Legal
Privacy Policy
Last updated: October 2026
Draft. This page is being finalised. Details shown as [to be confirmed] will be completed before it is relied upon.
This policy explains what personal information we collect through this website and by email, why we use it, who processes it for us and the rights you have. It applies to visitors and enquirers in the United Kingdom, Italy and elsewhere. Clients receive further information about how we handle their data as part of their written agreement.
Who we are
Dibonelli Real Estate is the intended trading name of Dibonelli Partners Ltd. An application to incorporate Dibonelli Partners Ltd as a private limited company in England and Wales has been submitted and is awaiting approval by Companies House. Company number: [pending incorporation].
Intended registered office: 128 City Road, London, EC1V 2NX, United Kingdom. This address is for official correspondence only; it is not a visitor address or a place where we meet clients. To contact us, email info@dibonelli.com.
Once incorporated, Dibonelli Partners Ltd (“Dibonelli”, “we”) will be the controller of the personal information described in this policy. Until incorporation is confirmed: [controller to be confirmed with our legal adviser]. ICO registration number: [to be confirmed].
For any question about this policy or your information, contact us at info@dibonelli.com.
Representative in the European Union, where one is required for enquiries from people in Italy and other EU countries: [to be confirmed].
What we collect
When you send an enquiry through the website
- Your name and email address
- Your phone number, if you choose to give it
- The type of enquiry, the property’s location and, for short-stay listings, a link to the listing — where you give them
- Your message, and your confirmation that you have read this policy
To protect the form from automated spam, it also sends the time you started filling it in, a hidden field that people do not see, and a random reference that stops the same enquiry being emailed twice. Please do not include sensitive information, such as health details, in your message.
When you email us
Your email address, the contents of your email and any attachments.
When you visit the website
Like any website, our hosting provider processes technical information needed to deliver pages and keep the service secure: your IP address, browser and device type, the pages requested and the date and time. Your IP address is also held briefly in our server’s memory to limit repeated form submissions; we do not store it in our records. We do not use analytics, advertising or tracking technologies, and you do not need an account to use the site.
How enquiries are processed
Your browser sends the form to our server over an encrypted (HTTPS) connection. The server checks it and passes it to our email delivery provider, which delivers it as an email to the relevant Dibonelli inbox: property management enquiries to propertymanagement@dibonelli.com, advisory enquiries to advisory@dibonelli.com, and general and Italy enquiries to info@dibonelli.com. The website does not keep enquiries in a database; they are held in our email system, and we reply from a Dibonelli email address.
Why we use it, and our lawful basis
We rely on the following lawful bases under the UK GDPR and the EU GDPR:
- Responding to your enquiry and preparing a proposal — to take steps at your request before entering into a contract; where an enquiry does not concern a contract, our legitimate interest in responding to people who contact us.
- Keeping a record of our correspondence — our legitimate interest in running the business properly, and any legal obligations to keep records.
- Keeping the website secure and preventing misuse, including spam checks and server logs — our legitimate interest in protecting the website and our inboxes.
We do not use your details for marketing and do not add you to any mailing list. If we ever wish to, we will ask you separately. We do not sell personal information or make decisions about you by automated means.
Who processes it for us
We share personal information only with providers who process it on our behalf and under our instructions:
- Vercel Inc. — hosting of this website, including the server that receives the enquiry form and its technical logs.
- Resend — delivery of enquiry-form emails to our inboxes. Data region used: [to be confirmed].
- Google (Google Workspace) — our business email, where enquiries and correspondence are held.
We may also share information with professional advisers where needed, or with authorities where the law requires it.
International transfers
These providers may process information outside the United Kingdom and the European Economic Area, including in the United States. Where they do, the transfer is protected by [the applicable safeguards, e.g. the UK International Data Transfer Addendum and EU Standard Contractual Clauses, or the provider’s certification under the EU–US Data Privacy Framework and its UK Extension]. You can ask us for details.
How long we keep it
- Enquiries that do not lead to an engagement: [retention period].
- Correspondence with clients: for the duration of the engagement and afterwards for [retention period], as required by law and for the defence of legal claims.
- Website technical logs: kept by our hosting provider for a limited period under its standard settings [period to be confirmed].
- IP addresses used to limit repeated form submissions are held only in server memory, for no more than ten minutes, and are not stored.
Keeping it secure
The website uses encrypted connections throughout. The keys used to send enquiry emails are held only on the server and are never sent to your browser, and access to our inboxes is limited to the people who need it.
Your rights
Depending on where you live and the circumstances, you have the right to:
- ask for a copy of the personal information we hold about you;
- have inaccurate information corrected;
- have your information deleted;
- restrict or object to our use of it, including where we rely on legitimate interests;
- receive information you gave us in a portable format;
- withdraw consent at any time, where we rely on consent.
To make a request, email info@dibonelli.com with “Data protection request” in the subject line. We may need to confirm your identity before acting on it. We respond within one month; if a request is complex, we may extend this by up to two further months and will tell you why.
If you are unhappy with how we have handled your information, please contact us first. You can also complain to a supervisory authority: in the UK, the Information Commissioner’s Office (ico.org.uk); in Italy, the Garante per la protezione dei dati personali (garanteprivacy.it); or the authority in the country where you live or work.
Cookies
This website does not set cookies or use similar technologies on your device. Our Cookie Policy explains this, and what would change if we ever introduced optional services.
Changes to this policy
We will update this page if the way we handle personal information changes. The date at the top shows when it was last revised.