Palm Estates
← Back to site

Privacy Policy

Last updated: May 30, 2026

Palm Estates respects your privacy and is committed to protecting the personal data you share with us via palmestates.immo, pro.palmestates.immo, the owner portal, the buyer portal and the Palm mobile app. This policy explains what data we collect, why, how we protect it and the rights you have over it.

1. Data we collect

  • Identity & contact : name, surname, email address, phone number, when you create an account, submit a personalised search, place an offer or contact an advisor.
  • Real-estate project data : search criteria (mode, type, city, neighbourhood, budget, surface, free-form notes), photos and descriptions of properties you list with us.
  • Financial offer data : amount offered, down payment, financing type, bank, monthly capacity. Uploaded supporting documents (ID, bank statements, mortgage pre-approval).
  • Technical data : IP address, user agent, pages visited, functional and anonymised audience-measurement cookies (Vercel Analytics).
  • Third-party platform data : if you sign in via Google or Apple, we receive only your verified email.

2. Why we collect this data

  • Service delivery : show properties, let you submit a search or an offer, manage your account.
  • Buyer / seller matchmaking : forward your details to the assigned advisor, to a property owner you selected, or anonymised to a seller during the offer flow.
  • Communication : confirmations, magic-link sign-ins, viewing follow-up, offer status notifications. You can unsubscribe at any time.
  • Legal compliance : retention of contracts, mandates and digitally-signed viewing vouchers.
  • Service improvement : aggregated, anonymised usage statistics to improve recommendation quality.

3. Legal basis (GDPR)

  • Performance of a contract or pre-contractual steps : briefs, offers, mandates, viewings.
  • Consent : optional marketing communications and non-essential cookies. Revocable at any time.
  • Legal obligation : retention of commercial and tax documents.
  • Legitimate interest : site security, fraud prevention, aggregated statistics.

4. Who we share your data with

Your data is never sold. It is shared only with the following recipients, under confidentiality :

  • Palm Estates advisors authorised to handle your case.
  • Property owners you have selected, when you submit an offer. Offers shown to sellers remain anonymised until the seller expresses interest.
  • Technical sub-processors :
  • *Supabase* (database hosting and authentication) — EU.
  • *Vercel* (hosting and CDN) — EU / US.
  • *Resend* (transactional emails) — EU / US.
  • *Anthropic Claude* (buyer profile analysis, brief text processing) — US. Data is sent on demand and is not used to train models.
  • *Replicate* (editorial image generation, no personal data involved) — US.
  • Authorities only on lawful request.

5. How long we keep your data

  • Active account : as long as you use the service.
  • Inactivity : automatic deletion 3 years after your last sign-in, except for legal-retention items.
  • Signed commercial documents (mandates, viewing vouchers, accepted offers) : 10 years, as required by Moroccan law.
  • Technical logs : 12 months maximum.

6. Your rights

Under Moroccan law 09-08 and the GDPR where applicable, you have the right to :

  • Access your data.
  • Correct inaccurate data.
  • Request erasure (right to be forgotten), subject to legal obligations.
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time where it was requested.

To exercise these rights, email contact@palmestates.immo. We respond within 30 days.

You also have the right to lodge a complaint with the CNDP (Moroccan Data Protection Authority) at www.cndp.ma.

7. Security

We implement appropriate technical and organisational measures : HTTPS encryption everywhere, Row-Level Security at the database level, passwordless magic-link authentication, role-based access isolation, audited access to sensitive documents, regular backups.

8. Cookies

We use :

  • Essential cookies : authentication, language preference, active session. Required for the service to work, no consent prompt needed.
  • Anonymised audience measurement (Vercel Analytics) : no personal identifier, aggregated.

No advertising cookies and no third-party tracking cookies are used.

9. Minors

The service is not intended for people under 18. If you discover that a minor has shared data with us, contact us for immediate removal.

10. Changes

This policy may evolve to reflect legal or technical changes. The last-updated date appears at the top of this page. Substantial changes will be notified by email.

11. Contact

For any question regarding your personal data :

  • Email : contact@palmestates.immo
  • Address : Palm Estates, Casablanca, Maroc.