Legal Notice / Aviso Legal

Privacy Policy · Política de Privacidad

1. Controller identity / Datos del Responsable

Controller / Responsable: Byron‑Butler Corporation Ltd

No DPO appointment is mandatory under Art. 37 UK GDPR given the nature, scope and volume of our processing activities. For any data protection matter, contact legal@byronbutler.com.

The controller is established in the United Kingdom. The applicable data protection legislation is the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 (DPA 2018). The European Commission has adopted an adequacy decision for the UK (Art. 45 EU GDPR), so transfers from the EEA to the UK are permitted without additional safeguards.

2. EU Representative / Representante en la UE

Pursuant to Art. 27 EU GDPR, we have designated an EU representative for data subjects in the European Union / European Economic Area:

Byron‑Butler Corporation Ltd (EU Representative)
Email: legal@byronbutler.com
(Physical address of our designated EU representative available upon request to legal@byronbutler.com)

3. Data we collect / Datos que recopilamos

Identification and account data: full name, email address, username, password (stored as Argon2id hash).

Billing data: payment history, Stripe subscription identifier. We do not store card numbers or bank details - Stripe processes them directly (PCI DSS Level 1).

Usage data: IP address, browser type, pages visited, session duration.

CRM business data: information about leads, contacts, properties, calls, commercial actions imported or manually entered by the user in the CRM.

Communications: support tickets, emails and any data you include in communications with us.

4. Purposes, lawful bases / Finalidad y base legal

We do not make automated decisions nor create profiles with legal effects on data subjects (Art. 22 UK GDPR).

5. Controller-Processor relationship: your data in the CRM / Relación responsable-encargado

It is important to understand the distinction between your personal data (as a CRM user) and the data you enter into the CRM about your own clients and contacts:

• Regarding your data (name, email, etc.): we act as Controller.
• Regarding the data you enter into the CRM (your leads, clients, contacts): you act as Controller and we act as Processor. It is your responsibility to obtain consent from your clients and comply with your data protection obligations.

As Processor, we undertake to:

• Process data only on your documented instructions (Art. 28 UK GDPR).
• Notify you without undue delay of any personal data breach affecting your data.
• Assist you in fulfilling your obligations (data subject rights, breach notification).
• Delete or return all data upon termination of service.

6. Data retention / Conservación

• Account data: duration of active subscription + 30 days after cancellation.
• Tax and billing data: 7 years (to comply with HMRC / UK Finance Act).
• Support tickets and communications: 6 years after resolution.
• Usage and analytics data: 26 months.
• Cookie consent records: 2 years.

7. Processors and international transfers / Encargados y transferencias internacionales

We engage the following processors under Art. 28 UK GDPR / EU GDPR, with contracts prohibiting them from processing data for their own purposes:

• Stripe, Inc. (USA / Ireland) - payment processing. Certified under the EU-US Data Privacy Framework and UK Data Bridge (UK Extension). SCCs (EU 2021/914) and the UK IDTA/Addendum (ICO v. B1.0) also apply as additional safeguards.
• Hostinger (Lithuania) - web hosting and email servers. Adequacy decision UK-EU applies.
• Google LLC (USA) - reCAPTCHA. Certified under DPF + UK Extension. SCCs and IDTA/Addendum apply.
• Cloudflare, Inc. (USA) - CDN and security. Certified under DPF + UK Extension. SCCs and IDTA/Addendum apply.

A Transfer Impact Assessment (TIA) has been completed for each US-based processor, concluding that the combination of DPF certification, SCCs/IDTA, and supplementary measures (TLS 1.3 encryption in transit, data minimisation, IP anonymisation before transmission to Google) ensures an equivalent level of protection. TIA documentation is available for review by competent supervisory authorities.

Reference SCCs: EU 2021/914. UK Addendum: ICO IDTA / UK Addendum B1.0.

