Privacy policy

The controller of your data is ZAHARD LTD (trading as CasitaTax), 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom, company number 14503377. Contact: contact@casitatax.com.

• When you write to us: your name, your email address, and what you tell us about your home and your situation.
• When you fill in the request form: your first and last name, email address and phone number, with the language and address of the page you send it from and the price you clicked, if any. We use them to get back to you and, only if you accept advertising cookies, to measure our ads: your browser then sends Google Ads your email address, phone number and name in hashed form (enhanced conversions). The form also passes on the identifiers held by the cookies you accept, so that we know which campaigns bring requests and customers: your visit’s for Google Analytics (analytics cookies), the ad you clicked for Google Ads and Meta (advertising cookies).
• The form’s anti-robot check: Cloudflare Turnstile, which only loads once you start filling in the form, checks that you are not a robot from technical data about your connection and browser (IP address, browser type). This data is not used to profile or target you; Cloudflare also uses it to improve its robot detection.
• When you come from one of our partners (an estate agent, a property manager, a lawyer…): the link, page or widget that brought you carries the partner’s code, which reaches us with your request, so that we know which partners send us requests. On partners’ websites, our widget sets no cookie and stores nothing on your device: we only count, per partner, how often it is seen and clicked, without your IP address or any identifier.
• When you use our tools in an AI assistant (Claude, ChatGPT…): the assistant sends our server what the tool needs, the figures of your home, where its owners live, a town or a date of sale, never a name or a contact detail. Our server answers at once and stores none of it; Cloudflare, our host, sees the request’s technical data (the IP address it comes from, usually the assistant provider’s). What you write in the assistant is handled by its provider under its own privacy policy: we receive nothing else from it.
• When you look up a home on our Catastro page: the address or referencia catastral you type goes from our server to the Dirección General del Catastro, which answers with the home’s public cadastral data. We store neither the search nor the answer; our statistics only learn the province and whether a home was found.
• Cookies: one that remembers the language you pick in the menu and, only if you accept them, measurement and advertising cookies (see our cookie policy).
• When you use the rental log: the stays and expenses you note stay in your browser, on your device; they are never sent to us or to anyone else. Its printout and CSV file are yours: we only receive them if you send them to us, and then use them for your request like the rest of your file.

The website takes no identity document and no payment.

If you go ahead, we ask you, outside the website, for what your returns need: for each owner, their name, NIE, passport or identity card, address and country of residence, and share of the home; for the home, its IBI receipt and title deed; the rent and expenses if you rent it out, the deeds if you sold it; and the bank details used to pay the tax or receive a refund. We use them only to prepare and file your returns.

If you ask us to answer a letter from the Agencia Tributaria, we also ask you, outside the website, for the letter, the documents it calls for and your authorisation to answer on your behalf. We use them only to answer it.

If you send us the data of another owner, please show them this policy.

We never sell your data and we do not make decisions about you by automated means.

• Our team, to answer you and handle your returns.
• Our filing partner in Spain and the Agencia Tributaria, to file your returns.
• Our service providers, who process data on our instructions: Cloudflare, Inc. (website hosting, United States); the tools we use to receive your messages and to write to you from contact@casitatax.com; Google Ireland Limited (Google Analytics), only with your consent.
• Our tagging server, hosted by netcup GmbH in Germany. With your consent, Google’s tags send their data through it, on casitatax.com, before it reaches Google. It stores no IP address, and keeps its technical logs and a sample of events, without your contact details, for 30 days at most.
• Discord, Inc., which tells our team about each new request, with your details partly masked.
• Stripe (Stripe Payments Europe Limited and Stripe Payments UK Limited), our payment provider, to take your payment: your name, email address and payment details. Stripe also uses them for its own purposes, such as preventing fraud and meeting its legal obligations, as its privacy policy describes.
• Google Ireland Limited (Google Ads) and Meta Platforms Ireland Limited (Meta Pixel), only with your consent. They also use this data for their own purposes, as their privacy policies describe. With advertising consent, Google Ads also receives the request form’s contact details, hashed, to measure which ads bring requests.
• The Dirección General del Catastro (Ministerio de Hacienda, Spain), a public body, which receives the address or referencia catastral you search on our Catastro page, to answer it.

Some providers, or their parent companies, are in the United States. Transfers rely on the EU-US Data Privacy Framework (and its UK extension) when the provider is certified, or on the European Commission’s standard contractual clauses. The United Kingdom is covered by an adequacy decision of the European Commission.

• Requests that do not lead to an order: 12 months after our last exchange.
• Customer files: as long as we file your returns, then 6 years for accounting, tax and legal claims.
• Google Analytics data: 14 months.
• Your cookie choice: 6 months, then we ask again. The language you pick in the menu: 12 months.
• Your rental log: on your device, until you delete it.

You can ask to access your data, correct it, delete it, limit its use, receive it in a portable format, and object to its use. Where we rely on your consent, you can withdraw it at any time; for cookies, use “Cookie settings” at the bottom of every page. Write to contact@casitatax.com. We answer within one month.

You can also complain to a supervisory authority: the Information Commissioner’s Office in the United Kingdom (ico.org.uk), or the data protection authority of the EU country where you live.

Every page uses an encrypted connection (HTTPS). Access to your data is limited to the people who need it to handle your returns.

We may update this policy. The “last updated” date shows the current version.