Privacy Policy

This policy explains what personal information we collect through this website and by email, why we use it, who processes it on our behalf and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Clients receive further information about how we handle their data as part of their written agreement with us.

Who we are

Dibonelli Real Estate is a trading name of DIBONELLI PARTNERS LTD, a private limited company registered in England and Wales under company number 17544563, incorporated on 27 October 2026. The company’s public record is available at Companies House.

Registered office: 128 City Road, London, EC1V 2NX, United Kingdom. This address is for official correspondence only; it is not a visitor address or a place where we meet clients. To contact us, email info@dibonelli.com.

DIBONELLI PARTNERS LTD (“Dibonelli”, “we”, “us”) is the controller of the personal information described in this policy.

For any question about this policy or about your personal information, email info@dibonelli.com.

What we collect

When you send an enquiry through the website

• Your full name and email address
• Your phone number, if you choose to give it
• The type of enquiry, the property’s location and, for short-stay listings, a link to the listing — where you give them
• Your message, and your confirmation that you have read this policy

To protect the form from automated spam, it also sends the time you started filling it in, a hidden field that people do not see, and a random reference that prevents the same enquiry being sent twice. Please do not include sensitive information, such as health details, in your message.

When you email us

Your email address, the contents of your email and any attachments you choose to send.

When you visit the website

Our hosting provider processes the technical information needed to deliver pages and keep the service secure: your IP address, browser and device type, the pages requested and the date and time. Your IP address is also held briefly in our server’s memory to limit repeated form submissions. We do not use analytics, advertising or tracking technologies, the website does not set cookies, and you do not need an account to use it.

How enquiries are handled

Your browser sends the form to our server over an encrypted (HTTPS) connection. The server checks it and passes it to our email delivery provider, which delivers it as an email to the relevant Dibonelli inbox: property management enquiries to propertymanagement@dibonelli.com, advisory enquiries to advisory@dibonelli.com, and general and Italy enquiries to info@dibonelli.com. The website does not keep enquiries in a database; they are held in our business email system, and we reply from a Dibonelli email address. Sending an enquiry does not create a client relationship.

Why we use it, and our lawful basis

• Responding to your enquiry and preparing a proposal — to take steps at your request before entering into a contract (Article 6(1)(b) UK GDPR); where an enquiry does not concern a contract, our legitimate interest in responding to people who contact us (Article 6(1)(f)).
• Keeping a record of our correspondence — our legitimate interest in running the business properly, and compliance with legal obligations to keep records where they apply (Article 6(1)(c)).
• Keeping the website secure and preventing misuse, including spam checks and server logs — our legitimate interest in protecting the website and our inboxes (Article 6(1)(f)).

We do not use your details for marketing and do not add you to any mailing list. If we ever wish to, we will ask you separately. We do not sell personal information, and we do not make decisions about you by automated means.

Who processes it for us

We share personal information only with service providers who process it on our behalf and under our instructions:

• Vercel Inc. (United States) — hosting of this website, including the server that receives the enquiry form, and its technical logs. Vercel may process data in the United States and in other countries where it or its service providers operate.
• Resend (United States) — delivery of enquiry-form emails to our inboxes. Resend stores account data, email metadata and logs in the United States.
• Google (Google Workspace) — our business email, where enquiries and correspondence are held. Google may store data in the United States and other countries where it operates.

We may also share information with our professional advisers where necessary, or with public authorities where the law requires it.

International transfers

These providers process information outside the United Kingdom, in particular in the United States. Each of them is certified under the EU–US Data Privacy Framework, which, through its UK Extension (the “UK–US data bridge”), allows personal information to be transferred from the UK to certified US organisations. Their data processing terms also include the EU Standard Contractual Clauses with the UK International Data Transfer Addendum, which apply where needed. You can ask us for more information about these safeguards.

How long we keep it

• Enquiries that do not lead to an engagement: we delete them from our email system 12 months after our last meaningful contact with you, unless we need them for longer to deal with a complaint or legal claim. We do this through a periodic review of our records; it is not carried out automatically.
• Client records and correspondence: for the duration of the engagement and six years after it ends, subject to any longer period required by law — for example statutory accounting and tax record-keeping requirements.
• Our email delivery provider, Resend, states that it retains its copy of each enquiry email for 30 days under its current terms. The copy that reaches our inbox is kept in line with the periods above.
• Website technical logs are kept by our hosting provider, Vercel, for a limited period, which its documentation states is no longer than 30 days.
• IP addresses used to limit repeated form submissions are held only in server memory, for no more than ten minutes, and are not stored.

Keeping it secure

The website uses encrypted connections throughout. The keys used to send enquiry emails are held only on the server and are never sent to your browser, and access to our inboxes is limited to the people who need it.

Your rights

Under data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• have inaccurate information corrected;
• have your information erased;
• restrict our use of it, or object to it, including where we rely on legitimate interests;
• receive information you gave us in a portable format;
• withdraw consent at any time, where we rely on consent.

Some of these rights apply only in certain circumstances. To make a request, email info@dibonelli.com with “Data protection request” in the subject line. We may need to confirm your identity before acting on it. We respond within one month; if a request is complex, we may extend this by up to two further months and will tell you why.

Complaints

If you are unhappy with how we have handled your information, please contact us first so that we can try to put it right. You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk/make-a-complaint or on 0303 123 1113. If you live in the European Economic Area, you may also complain to the data protection authority in the country where you live or work.

Cookies

This website does not set cookies or use similar technologies on your device. Our Cookie Policy explains this, and what would change if we ever introduced optional services.

Changes to this policy

We will update this page if the way we handle personal information changes. The date at the top shows when it was last revised; this version takes effect from that date.