8. Your rights / Tus derechos

Under UK GDPR and EU GDPR (Arts. 15–22), you have the right to:

• Access (Art. 15): obtain confirmation and a copy of your data.
• Rectification (Art. 16): correct inaccurate or incomplete data.
• Erasure / right to be forgotten (Art. 17): request deletion of your data.
• Restriction (Art. 18): restrict processing in certain circumstances.
• Data portability (Art. 20): receive your data in a structured, commonly used format.
• Objection (Art. 21): object to processing based on legitimate interest or direct marketing.
• Withdraw consent (Art. 7.3): at any time, without affecting the lawfulness of processing before withdrawal.

To exercise your rights, email legal@byronbutler.com specifying the right you wish to exercise. We will respond within one month, extendable to two months for complex requests (Art. 12.3 UK GDPR). We may request a copy of your ID to verify your identity.

9. Security measures / Medidas de seguridad

We implement the following technical and organisational measures under Art. 32 UK GDPR / EU GDPR:

• AES-256-GCM encryption of the user database at rest.
• Passwords hashed with Argon2id.
• Mandatory HTTPS with TLS 1.3 for all communications.
• Security headers (CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy).
• CSRF tokens and IP-based rate limiting.
• Access logging and monitoring (audit logs).
• API keys and Stripe credentials stored server-side only, never exposed to the front end.
• Role-based access control, regular backups, and a documented breach response procedure.

10. Data breach notification / Notificación de brechas

In the event of a personal data breach, we will notify the ICO (and, where applicable, the relevant EU supervisory authority) within 72 hours of becoming aware of it (Art. 33 UK GDPR). If the breach poses a high risk to your rights and freedoms, we will also notify you without undue delay (Art. 34).

11. Complaints / Reclamaciones

If you are not satisfied with our response, you have the right to lodge a complaint with the competent supervisory authority:

United Kingdom (ICO): ico.org.uk/concerns - Tel: 0303 123 1113

If you reside in the EU/EEA, you may also lodge a complaint with your local data protection authority. List available at: edpb.europa.eu

We recommend contacting us first at legal@byronbutler.com before lodging a formal complaint.

Terms and Conditions of Use · Términos y Condiciones

1. Acceptance / Aceptación

These Terms and Conditions ("Terms") govern the access and use of the CRM Real Estate platform ("the Service"), operated by Byron‑Butler Corporation Ltd ("the Provider"). By registering, accessing or using the Service, you agree to be bound by these Terms. If you do not agree, you must not use the Service.

If you are a Consumer (an individual acting outside your trade, business or profession), you have additional rights under UK consumer law, including the Consumer Rights Act 2015 and the Consumer Contracts Regulations 2013. If you reside in the EU/EEA, the Consumer Rights Directive (2011/83/EU) also protects you. Nothing in these Terms affects your statutory rights as a Consumer.

2. Provider information / Información del Proveedor

Byron‑Butler Corporation Ltd is a company registered in England and Wales.

Registered office: 41 Baddow Close, Woodford Green, London, IG8 7JE, United Kingdom
Company number: 08918733
ICO registration: ZA911972

Contact:

• General enquiries: info@byronbutler.com
• Billing and refunds: billing@byronbutler.com
• Data protection: legal@byronbutler.com
• Sales: sales@byronbutler.com
• Customer portal: portal.byronbutler.com
• Internal CRM ticket system (for registered users)

3. Service description / Descripción del servicio

The Service is a CRM SaaS (Software as a Service) platform designed for real estate professionals. It includes:

• Lead and contact management with centralised database.
• Call logging and commercial action tracking.
• Dashboard with KPIs and performance metrics.
• Support ticket system.
• Data export and reporting.

4. Registration, account and trial period / Registro y período de prueba

• You must register and create an account to use the Service. You must provide truthful, complete and up-to-date information.
• Your account is personal and non-transferable. You are responsible for maintaining the confidentiality of your password and for all activity under your account.
• New registrations receive a free 30-day trial with full access to all features.
• No payment details are required during the trial.
• After the trial ends without subscription purchase, you may log in but cannot use the Service. Your data will be retained for 30 additional days before deletion.
• The trial is one-time per person and not available to previous Premium users.
• You must be at least 18 years old to use the Service.

