Skip to content
NAU Realty Invest

Privacy Policy

Last updated: September 8, 2026

This policy explains what personal data is collected on https://naurealtyinvest.com (the “Site”), why, who it is shared with and what your rights are. It is written to meet Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), the European Union’s General Data Protection Regulation (GDPR), Québec’s Law 25 and the other laws that apply to visitors of the Site.

Who is responsible

Corentin NAU, independent real-estate advisor, operating under the brand NAU Realty Invest.

  • Address: Calle 14 Norte x Avenidas 40 y 45, Gonzalo Guerrero, Solidaridad, 77710 Playa del Carmen, Quintana Roo, México
  • Email: contact@naurealtyinvest.com
  • Phone and WhatsApp: +52 999 200 9424

Corentin NAU is the “responsable” under the LFPDPPP, the controller under the GDPR, and the person in charge of the protection of personal information under Québec’s Law 25.

Data we collect

When you use the contact form, we collect:

  • your first and last name;
  • your email address and phone number;
  • your message;
  • optionally, your preferred contact channel and your profile (investor, buyer, seller, real-estate agent, other);
  • the property reference and the page the request was sent from, the language you were browsing in, and the technical data of the request (IP address, timestamp, browser type).

When you browse the Site, navigation data is collected through cookies only after you give consent, as described in the Cookie Policy. The host also keeps technical logs needed to secure the service.

We do not collect sensitive data and never ask for banking details on the Site.

Primary purposes, needed for the relationship you initiate with us:

  • answering your requests for information, valuations, viewings or assistance;
  • following up on the pre-contractual relationship, and on the contractual relationship if it materializes;
  • keeping the Site secure and blocking automated submissions.

Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in replying to people who contact us. In LFPDPPP terms, these are the primary purposes (finalidades primarias), for which your consent is deemed given when you send us your data.

Secondary purposes, which are not essential:

  • sending you commercial information, new opportunities or market news by email or phone;
  • measuring the Site’s audience and the effectiveness of our advertising campaigns.

Legal basis: your consent, which you may withdraw at any time. Without consent, no prospecting takes place and no non-essential cookie is set.

Recipients and service providers

Your data is processed by Corentin NAU and, on his behalf, by the following providers, which act as processors and are bound by contractual confidentiality and security commitments:

  • Vercel Inc. (United States): hosting of the Site and server logs.
  • Apimo, published by Apiwork SARL (France): the agency’s management software, source of the listings and photographs; your contact requests are recorded there for follow-up.
  • Resend Inc. (United States): delivery of transactional emails for the contact form and the automatic reply.
  • Cloudflare Inc. (United States): Turnstile anti-bot check on the form.
  • Google Ireland Ltd and Google LLC: Google Analytics 4, Google Tag Manager and Google Ads conversion measurement, only after consent, with Google Consent Mode v2.
  • OpenFreeMap: map display; your browser requests map tiles directly from its servers, without cookies.

Some features take you off the Site: the WhatsApp button opens a conversation operated by WhatsApp and Meta Platforms, whose terms then apply; the optional discovery form offered in our automatic reply is hosted by Google Forms. We do not sell or rent your personal data.

Your data may also be disclosed to public authorities where the law requires it.

International transfers

Your data is stored and processed in the United States (Vercel, Resend, Google) and in France (Apimo). These transfers are covered by appropriate contractual safeguards, including standard contractual clauses or equivalent mechanisms, together with technical protection measures.

Retention

Prospect data is kept for 36 months after the last contact. If a contract follows, data is kept for the duration of the relationship and then for the limitation and record-keeping periods required by law. Technical logs are kept for a limited time for security purposes. Cookie lifetimes are listed in the Cookie Policy.

Security

We apply reasonable administrative, technical and physical measures to protect your data against loss, unauthorized access, alteration or disclosure: encrypted connections, access controls, and providers selected for their security standards.

Your rights

Residents of Mexico (LFPDPPP)

You hold the ARCO rights: access, rectification, cancellation and opposition. You may also revoke your consent and limit the use or disclosure of your data, including opting out of prospecting. To exercise these rights, write to contact@naurealtyinvest.com stating your name, the right you are exercising, and attach a copy of an identity document. We reply within 20 business days. If you believe your request was not handled properly, you may file a complaint with the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).

Residents of the European Union and European Economic Area (GDPR)

You have the rights of access, rectification, erasure, restriction of processing, portability and objection, as well as the right to withdraw your consent at any time without affecting the lawfulness of processing already carried out. You may lodge a complaint with the CNIL (France) or with the supervisory authority of your country of residence.

Residents of Québec (Law 25)

Under the Act respecting the protection of personal information in the private sector, you may access your personal information, have it corrected, withdraw your consent and request that its dissemination cease. The person in charge of the protection of personal information is Corentin NAU, reachable at contact@naurealtyinvest.com. You may file a complaint with the Commission d’accès à l’information du Québec. Your information is communicated outside Québec, to the United States and France, under the conditions described above.

Other residents of Canada

The Personal Information Protection and Electronic Documents Act (PIPEDA) gives you a right of access and correction and the right to withdraw your consent. You may contact the Office of the Privacy Commissioner of Canada.

Residents of the United States

We do not sell your personal data and do not share it for targeted advertising beyond the measurement tools described above, which are only activated with your consent. You may request access to your data or its deletion at any time.

How to exercise your rights

Send your request to contact@naurealtyinvest.com or by mail to the address above. To protect your data, we may ask you to prove your identity. We reply within the time limits set by the applicable law: no later than 20 business days for requests under the LFPDPPP and within one month for requests under the GDPR. Exercising your rights is free of charge, unless a request is manifestly unfounded or excessive.

You can unsubscribe from our commercial communications at any time by using the link in each email or by writing to us.

Cookies

The Site uses strictly necessary cookies (language, currency, consent choices) and, only with your agreement, audience-measurement and advertising-measurement cookies. You can change your choices at any time through the “Cookie settings” link in the footer. Details are in the Cookie Policy.

Minors

The Site is intended for adults. We do not knowingly collect data about anyone under 18. If you believe a minor has sent us data, contact us so we can delete it.

Changes

This policy may be amended to reflect legal, technical or business changes. The current version is published on this page with its update date. Any change is communicated through the Site.