale or professional relationship.This processing may be necessary in order to take steps at your request before entering into a contract. In other circumstances, it may be based on our legitimate interest in responding to genuine business enquiries and operating our services.

5.2 Providing and Managing Services

Where a professional or contractual relationship is established, we may process personal data to:provide property brokerage or advisory services;manage our relationship with you;identify and present potentially suitable properties;market a property in accordance with an agreed instruction;coordinate with professionals involved in a potential transaction;comply with contractual, regulatory, accounting and legal obligations.

5.3 Newsletter and Marketing Communications

We send newsletters and promotional communications where you have provided the required consent or where another lawful basis is available under applicable law.You may withdraw your consent or unsubscribe at any time by:selecting the unsubscribe link included in a marketing email; orcontacting us at contact@theangel-collective.com.Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.4 Analytics and Website Improvement

Where required, and subject to your cookie preferences, we may use analytics technologies to:understand how visitors use the website;measure website traffic and performance;improve the structure and content of the website;identify technical problems;evaluate the effectiveness of our content and marketing activities.

5.5 Security and Prevention of Misuse

We may process technical and usage information to:protect the website and our information systems;detect and prevent spam, fraud and malicious activity;investigate suspected security incidents;maintain technical logs;establish, exercise or defend legal claims.This processing is based on our legitimate interest in protecting our systems, users and business operations.

5.6 Compliance With Legal Obligations

We may process or retain personal data where necessary to:comply with tax, accounting, anti-fraud or other legal obligations;respond to a lawful request from a court, regulatory authority or public body;establish, exercise or defend legal claims;comply with obligations arising from an actual or proposed property transaction.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies.

6.1 Strictly Necessary Cookies

Strictly necessary cookies may be used for:the fundamental operation of the website;website and account security;the management of privacy preferences;the correct delivery of features specifically requested by the user.Where a cookie is strictly necessary to provide a requested service, it may not require consent.

6.2 Analytics Cookies

Subject to your consent where required, analytics cookies may be used to understand website usage and performance.The services used may include:Squarespace Analytics;Google Analytics;other analytics services identified through our cookie-management interface.

6.3 Functional and Marketing Cookies

Where functional, advertising, remarketing, social-media or embedded third-party technologies are used, they will be activated in accordance with applicable law and the choices expressed through our cookie-management system.You may change or withdraw your cookie choices at any time using the Cookie Settings option available on the website.Withdrawing consent should be as straightforward as providing it.

7. Recipients and Service Providers

We do not sell personal data.Where necessary for the purposes described in this Policy, personal data may be shared with:website hosting and infrastructure providers;providers of business email and communication services;website analytics providers;newsletter and email-marketing platforms;website translation providers;information-technology and cybersecurity providers;accountants, lawyers, notaries, engineers, architects and tax advisers;collaborating property professionals or agencies, where this is necessary for a specific request or potential transaction;courts, regulatory bodies and public authorities where disclosure is required by law.Depending on the services currently active on the website, our technology providers may include:Squarespace, for website hosting, forms, analytics and website functionality;Google, for professional email, analytics and related services;Weglot, for website translation functionality;[INSERT NEWSLETTER PROVIDER], for newsletter subscription and delivery, where a separate provider is used.Only the providers and tools that are actually in use should be listed in the published version of this Policy.

8. International Data Transfers

Some of our technology providers or their subprocessors may process personal data outside the European Economic Area.Where personal data is transferred internationally, we take steps to ensure that an appropriate transfer mechanism is in place, where required. Such mechanisms may include:a European Commission adequacy decision;approved Standard Contractual Clauses;another safeguard permitted under applicable data-protection law.You may contact us for further information regarding the safeguards applicable to a particular transfer.

9. Data-Retention Periods

We retain personal data only for as long as it is reasonably necessary for the purposes for which it was collected, including compliance with legal, accounting and reporting obligations.As a general approach:data relating to initial enquiries and private-portfolio requests may be retained for up to 24 months after the last meaningful communication;newsletter data may be retained until you unsubscribe or withdraw your consent;following an unsubscribe request, a limited suppression record may be retained to ensure that you are not added again without an appropriate legal basis;client and professional-partner data may be retained for the duration of the relationship and for any additional period required under tax, accounting, contractual or legal rules;analytics data is retained in accordance with the retention settings of the relevant analytics platform;information required for legal claims may be retained until the relevant limitation periods have expired.When personal data is no longer required, it will be deleted, anonymised or access to it will be appropriately restricted.

10. Security of Personal Data

We implement reasonable and appropriate technical and organisational measures designed to protect personal data against:unauthorised access;accidental or unlawful loss;alteration;destruction;unauthorised disclosure;misuse.Depending on the nature and level of risk, these measures may include:secure encrypted connections;access restrictions based on business necessity;strong passwords and multi-factor authentication;software and system updates;appropriately managed backups;security monitoring and incident-response procedures;assessment of relevant service providers.Although we take reasonable steps to protect personal data, no website, information system, transmission method or storage system can be guaranteed to be entirely secure or free from all risk.

11. Personal Data Breaches

If we become aware of an actual or suspected personal data breach, we will assess and manage the incident in accordance with applicable data-protection law.Depending on the nature and severity of the incident, we may:investigate and contain the incident;document its nature, consequences and remedial measures;involve relevant service providers and professional advisers;notify the competent supervisory authority where required;inform affected individuals without undue delay where the incident is likely to result in a high risk to their rights and freedoms.The statement that no information system can be guaranteed to be entirely secure does not limit our statutory obligations or the legal rights of affected individuals.

12. Your Data-Protection Rights

Subject to the conditions and limitations of applicable law, you may have the right to:receive clear information about how your personal data is processed;request access to personal data held about you;request the correction of inaccurate or incomplete data;request the deletion of your personal data;request the restriction of processing;object to processing based on legitimate interests;request data portability where applicable;withdraw your consent at any time;object to direct marketing;request that you are not subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.To exercise any of these rights, please contact:contact@theangel-collective.comBefore responding to a request, we may ask for information that is reasonably necessary to confirm your identity and protect personal data from unauthorised disclosure.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data-protection supervisory authority if you believe that your personal data has been processed unlawfully.In Greece, the competent supervisory authority is the:Hellenic Data Protection AuthorityYou may contact us before submitting a complaint so that we have an opportunity to examine and, where possible, resolve the matter.

14. Children’s Data

The website and our services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If we become aware that personal data relating to a child has been submitted without an appropriate legal basis, we will take reasonable steps to delete it.

15. Third-Party Websites and Services

The website may contain links to websites, platforms or services operated by third parties.We do not control the privacy or security practices of those third parties. You should review the privacy notices of the relevant external services before providing them with personal data.

16. Changes to This Policy

We may update this Policy to reflect:changes to our services;changes to the technologies or service providers we use;changes to applicable law;changes in the way personal data is processed;improvements to our privacy and security practices.The current version will be published on the website together with its date of last update.

17. Contact Us

For questions about this Policy, the processing of your personal data or the exercise of your rights, please contact: The Angel Collective Email: contact@theangel-collective.com Registered address: Egnatias 72, Ioannina