5. Plans, pricing and billing / Planes, precios y facturación

• Premium Plan: €19.99/month (Spanish VAT 21% included for customers in Spain; VAT applied per Art. 58 of Directive 2006/112/EC, declared via OSS).
• B2C digital services are subject to VAT in the consumer's country. We declare Spanish VAT through the OSS (One Stop Shop) system.
• Payment is processed via Stripe. We do not store card details.
• Prices may be modified with 30 days' notice. If you are a Consumer, you may cancel without penalty if you do not accept the price change.

6. Right of withdrawal (14-day cooling-off) / Derecho de desistimiento

If you are a Consumer, under the Consumer Contracts Regulations 2013 (and for EU/EEA residents, the Consumer Rights Directive 2011/83/EU), you have the right to cancel this contract within 14 days without giving any reason.

Exception for digital services: By registering and accepting these Terms, you expressly request that the Service begins immediately (including the trial period). In accordance with Regulation 37(1) of the CCR 2013 and Art. 16(m) of Directive 2011/83/EU, you acknowledge that once the Service has been fully performed, you lose your right of withdrawal. If the Service has not been fully performed at the time of cancellation, you will pay only the proportionate amount for the service provided up to that point.

To exercise the right of withdrawal, contact billing@byronbutler.com. We will refund all payments received within 14 days, deducting the proportionate amount for the service already provided if you requested early performance.

Business Customers do not have a statutory right of withdrawal. All Business Customer purchases are final unless otherwise agreed in writing.

7. User obligations / Obligaciones del usuario

• Use the Service lawfully and in accordance with applicable law, morality and public order.
• Not to enter false, fraudulent data or data that infringes third-party rights.
• Not to use the Service to store special category data (Art. 9 UK GDPR) without the explicit consent of the data subjects.
• Not to engage in activities that may damage, overload or impair the Service.
• Not to attempt to access other users' accounts or reverse-engineer the Service.
• Comply with your own data protection obligations regarding your clients' data stored in the CRM.

8. Intellectual property / Propiedad intelectual

The code, design, logos and other elements of the Service are owned by the Provider or properly licensed. The user is granted a limited, non-exclusive, non-transferable licence to use the Service during the subscription period. Data entered by the user in the CRM remains their exclusive property.

9. Limitation of liability / Limitación de responsabilidad

The Service is provided "as is" and "as available". We do not guarantee uninterrupted or error-free operation.

Consumers: Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud, or breach of your rights under the Consumer Rights Act 2015.

Our total liability is limited to the total amount paid for the Service in the 12 months preceding the claim.

Business Customers: We exclude all liability for loss of profits, loss of data, indirect or consequential damages, and acts of third-party providers.

10. Cancellation and termination / Cancelación y terminación

Cancellation by you: You may cancel your subscription at any time from "My Account" in the CRM. The Service remains active until the end of the current billing period. No refunds are issued for early cancellation, except as provided for Consumers in Section 6.

Termination by us: We may terminate this agreement immediately if you breach these Terms, violate applicable law, or fail to pay. In case of non-payment, the Service will be suspended after 7 days and data permanently deleted after 30 days.

Upon termination, all your data will be permanently deleted after 30 days, unless retention is required by law.

11. Governing law and jurisdiction / Legislación y jurisdicción

This Agreement and any disputes arising from it shall be governed by the laws of England and Wales.

If you are a Consumer, you may bring claims in the courts of England and Wales or in the courts of your country of residence.

If you are a Business Customer, both parties submit to the exclusive jurisdiction of the courts of England and Wales.

12. Online Dispute Resolution (ODR) for EU consumers

If you are a consumer resident in the European Union, you may access the European Commission's online dispute resolution (ODR) platform at ec.europa.eu/consumers/odr/. Our email is legal@byronbutler.com.

13. Modifications / Modificaciones

We may revise these Terms at any time. Substantial changes will be notified by email or through the CRM. If you are a Consumer and the change is substantial, you may cancel the contract without penalty within 14 days of notification. Continued use of the Service after changes constitutes acceptance of the updated Terms.

