Data Privacy & Security

Scope of this policy

This policy covers data processed through this website only. It does not cover the homeowners association, The Peninsula Club, the marina, the developer, or any independent firm we reference editorially — each of those organizations sets and publishes its own privacy practices.

Data minimisation by design

This site is an editorial resource. It has no accounts, no logins, no member area, no payments, no listings feed, and no advertising network. The only place you can submit information is the single contact form, and it is delivered to one recipient.

• No user accounts or stored credentials.
• No payment or financial data is requested or processed.
• No sale or sharing of personal information, and no cross-context behavioral advertising.
• No marketing list is built from site visits.

Categories of data and why we hold them

Contact-form submissions

Name, email address, an optional phone number if you choose to type one, your selected area of interest, and your message. Purpose: to answer the enquiry you sent and, where you ask us to, to pass it to the relevant local firm.

Technical and usage data

Standard request logs and any analytics in use may record IP address, user agent, referring page, and pages viewed. Purpose: keeping the site available, secure, and readable. Used in aggregate.

Consent state

Your cookie choice is stored locally in your own browser so we do not ask again. It is not a profile and is not transmitted as an identifier.

Retention

• Enquiries — kept for as long as needed to answer you and to keep a record of the correspondence, then deleted on request.
• Server and security logs — kept for a short operational period by our hosting provider, then rotated out.
• Aggregate analytics — retained in non-identifying, aggregated form.
• Cookie consent state — stored in your browser until you clear site data.

Who processes data on our behalf

We use a small number of service providers to host and deliver this site and to deliver enquiry email. They act on our instructions and are bound by confidentiality obligations. We do not authorise them to use your information for their own marketing, and we do not knowingly transfer enquiry data to any advertising or data-broker service.

Security practices

Traffic to this site is served over encrypted HTTPS connections. The site is an editorial publication with no visitor database and no stored credentials, which materially reduces what could be exposed. Access to enquiry email is limited to the individual who answers it.

We do not claim absolute security. No method of transmission or storage is completely secure, and we make no guarantee against breach. Please do not send confidential, financial, health, or otherwise sensitive information through the contact form.

Shared responsibility

• Our hosting platform provides encrypted transport, infrastructure, and platform-level protections for the site.
• We decide what is collected, keep collection minimal, answer privacy requests, and keep this page current.
• You choose what to put in a message, and can decline non-essential cookies at any time.

Your privacy rights

Depending on where you live — including under the California Consumer Privacy Act, the UK and EU GDPR, and comparable US state laws — you may have the right to access, correct, delete, port, or restrict processing of your personal information, to withdraw consent, to opt out of sale or sharing (we do neither), and to appeal a decision.

Send any request through the contact form and describe what you would like done. We aim to acknowledge within a few business days and to respond substantively within the period required by applicable law. We may need to verify that the request comes from you or an authorised agent. We will not discriminate against you for exercising a privacy right.

Automated decision-making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects.

Children

This site is intended for adults and is not directed to children under 13. If you believe a child submitted information, contact us and we will delete it.

Reporting a vulnerability or a privacy concern

If you believe you have found a security issue affecting this website, please report it privately through the contact form with enough detail to reproduce it, and allow us reasonable time to investigate before disclosing it publicly. Please do not access, alter, or retain other people's data while testing.

Changes

We update this page as our practices change. The date at the top of the page reflects the most recent revision. Related reading: Privacy Policy, Cookie Policy, Terms of Use, and Legal Disclaimer.