Privacy Policy

Llana Properties Website

Last updated: 2 June 2026

This Privacy Policy explains how The Resort Group PLC collects, uses, stores and shares personal data in connection with the Llana Properties website, property enquiries, sales communications and related property ownership opportunities at Llana Beach Resort.

This Privacy Policy should be read together with our separate Cookie Policy, which explains how cookies and similar technologies are used on the Website.

1. Who we are

The data controller for the personal data described in this Privacy Policy is:

• The Resort Group PLC
• Third Floor, 9 Cornwall’s Lane
• Gibraltar, GX11 1AA
• Company registration number: 98967
• Website: www.llana-properties.com
• Privacy/data-protection contact: yr@theresortgroupplc.com
• VAT number: none

In this Privacy Policy, “we”, “us” and “our” mean The Resort Group PLC. “Website” means www.llana-properties.com.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data we process about:

• visitors to the Website;
• people who submit enquiry forms, request brochures, request price information or ask for a call-back;
• prospective purchasers, purchasers and owners of property at Llana Beach Resort;
• people who communicate with us by email, telephone, WhatsApp, online form, social media or other communication channels;
• business partners, introducers, sales agents and professional advisers involved in property enquiries or transactions.

This Privacy Policy does not replace any additional privacy notice that may be provided to you in connection with a specific transaction, contract, reservation, resort operation, legal process or owner programme.

3. Personal data we collect

Depending on your interaction with us, we may collect and process the following categories of personal data:

Category	Examples
Identity and contact data	Name, address, email address, telephone number, nationality, country of residence and preferred contact method.
Enquiry and preference data	Property type of interest, budget, intended use, enquiry source, preferred language, communication history and notes from sales calls or meetings.
Transaction and reservation data	Reservation forms, purchase-related documentation, property unit details, contract status, owner-benefit information and related correspondence.
Due diligence and compliance data	Identification documents, passport details, proof of address, anti-money laundering or know-your-customer information where required for a transaction or legal process.
Payment and financial administration data	Payment confirmations, bank details or payment-related records where needed to administer a reservation, purchase, refund, commission or owner benefit.
Website and technical data	IP address, device type, browser type, operating system, referring website, pages viewed, approximate location derived from technical data, cookie identifiers and analytics data.
Marketing data	Marketing preferences, consent records, unsubscribe records, campaign engagement and responses to marketing communications.
Business partner data	Contact details, company details, commission arrangements, contract records and business communications.

We do not normally collect health information or criminal-conviction data through the Website. If such data is ever required for a specific legal, compliance or transaction-related reason, we will only process it where permitted by law and with appropriate safeguards.

4. How we collect personal data

We may collect personal data in the following ways:

• directly from you when you complete a form, request information, contact us, reserve a property or enter into a transaction;
• from sales agents, introducers, business partners, lead providers, professional advisers or group/associated companies involved in your enquiry or transaction;
• automatically through the Website using cookies, analytics tools, server logs and similar technologies;
• from public sources or authorities where this is necessary for legal, compliance or transaction purposes.

5. How and why we use personal data

We use personal data for the purposes and lawful bases set out below.

Purpose	What this means	Likely lawful basis
Responding to enquiries	To answer your questions, send requested information, arrange calls or meetings and manage your interest in Llana Beach Resort properties.	Legitimate interests; consent where applicable.
Property sales and reservations	To process reservations, prepare or administer transaction documentation, manage communications and support completion of a property purchase.	Contract; legitimate interests; legal obligation.
Due diligence and compliance	To carry out identity checks, anti-money laundering checks, fraud prevention, sanctions screening or other checks required by law or professional practice.	Legal obligation; legitimate interests.
Owner benefits and ongoing administration	To administer rental programme information, owner benefits, communications, records and post-purchase support.	Contract; legitimate interests.
Marketing communications	To send property updates, availability, price information, offers, events or related resort and ownership information.	Consent where required; legitimate interests for certain business or existing-customer communications, subject to opt-out rights.
Website operation and security	To operate, maintain, secure and improve the Website, prevent misuse, troubleshoot technical issues and protect our systems.	Legitimate interests; legal obligation where applicable.
Analytics and website improvement	To understand how visitors use the Website and improve content, navigation, performance and marketing effectiveness.	Consent where required for non-essential cookies; legitimate interests for limited essential analytics where permitted.
Business partner administration	To manage relationships with agents, introducers, brokers, advisers, resort partners and other professional or commercial contacts.	Contract; legitimate interests; legal obligation.
Legal claims and record keeping	To keep proper records, respond to disputes, enforce agreements, protect legal rights and comply with applicable laws.	Legal obligation; legitimate interests.

Where we rely on legitimate interests, we balance our business interests against your rights and interests. You may object to processing based on legitimate interests in certain circumstances.

6. Marketing communications

We may contact you with information about Llana Beach Resort properties, property availability, pricing, ownership benefits, resort information, events or related opportunities where we are permitted to do so under applicable law.

You can opt out of marketing communications at any time by using the unsubscribe method included in a communication or by contacting yr@theresortgroupplc.com. We may keep a suppression record to ensure that we respect your opt-out request.

