1. Data Controller
Legendera Residences Miami Corp. is responsible for the processing of personal data as described in this privacy policy ("we", "us", or "our").
For privacy-related inquiries, contact us at: privacy@legendera.us
2. Data We Collect
We collect personal data when you interact with our website, including when you:
- Submit our contact form (name, email, company, investment preferences, message)
- Register for our investor portal (name, email, company, accreditation status)
- Browse our website (technical data via cookies and analytics)
- Communicate with us via email or phone
Technical Data
We automatically collect certain technical information when you visit our website, including IP address, browser type, operating system, referring URLs, and pages visited. This data is used to maintain and improve the website.
3. Purpose and Legal Basis
We process your data for the following purposes:
- Responding to inquiries — Legal basis: Legitimate interest / pre-contractual steps
- Investor portal access — Legal basis: Performance of contract / legitimate interest
- Website security and fraud prevention — Legal basis: Legitimate interest
- Legal compliance — Legal basis: Legal obligation
- Analytics and website improvement — Legal basis: Legitimate interest / consent
4. Cookies and Tracking
Our website uses cookies to enable functionality and improve user experience. Cookies fall into the following categories:
- Essential cookies — Required for the website to function. Cannot be disabled.
- Analytics cookies — Help us understand how visitors use our site. Require consent.
- Preference cookies — Remember your settings and choices. Require consent.
You can manage cookie preferences at any time through our cookie consent banner or your browser settings. Withdrawing consent does not affect the lawfulness of prior processing.
5. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers — Third parties that process data on our behalf (e.g., hosting, database services), bound by data processing agreements.
- Legal authorities — When required by applicable law, court order, or governmental authority.
- Professional advisors — Attorneys, accountants, and auditors under duties of confidentiality.
Supabase
Our platform uses Supabase for authentication and database services. Data processed through Supabase is subject to their Privacy Policy.
Unsplash
We use images from Unsplash (Unsplash Inc.) for illustrative purposes. When these images are loaded, your browser may transmit technical data (including your IP address) to Unsplash servers. For more information, see the Unsplash Privacy Policy.
Mapbox
Our property map uses Mapbox GL JS (Mapbox Inc.) to display interactive maps. When you access a page with a map, your browser connects to Mapbox servers and transmits technical data including your IP address, browser type, and approximate location. For more information, see the Mapbox Privacy Policy.
Google Fonts
This website uses Google Fonts (Playfair Display, Inter), which are self-hosted via Next.js font optimization. No requests are made to Google servers at runtime, so no personal data is transmitted to Google for font loading.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Contact form submissions are retained for up to 3 years. Investor portal data is retained for the duration of the investment relationship plus applicable regulatory periods.
7. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All data in transit is encrypted via TLS. Sensitive data at rest is encrypted using industry-standard methods. Access to personal data is restricted to authorized personnel on a need-to-know basis.
8. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you
- Correction — Request correction of inaccurate or incomplete data
- Erasure — Request deletion of your data ("right to be forgotten")
- Restriction — Request that we limit how we use your data
- Portability — Receive your data in a structured, machine-readable format
- Objection — Object to processing based on legitimate interests
- Withdraw consent — Where processing is based on consent, withdraw it at any time
To exercise any of these rights, contact us at privacy@legendera.us. We will respond within 30 days.
9. International Data Transfers
Our servers are located in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or, where appropriate, via email. The "last updated" date at the top of this page indicates when the policy was last revised.
11. Contact
For privacy-related inquiries or to exercise your rights:
privacy@legendera.us
Legendera Residences Miami Corp.