Last Updated: March 28, 2025
(A French version of this Privacy Policy is available upon request to comply with Quebec’s language requirements.)
1. INTRODUCTION
EXIT Realty Corp. International and its subsidiaries (collectively, “ERCI,” “we,” “us,” or “our”) respect your privacy and are committed to safeguarding your Personal Information. This Privacy Policy explains how we collect, use, disclose, retain, and protect Personal Information in accordance with:
- Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and any applicable provincial laws (e.g., Alberta’s and British Columbia’s PIPAs, and Quebec’s private sector privacy law).
- United States privacy laws, including relevant federal laws and the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), and other applicable state privacy statutes.
By using any of our websites, platforms, products, or services (“Services”), you consent to the collection, use, and disclosure of your Personal Information in accordance with this Privacy Policy. If you do not agree with the terms herein, please discontinue use of our Services.
2. SCOPE OF THIS PRIVACY POLICY
This Privacy Policy applies to all visitors, users, and individuals who access or interact with our Services (including
exitrealty.com and related sites or mobile applications) or otherwise provide Personal Information to ERCI. If you have any questions or concerns, please contact us using the details provided in the “Contact Us” section below.
For
Quebec residents, you may request a French version of this policy at any time.
(Les résidents du Québec peuvent demander une version française de cette politique en tout temps.)
3. DEFINITION OF PERSONAL INFORMATION
“Personal Information” means information about an identifiable individual, including (but not limited to) name, email address, phone number, mailing address, payment information, or other data that may be used to identify you. Depending on the jurisdiction, IP addresses, cookie identifiers, or similar unique identifiers may also be considered Personal Information if they can be used (individually or in combination with other data) to identify you.
4. INFORMATION WE COLLECT
We collect Personal Information in the following ways:
1.
Information You Provide to Us
- Registration and Contact Forms: When you register for an account, submit inquiries, or request information, we may collect your name, email address, phone number, and any other details you provide.
- Transactions and Payments: If you purchase or pay for products and/or services, we may collect billing and shipping details. Payment information (e.g., credit card data) is handled via our third-party payment processor, Stripe (see Section 5).
- Communications: If you communicate with us via email, phone, or other means, we may collect the content of your communication along with your contact details.
2.
Information Collected Automatically
- Log Data: Our servers automatically collect IP addresses, browser type, operating system, referring URLs, and timestamps when you use our Services.
- Cookies and Similar Technologies: We use cookies, pixel tags, and web beacons to gather information on your use of our Services (see Section 6).
3.
Information from Third Parties
- We may receive information about you, such as [NTD], from trusted third-party analytics providers or partners to improve our Services and provide a more personalized experience.
5. PAYMENT PROCESSING WITH STRIPE
We use a third-party payment processor, Stripe, to process payments securely on our behalf . By making financial transactions through our Services:
- Information Shared with Stripe: We share Personal Information (e.g., name, email address, transaction amounts) with Stripe to fulfill payment. Stripe may also collect additional data directly from you (e.g., billing address, card number).
- Stripe’s Privacy Practices: Stripe processes Personal Information in accordance with its own Privacy Policy. We encourage you to review Stripe’s policy to understand how Stripe handles your payment details.
- Cross-Border Transfers: Stripe is based in the United States; therefore, your Personal Information may be transferred and stored in the U.S. By using our Services, you consent to such cross-border data transfers.
- Security: Stripe is certified as a PCI-DSS Level 1 Service Provider. While we rely on Stripe’s strong security measures, no system is entirely immune to potential vulnerabilities.
6. COOKIES & TRACKING TECHNOLOGIES
We use
cookies, web beacons, pixel tags, and similar technologies to improve user experience, analyze usage patterns, and deliver relevant content.
1.
Types of Cookies
- Necessary Cookies: Essential for basic website functionality.
- Analytics/Performance Cookies: Help us understand how users interact with our Services.
- Functional/Preference Cookies: Remember user preferences (e.g., language settings).
- Security Cookies: Protect our Services from malicious activity.
- Targeting/Advertising Cookies: Track browsing behavior to show relevant ads or measure ad effectiveness.
2.
Third-Party Cookies
- We allow certain third parties (e.g., advertising networks, analytics providers) to set cookies on our websites. They have their own privacy policies describing how they use the collected data.
3.
Managing Cookies
- You can control cookies through your browser settings, blocking or deleting them. Doing so, however, may affect certain functionalities of our Services.
By using our Services, you agree to the use of cookies as described in this section.
7. HOW WE USE YOUR INFORMATION
We use the Personal Information we collect for several business purposes, including to:
- Provide, maintain, and improve our Services.
- Respond to inquiries, fulfill requests, and manage customer relationships.
- Process and complete financial transactions, including processing payments via Stripe.
- Personalize user experiences, such as content recommendations and targeted advertisements.
- Conduct analytics to measure the effectiveness of our content, features, and marketing efforts.
- Detect, investigate, and prevent fraud or other unauthorized activities.
- Comply with our legal obligations, protect our rights, and ensure the safety of our users and the public.
8. LEGAL BASIS FOR PROCESSING (WHERE APPLICABLE)
In certain jurisdictions (e.g., pursuant to Canada’s federal private sector privacy law, PIPEDA, and the “substantiality similar” provincial legislation in Alberta, British Columbia, and Quebec, and in U.S. states such as California), we rely on one or more of the following lawful bases for processing Personal Information:
- Consent: Where you have provided express or implied (e.g., opting into marketing communications ).
