Privacy Notice

What we collect, why, who else sees it, and how to get it removed. Written to be read rather than skimmed past.

Last updated 6 September 2026 · Questions: use the contact form

Who is responsible for your data

goldenvisas.ai is operated by Golden Visa Loans, based in London, United Kingdom. Luke D. Coupe is the individual responsible for the site and for enquiries about how personal data is handled.

Because the site is operated from the United Kingdom and is offered to people in the UK and the EEA, UK GDPR and the EU GDPR apply. If you are in South Africa, POPIA gives you broadly equivalent rights, and we will honour a request made under either.

Contact for any privacy matter, including the requests described below, using the contact form on this site.

What we collect, and when

We only collect personal data that you type into a form or that is necessary to serve the page. There is no data broker feed, no purchased list and no enrichment of your record from third-party sources.

  • Enquiry form (/contact): first name, surname, email address, telephone number and the enquiry topic you select.
  • Property submission (/submit-property): the listing details you provide, plus the agent or vendor name, company, email address and telephone number.
  • Account, if you create one: your email address and an authentication credential, handled by our authentication provider. We never see or store your password.
  • Saved favourites, if you use them: the property references you save against your account.
  • Server logs: your IP address and browser user-agent, recorded by our hosting provider for security and abuse prevention.

Why we hold it, and on what lawful basis

We rely on your consent for marketing communications, and on legitimate interests for responding to an enquiry you initiated and for keeping the site secure. Where you ask us to take steps before entering into a contract, that is our basis for processing your enquiry.

We do not make automated decisions that produce legal or similarly significant effects about you, and we do not profile you for advertising.

Who else sees it

Your data is shared only with the service providers needed to run the site and respond to you. Each acts on our instructions.

  • Zoho CRM — enquiry form submissions are sent here so we can respond and track the conversation.
  • Supabase — hosts the database and the authentication service behind accounts, saved favourites and property listings.
  • Cloudflare — serves the site and processes request metadata, including IP address, to deliver pages and mitigate abuse.
  • Lovable — the platform the site is built and deployed with.
  • Image content delivery networks — images are served from third-party CDNs, which receive your IP address as a consequence of your browser requesting the file.

International transfers

Some of those providers process data outside the United Kingdom, including in the United States. Where that happens we rely on the transfer mechanisms those providers make available, such as the UK International Data Transfer Addendum or Standard Contractual Clauses. You can ask us which mechanism applies to a particular provider.

How long we keep it

We keep personal data no longer than we need it for the purpose it was collected for. Enquiry records are kept for the duration of the enquiry and any engagement that follows, and then for as long as we may need them to deal with a dispute or to meet a legal or professional record-keeping obligation. Account data is kept until you delete the account. Server logs are retained on our hosting provider’s standard schedule.

If you want your record removed sooner, ask. We will do it unless we are required to keep it, and we will tell you if that is the case and why.

Cookies and tracking

At the date of this notice the site loads no analytics, advertising or session-recording script, and sets no tracking cookies. Cookies are used only where they are strictly necessary — principally to keep you signed in if you create an account.

If that changes we will update this notice and, where the law requires it, ask for your consent before any non-essential cookie is set.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. Where we rely on consent you can withdraw it at any time, and withdrawing it does not affect processing already carried out.

Send us a message through the contact form on this site and say what you want. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive, and we will tell you before any charge applies.

If you are unhappy with how we handle your request you can complain to the UK Information Commissioner’s Office at ico.org.uk, or to your local supervisory authority in the EEA. We would rather you came to us first so we can put it right.

Children

This site is aimed at adult investors. We do not knowingly collect data from anyone under 18. If you believe a child has given us their data, tell us and we will delete it.

Changes to this notice

Material changes will be reflected in the date at the top of this page. We do not make changes retroactive to data already collected under a previous version without telling you.