Opting out of marketing does not stop us from sending necessary transactional, contractual, legal or administrative communications.

7. Cookies and analytics

The Website may use cookies and similar technologies. Essential cookies are used to make the Website function properly. Non-essential cookies, such as analytics or marketing cookies, will be handled in accordance with our separate Cookie Policy and any applicable cookie-consent mechanism on the Website.

The Cookie Policy should explain the types of cookies used, the purposes of those cookies, their duration and how visitors can manage cookie preferences.

8. Who we share personal data with

We may share personal data with the following categories of recipients where necessary for the purposes described in this Privacy Policy:

• companies within our group or associated companies involved in the Llana Beach Resort property offering;
• sales agents, introducers, brokers and business partners involved in your enquiry or transaction;
• the resort operator, resort management company or relevant owner-administration providers where needed to administer ownership benefits or resort-related arrangements;
• lawyers, notaries, professional advisers, accountants, auditors, banks and payment providers;
• CRM, website hosting, email, document-management, IT support, security, analytics and marketing service providers;
• government bodies, regulators, courts, law-enforcement bodies or other authorities where required by law or to protect legal rights;
• third parties involved in a corporate transaction, restructuring, sale, merger or similar business event.

Where a third party processes personal data on our behalf, we require appropriate contractual and security safeguards. Where a third party acts as an independent controller, that party is responsible for its own compliance with applicable data-protection law.

9. International transfers

Your personal data may be processed in or transferred to Gibraltar, the United Kingdom, the European Economic Area, Cape Verde or other countries where our group companies, partners, advisers or service providers operate.

Where personal data is transferred to a country that does not provide an adequate level of protection under applicable data-protection law, we will use appropriate safeguards where required, such as contractual protections, transfer-impact assessments or other lawful transfer mechanisms.

10. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including to meet legal, accounting, tax, compliance, contractual and dispute-resolution requirements.

Data category	Typical retention approach
Website enquiry data	Normally up to 3 years after the last meaningful contact, unless a longer period is justified by an active enquiry, transaction or legal requirement.
Marketing consent and opt-out records	Until consent is withdrawn or marketing is no longer relevant; opt-out/suppression records may be kept as long as necessary to respect your request.
Reservation and property transaction records	Normally 7 to 10 years after completion, cancellation or termination, or longer where required by law or needed for legal claims.
Accounting, payment and commission records	As required by applicable tax, accounting, audit and company-record requirements.
Due diligence and compliance records	As required by anti-money laundering, fraud-prevention, legal or transaction-related obligations.
Legal dispute or claim records	For as long as necessary to establish, exercise or defend legal claims.
Website analytics data	For the period configured in the analytics or cookie tool, as explained in the Cookie Policy where applicable.

The periods above are intended as practical guidance. Actual retention may vary depending on the circumstances and applicable legal requirements.

11. How we protect personal data

We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, destruction or misuse. These measures may include access controls, secure systems, staff confidentiality obligations, supplier controls, backups and security monitoring.

No method of transmission over the internet or email is completely secure. You should take care when sending confidential information electronically and ensure that your own devices and email accounts are adequately protected.

12. Your rights

Subject to applicable law and any relevant exemptions, you may have the following rights in relation to your personal data:

• the right to be informed about how your personal data is used;
• the right of access to personal data we hold about you;
• the right to request correction of inaccurate or incomplete data;
• the right to request deletion of your data in certain circumstances;
• the right to restrict processing in certain circumstances;
• the right to object to processing based on legitimate interests or direct marketing;
• the right to data portability in certain circumstances;
• the right to withdraw consent where processing is based on consent;
• rights relating to automated decision-making and profiling, where applicable.

We do not intend to make decisions about you based solely on automated processing that produce legal or similarly significant effects.

13. How to exercise your rights

To exercise your rights or raise a privacy question, please contact:

• yr@theresortgroupplc.com

We may need to verify your identity before responding to a request. We aim to respond within the period required by applicable data-protection law. In some cases, we may be permitted to extend the response period or refuse a request where the law allows us to do so.

14. Complaints

We encourage you to contact us first if you have a concern about how we handle your personal data. You also have the right to lodge a complaint with the relevant data-protection supervisory authority.

For Gibraltar, the supervisory authority is the Gibraltar Regulatory Authority, acting as Information Commissioner:

• Gibraltar Regulatory Authority
• 2nd Floor, Eurotowers 4
• 1 Europort Road
• Gibraltar
• Telephone: (+350) 20074636
• Email: info@gra.gi

If you are located in another jurisdiction, you may also have the right to contact your local data-protection authority where applicable.

15. Third-party websites and links

The Website may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of third-party websites. You should read the privacy policy of any third-party website you visit.

16. Children

The Website is not intended for children and we do not knowingly collect personal data from children through the Website. If you believe a child has provided us with personal data, please contact us so that we can take appropriate steps.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be published on the Website with a revised “last updated” date. Where changes are material, we may take additional steps to notify you where required by law.

18. Contact us

For privacy or data-protection questions, please contact:

• The Resort Group PLC
• Third Floor, 9 Cornwall’s Lane, Gibraltar, GX11 1AA
• Email: yr@theresortgroupplc.com
• Website: www.llana-properties.com