Cancellations, Refunds & Money Back Guarantee · Política de Pagos y Devoluciones

1. Consumer rights summary / Resumen de derechos del consumidor

If you are a Consumer, you have the following rights under UK law (and for EU/EEA residents, under Directive 2011/83/EU):

• Consumer Rights Act 2015 / Directive 2011/83/EU: digital services must be provided with reasonable care and skill, be of satisfactory quality, and be fit for purpose.
• Consumer Contracts Regulations 2013 / Directive 2011/83/EU: you have a 14-day right of withdrawal (see Section 6 of the Terms).

These rights are in addition to any voluntary refund we may offer. For EU consumers, the ODR platform is also available (ec.europa.eu/consumers/odr/).

2. Payment gateway / Pasarela de pago

All payments are processed via Stripe, Inc. (PCI DSS Level 1). Payment occurs directly on Stripe's servers; we do not store any credit card, debit card or banking information on our servers. Stripe uses TLS encryption and tokenisation to protect payment data.

By making a payment, you accept Stripe's terms at stripe.com/gb/legal.

3. Price and currency / Precio y moneda

The Premium Plan price is €19.99 (EUR) per month. For customers in Spain, Spanish VAT (21%) is included (B2C digital services taxed in the consumer's country per Art. 58 of Directive 2006/112/EC). For customers in other countries, applicable taxes are determined by local law.

Payment is in EUR. Stripe may apply a currency conversion rate if your card is in another currency. We do not apply additional currency conversion fees.

4. Billing cycle / Ciclo de facturación

• Subscriptions renew automatically each month on the same date as the original sign-up.
• The charge is made on the same day of the month the Service was first purchased.
• If the charge day does not exist in a given month (e.g. 31 in February), the charge will be made on the last day of that month.
• Electronic invoices are available in the CRM dashboard.

5. Subscription cancellation / Cancelación de suscripción

• You may cancel from "My Account" in the CRM.
• Cancellation takes effect at the end of the current billing period.
• No partial refunds are given for the unused portion of the month, except as provided for Consumers in Section 6 of the Terms.
• After cancellation, data is retained for 30 days before permanent deletion.

6. Refunds / Devoluciones y reembolsos

Due to the nature of digital services, the CRM Service is non-refundable once accessed and used, except in the following cases:

• Verified billing error (duplicate charge, incorrect amount) - full refund of the error.
• Consumer withdrawal within 14 days without having accessed the Service - full refund.
• Service unavailability exceeding 48 consecutive hours without prior maintenance notice.

To request a refund, email billing@byronbutler.com. We will respond within 5 business days.

7. Billing errors / Errores de facturación

If you believe you have been billed incorrectly, you must notify us within 7 days of the invoice date. If an error is confirmed, we will issue a refund or credit to your account.

8. Late payment and non-payment / Morosidad e impago

• If payment fails, Stripe will retry the charge for 3 days.
• After 7 days without success, access to the Service will be suspended.
• After 30 days without payment, the account may be cancelled and data deleted.
• You will receive email notifications before each action.

Cookie Policy · Política de Cookies

1. What are cookies? / ¿Qué son las cookies?

Cookies are small text files that websites store in your browser to remember preferences, maintain session state or collect anonymous statistical information.

2. Cookies used / Cookies utilizadas

This website uses only the following cookies:

We do not use analytics, advertising, tracking or marketing cookies.

3. Legal basis / Base legal

Strictly necessary cookies are exempt from consent under the Privacy and Electronic Communications Regulations (PECR) 2003 (UK) and, for EU/EEA users, the ePrivacy Directive (2002/58/EC). No non-essential cookies are installed without your consent.

We do not use Google Analytics or any analytics tool that sets cookies. Only the strictly necessary cookies listed above are used.

4. Managing cookies / Gestión de cookies

You may accept or reject cookies via the cookie banner. You can also configure your browser to block or delete cookies:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

5. Google reCAPTCHA

We use Google reCAPTCHA v2 on registration, login and contact forms to prevent automated spam submissions. Google may set cookies as part of this service. For more information, see Google's privacy policy at policies.google.com/privacy.