How I handle your information.

What I collect

When you fill out a form — newsletter, contact, home valuation, saved-search alert, or a guide download — I collect your email and, if you provide them, your name, phone number, alert preferences, and any message you typed.

If you create an account or use the listing portal, I may also record listing views, saved homes, Love / Maybe / Hidden changes, saved searches, alert interactions, tour-link opens, and contact/showing requests. Anonymous browsing may be counted with a temporary browser identifier until you sign in. No ad networks, no remarketing pixels, no Facebook pixel.

Why I collect it

• To send you the newsletter or guide you signed up for.
• To follow up on your message or home valuation request.
• To keep track of the homes, searches, alerts, and tour links you asked the site to remember.
• To help me understand which listings or searches are relevant when you ask for advice, showings, or follow-up.
• When you become a represented buyer or seller, RECA and SREB require client identification records — that’s a regulatory obligation, not a marketing one.

Where it’s stored

Form submissions, account records, listing activity, and saved-search activity are stored in a Supabase database (project ref kntgxkvgxlhrwonlfbny) hosted in Canada and the US, encrypted in transit. Newsletter sends and contact tags go through Brevo (hosted in the EU) so they can deliver email and let me unsubscribe you cleanly. If and when I wire up Lofty CRM for transaction work, that integration is documented on the Lofty side and only used for active represented clients.

Who sees it

Me. That’s the list. Your information is not shared with eXp Realty as a brokerage marketing channel, not sold to any third party, and not handed off to other agents. The only time someone else sees your details is when delivery requires it — Brevo to send the email, Supabase to store the record — and those vendors are bound by their own data agreements.

How long I keep it

Newsletter, lead, saved-search, saved-home, and portal activity records stay on file until you unsubscribe, close your account, or ask me to delete them. After that, I delete or anonymize the record within 30 days. Records tied to a real estate transaction (offers, deposits, contracts) have to be kept for seven years under RECA Rule 88 and SREB’s equivalent — so once you’re an actual client on a deal, that 7-year clock applies regardless of whether you later unsubscribe from the newsletter.

Your rights under PIPEDA

Canada’s federal privacy law (PIPEDA) gives you the right to:

• Ask what information I have about you.
• Correct anything that’s wrong.
• Withdraw consent — for marketing, lead follow-up, or both. Transaction records that RECA or SREB require me to keep are the one carve-out.
• Get a copy of your data in a readable format.
• Ask me to delete or anonymize account activity that is not tied to a legal transaction record I have to keep.

How to delete or opt out

Three ways:

• Click the unsubscribe link in any email I’ve sent you.
• Use the form at /email-preferences with your email.
• Email me at hasan.sharif.realtor@gmail.com with “remove me” in the subject. I handle these the same day I see them.

Contact for privacy questions

If you have a privacy concern, want a copy of your data, or want to know exactly what I’m holding on you:

Hasan Sharif — eXp Realty
hasan.sharif.realtor@gmail.com
587-742-1507

If we can’t resolve a complaint between us, you can escalate to the Office of the Privacy Commissioner of Canada at priv.gc.ca.