- Performance of a Contract: Where processing is necessary to provide Services you have requested (e.g., fulfilling an order).
- Legitimate Interests: Where our legitimate business interests (e.g., fraud prevention, analytics) do not override your rights and freedoms.
- Legal Obligations: Where processing is required for compliance with legal or regulatory obligations.
9. HOW WE SHARE YOUR INFORMATION
We do not sell, trade, or rent your Personal Information to unrelated third parties. We may share your data under these circumstances:
1.
Service Providers
- We transfer Personal Information to our third-party providers (e.g., Stripe, hosting services, analytics) who act on our behalf and are contractually required to safeguard Personal Information.
2.
Business Transactions
- In connection with a merger, acquisition, asset sale, financing, or other corporate transaction, your Personal Information may be disclosed to the acquiring or successor entity, subject to appropriate confidentiality.
3.
Legal and Regulatory Compliance
- We may disclose Personal Information if permitted or required by law, court order, or other legal process, or if necessary to protect our rights, safety, or property (or those of others).
4.
With Your Consent
- For any other purpose, if you provide consent.
10. CROSS-BORDER DATA TRANSFERS
Your Personal Information may be transferred to, stored in, or processed in a province or country different from where it was collected, including the United States. We have implemented measures (e.g., contractual clauses or equivalent safeguards) to ensure that such transfers comply with applicable data protection laws. By using our Services, you acknowledge and consent to these cross-border data transfers.
11. RETENTION OF PERSONAL INFORMATION
We keep Personal Information only as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law. Once we no longer need it, we securely delete, destroy, or anonymize it .
12. YOUR RIGHTS AND CHOICES
Depending on your jurisdiction, you may have the following rights:
- Access & Correction: You may request access to the Personal Information we hold about you and request that inaccuracies or omissions be corrected.
- Withdrawal of Consent: Where we rely on your consent, you may withdraw it at any time (e.g., opting out of marketing communications), subject to reasonable notice and legal or other contractual restrictions.
- Deletion: You may have the right to request deletion of your Personal Information under certain circumstances.
- Restriction & Objection: You may request restrictions or object to certain processing activities, subject to legal exceptions.
- Data Portability: In some cases, you can request an electronic copy of the Personal Information you have provided to us or request the transfer of an electronic copy of the Personal Information to a third-party, under certain circumstances.
- Request to de-index a hyperlink or to cease the dissemination of information: You may have the right to request that we de-index a hyperlink or cease the dissemination of certain information, under certain circumstances.
California Residents
Under the
California Consumer Privacy Act (CCPA) and the
California Privacy Rights Act (CPRA), California residents have specific rights regarding their Personal Information, including:
- Right to Know: You can request information about the categories and specific pieces of Personal Information we have collected about you, and details about how we use and share it.
- Right to Delete: You can request that we delete the Personal Information we have collected from you, subject to certain exceptions.
- Right to Opt Out of Sale/Sharing: We do not sell or share Personal Information (as defined under CCPA/CPRA). If in the future our practices change, we will update this policy and provide a “Do Not Sell or Share My Personal Information” link.
- Non-Discrimination: We will not discriminate against you for exercising any of your rights.
Texas Residents
-
We honor universal opt-out signals for targeted advertising. Contact us to opt-out or exercise other rights under the Texas Data Privacy and Security Act (TDPSA).
Virginia Residents
-
We obtain explicit consent for sensitive data processing and provide opt-out mechanisms for data sales and targeted advertising (please note that we do not sell your data).
Colorado Residents
-
We conduct data protection impact assessments (DPIAs) for high-risk data processing activities and prioritize minors' data protection.
To exercise your rights, or if you have any questions as to how we collect and use your personal information, please refer to the “Contact Us” section below. We may verify your identity before fulfilling your request.
13. SECURITY MEASURES
We employ industry-standard administrative, technical, and physical security measures (e.g., encryption, secure servers, access controls) designed to protect your Personal Information from theft, loss, and unauthorized access, use, alteration, disclosure, and destruction. However, no method of electronic transmission or storage is entirely secure, and we cannot guarantee absolute protection.
14. CHILDREN'S PRIVACY
Our Services are not directed to children under the age of 14 (or other ages as specified by local law). We do not knowingly collect Personal Information from minors. If you believe we have collected such information, please contact us immediately so we can delete and otherwise appropriately handle it.
15. THIRD-PARTY WEBSITES & LINKS
Our websites may link to third-party websites or services that operate independently of ERCI. We are not responsible for the content or privacy practices of these external sites. We encourage you to review the privacy policies of any website you visit.
16. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy to reflect changes in our practices or applicable laws. When we do, we will revise the “Last Updated” date at the top of the policy. Any changes will be effective immediately upon posting on our website. By continuing to use our Services after the new policy is posted, you agree to the revised terms.
17. CONTACT US
If you have any questions, concerns, or requests regarding this Privacy Policy or wish to exercise any of your privacy rights, please contact us:
EXIT Realty Corp. International
2626 Argentia Road
Mississauga, Ontario
L5N 5N2, Canada
Phone: 905-363-4050
Fax: 905-363-4060
Email:
exit@exitrealty.com
For
Quebec residents, a French version of this policy is available upon request.
(Les résidents du Québec peuvent demander une version française de cette politique en tout temps.)
By using our Services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.