Privacy policy

Who is responsible for your data

The data controller is Trusted Technology Instruments Limited, a private limited company incorporated in Hong Kong, registered with the Hong Kong Companies Registry under number 3665476, whose registered office is at Room 3208, 32/F, Central Plaza, 18 Harbour Road, Wan Chai, Hong Kong (“CasaLik”, “we”).

Privacy contact: privacy@casalik.com.

What we collect

We only collect what the service needs:

• Account data: name, phone number, email address if provided, city, account type (seeker, owner, agency or developer).
• Listing content: photos, videos, description, price, area, type of property and its approximate location.
• Verification documents: ID document, proof of ownership, company registration and professional license. They are stored encrypted, in a private storage space separate from public listing photos.
• Activity in the app: likes, matches, messages, viewing requests and reviews.
• Contact form on this website: name, email, profile, subject and message — used only to answer you, sent to our mailbox through Google (Gmail), kept for up to 3 years after our last exchange. To block bots, the form uses hCaptcha (Intuition Machines, Inc.), which analyses technical data from your device and browser when you open and send the form.
• Technical data: device type, app version, IP address and logs, used for security and to keep the service running.
• On this website: no analytics and no advertising cookies — only a language preference (see our Cookie policy). Our host keeps standard server logs.

Why we use it, and on what legal basis

Under the GDPR and equivalent laws, each use relies on a legal basis:

• Running your account, the feed, matches, chat and viewings — performance of our contract with you.
• Sign-in codes by SMS and service notifications — performance of the contract.
• Verifying advertisers, preventing fraud and fake listings, moderating content — our legitimate interest in a safe marketplace, and legal obligations.
• Ranking listings in the feed using listing quality and reviews — our legitimate interest. This ranking has no legal or similarly significant effect on you.
• Marketing messages — only with your consent, which you can withdraw at any time.
• Complying with the law and answering authorities — legal obligation.

Your contact details stay hidden until a viewing is confirmed

Your full name and phone number are never shown to another user after a like or a match. They are revealed only once a viewing is confirmed, to the other party of that viewing only, and both ways. Once revealed for a match, they remain visible to that party even if the viewing is later cancelled.

Who receives your data

Other users see what the app shows them, under the rule above. Our service providers process data on our behalf, under contract and only on our instructions: cloud hosting and file storage, delivery of sign-in SMS, website hosting by Netlify, email Google (Gmail, including the website contact form).

We may disclose data when required by law or to protect the rights and safety of users. We do not sell your personal data and do not share it for cross-context behavioral advertising.

International transfers

Some providers may process data outside your country. When data leaves the European Economic Area, it is protected by an adequacy decision or by the European Commission's Standard Contractual Clauses. The list of providers and countries is available on request at privacy@casalik.com.

How long we keep it

• Account and listing data: while your account is active, then deleted or anonymized within 30 days of account deletion. Reviews you posted remain visible, anonymized.
• Verification documents: 5 years after the end of your relationship with CasaLik (the limitation period for civil claims in France and Spain), then destroyed.
• Messages and viewing history: while your account is active; your messages are deleted with your account. A message blocked by our contact-details filter is kept for 1 year.
• Walkthrough video sent for listing verification: 30 days.
• Security logs: 30 days for sign-in codes (phone number, IP address); 3 years for the log of moderation and administration actions.
• Longer only when the law requires it (for example accounting or legal claims).

Your rights

You can access, correct, export (portability) and delete your data, restrict or object to some uses, and withdraw your consent at any time. Export and deletion are available directly in the app, under Account. In France, you can also leave instructions about your data after your death.

For any request: privacy@casalik.com. We answer within one month (extendable where the law allows). You can also complain to your data protection authority — for example the CNIL (France), the AEPD (Spain), the CNDP (Morocco) or the authority of your country.

US residents

Residents of California and other US states with privacy laws can ask to know, delete and correct their personal information. We collect the categories listed above (identifiers, professional information for agencies and developers, activity in the app) from you and your use of the service, for the purposes above.

We do not sell or share personal information, and do not use sensitive personal information to infer characteristics. We will not discriminate against you for exercising your rights. You can use an authorized agent. Requests: privacy@casalik.com.

Children

CasaLik is intended for people aged 18 and over. We do not knowingly collect data from minors.

Security

Data is encrypted in transit (HTTPS). Verification documents and videos are encrypted at rest in a private storage space. Access is limited to authorized staff and logged.

Changes to this policy

We will inform you in the app before any significant change takes effect.