How we handle your information.

Contact details you submit through our forms: name, email, phone (optional), country of residence, citizenship, budget band, and your message.

Account details if you register: name, email, and a hashed password. If you sign in with Google, your name and email come from Google.

Technical data: IP address, browser type, pages viewed, and referring URL. How much of this is collected depends on the analytics choice you make in the consent banner — see “Cookies, local storage, and analytics” below.

Approximate country derived from your IP address (see “Approximate country from your IP” below).

To deliver project memos and reply to your enquiries.

To share your enquiry with the developer (or their authorised agency) for the project you contacted us about.

To improve the service: which markets buyers ask about, which projects get attention, which pages confuse people.

To keep the service secure: rate-limiting forms, blocking abuse.

The developer or authorised agency for the project you enquired about — only the project enquiry forms route this way; the general contact form stays with the ResidenceInvest team.

Microsoft Azure — hosting, database, and the Azure Maps geolocation service (see “Approximate country from your IP”). Plausible Insights OÜ (Estonia) and PostHog Inc. (United States) — analytics; details in “Cookies, local storage, and analytics”. Google LLC — sign-in via Google OAuth, only if you choose to use it. These providers process your data on our instructions and do not use it for their own purposes.

Authorities where we are legally required to disclose.

We do not sell your personal information. We do not run third-party advertising on this site.

All personal data we hold comes either from you directly or, if you use Google Sign-In, from Google. We do not buy data from brokers or enrichment vendors.

Enquiry and contact submissions: 24 months from last interaction.

Account data: until you ask us to delete it.

PostHog product analytics (if you consent): up to 14 months, then aggregated or deleted. Plausible: no raw event logs are retained — only aggregated counts.

You can ask us to give you a copy of the personal information we hold about you, correct it, delete it, restrict how we use it, object to a particular use, or receive it in a portable format. Where we rely on consent (for example, PostHog analytics), you can withdraw that consent at any time using Cookie settings in the footer. Email privacy@residenceinvest.com from the same address you used to contact us and we’ll respond within 30 days.

We honour the Global Privacy Control (Sec-GPC) browser signal as a refusal of analytics consent without requiring you to click the banner.

If you are in a jurisdiction with a supervisory authority you also have the right to complain to it. Examples: ICO (United Kingdom, ico.org.uk), your national data protection authority in the EU/EEA, FDPIC (Switzerland), KVKK (Türkiye), ANPD (Brazil), CAI (Quebec).

We estimate which country you are browsing from by sending your IP address to Azure Maps, the geolocation service of Microsoft Azure. We use the result to display prices in a relevant currency and to surface buyer-relevant content (for example, residency-by-investment guides that match your starting jurisdiction).

The lookup is country-only. Azure Maps returns a 2-letter country code and nothing else — no city, region, neighbourhood, or precise location.

Microsoft Azure already hosts our application infrastructure (databases, application servers, container registry). Azure Maps is part of the same Microsoft service estate, so the country lookup does not introduce a new third-party processor beyond the one we already rely on. We do not share your IP with any separate geolocation vendor.

Azure Maps is a globally distributed service. The request to atlas.microsoft.com may be served from a Microsoft endpoint outside the EU; only the resulting 2-letter country code is returned to our servers (which run in West Europe).

We do not persist your IP address. A short-lived in-memory cache pairs IPs with country codes for up to 24 hours per server instance to avoid redundant lookups; it is cleared on every restart and never written to disk or logs.

You can change the chip in the site header to a different country at any time. Your choice is then saved in your browser’s local storage (key: ri_country_override) so the rest of the site reflects it on later visits. Clearing your browser storage removes it.

Lawful basis: legitimate interest (GDPR Art. 6(1)(f)) and meşru menfaat (KVKK Art. 5(2)(f)). You can object by overriding the chip or by contacting us at privacy@residenceinvest.com.

We set a first-party cookie to remember whether you are signed in. If you accept analytics in the consent banner, PostHog also sets the cookies described below. We do not run third-party advertising and we do not set cross-site tracking cookies.

We use your browser’s local storage to remember a small number of preferences you set yourself: your display currency, your watchlist of projects, and (if you change it) your selected country. These are stored only in your browser and not transmitted to us.

Plausible Analytics (Plausible Insights OÜ, Estonia) — runs on every page. Cookieless and does not track you across sites. Collects URL, referrer, browser, device type, and a coarse country derived from your IP. The IP itself is used only to compute the country and is not stored or shared. Lawful basis: legitimate interest (GDPR Art. 6(1)(f), LGPD Art. 7(IX), KVKK Art. 5(2)(f)).

PostHog (PostHog Inc., United States) — product analytics that helps us understand which markets get attention and where the site needs work. Loaded only after you grant consent in the cookie banner. Collects clicks, form interactions, and pageviews; sets cookies prefixed ph_ and a __posthog entry in local storage. Session replay is disabled. Lawful basis: consent (GDPR Art. 6(1)(a) / ePrivacy Art. 5(3)). Transfer to the US relies on the EU–US Data Privacy Framework and Standard Contractual Clauses. Data is retained for up to 14 months and then aggregated or deleted.

We show the consent banner as a blocking modal for visitors browsing from the EU, EEA, the United Kingdom, Gibraltar, Jersey, Guernsey, the Isle of Man, Switzerland, Türkiye, Brazil, and Canada — and as a non-blocking notice for visitors elsewhere. If your browser sends a Global Privacy Control (Sec-GPC) signal, we treat that as a refusal and do not load PostHog.

Open Cookie settings in the footer of any page to review your current choice and switch it. Withdrawing consent is as straightforward as granting it (GDPR Art. 7(3)). When you withdraw, we stop further PostHog tracking immediately and clear the identifiers it stored in your browser. Events recorded before withdrawal remain in PostHog’s system until they reach the 14-month retention horizon, unless you ask us to delete them sooner.

This service is not directed to anyone under 18. If you believe a child has provided information to us, write to privacy@residenceinvest.com and we will delete it.

If we make material changes to this notice, we will say so on this page and where appropriate notify registered users by email.