La Politique de confidentialité n'est pas disponible dans la langue sélectionnée. La version anglaise ci-dessous est le document juridiquement contraignant.
Politique de confidentialité
Dernière mise à jour: December 12, 2025
1. Introduction
1.1 Who We Are
DRListings.com ("we," "us," "our," or the "Company") operates a real estate listing and information platform (the "Platform") that connects property buyers, sellers, renters, and real estate professionals. Our Platform includes websites, mobile applications, and related services.
Company Information:
- Data Protection Contact: privacy@drlistings.com
1.2 Purpose of This Policy
This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform. It also describes your rights regarding your personal information and how you can exercise them.
1.3 Scope and Application
This Privacy Policy applies to:
- All visitors to our website and mobile applications
- Users who create accounts (standard users, agents, agency owners)
- Users who post content (listings, forum posts, comments)
- Newsletter subscribers
- Inquiry submitters
- Anyone who interacts with our Platform
This Policy applies to information collected through:
- Our websites (DRListings.com and subdomains)
- Mobile applications (when available)
- Email communications
- Customer support interactions
- Social media interactions
- Third-party integrations
1.4 Acceptance and Consent
By using the Platform, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with our data practices, you must not use the Platform.
For users in certain jurisdictions (such as the European Union), we will obtain your explicit consent where required by law before processing your personal information.
1.5 Relationship to Terms of Service
This Privacy Policy is incorporated into and subject to our Terms of Service. Capitalized terms not defined in this Privacy Policy have the meanings given in the Terms of Service.
2. Information We Collect
We collect various types of information from and about users of our Platform.
2.1 Information You Provide Directly
A. Account Registration Information
When you create an account, we collect:
Basic Information:
- Full name
- Email address
- Password (encrypted)
- Phone number
- Account type (user, agent, agency owner)
- Profile photo (optional)
For Agent Accounts (additional):
- Professional license number
- Brokerage affiliation
- Years of experience
- Service areas
- Languages spoken
- Specializations
- Professional biography
- Office address
- Secondary phone numbers
- WhatsApp number
- Social media profiles
- Professional credentials and certifications
For Agency Accounts (additional):
- Agency name
- Business registration information
- Agency logo
- Agency description
- Number of team members
- Agency social media profiles
- Business license information
B. Property Listings
When you create property listings, we collect:
- Property details (address, price, size, features, amenities)
- Property photos and videos
- Property descriptions
- Property documents (when uploaded)
- Listing metadata (creation date, status, views)
- Geolocation data (property coordinates)
C. User-Generated Content
We collect content you create and share on the Platform:
- Forum posts, replies, and discussions
- Topic titles and content
- Blog post comments
- News article comments
- Timestamps and edit history
D. Communications and Inquiries
When you communicate through the Platform:
- Property inquiry messages
- Agent/agency contact forms
- Customer support messages and tickets
- Email correspondence
- Feedback and survey responses
E. Newsletter and Marketing Subscriptions
When you subscribe to communications:
- Email address
- Subscription preferences
- Language preferences
- Topics of interest
- Subscription date and source
F. Saved Preferences and Favorites
- Saved property listings (favorites)
- Search preferences and saved searches
- Notification preferences
- Language and currency preferences
- Accessibility settings
2.2 Information Collected Automatically
A. Device and Browser Information
- Device type (desktop, mobile, tablet)
- Operating system and version
- Browser type and version
- Screen resolution
- Device identifiers (IP address, device ID)
- Browser language settings
B. Usage Information
- Pages visited and time spent on pages
- Clickstream data (links clicked, buttons pressed)
- Search queries and filters used
- Listings viewed and interaction patterns
- Session duration and frequency
- Referral source (how you arrived at our Platform)
C. Location Information
- IP-based approximate location (city/region level)
- Precise geolocation (only if you grant permission via device settings)
- Location preferences for property searches
2.3 Information from Third-Party Sources
A. Social Media Integration
If you connect social media accounts or use social login:
- Profile information (name, email, profile photo)
- Social media activity related to our Platform
B. Authentication Providers
If you use third-party authentication (Google, Facebook login):
- Identity verification data
- Email address and name
- Profile photo
- Authentication tokens
2.4 Sensitive Personal Information
We generally do not collect sensitive personal information (such as health data, biometric data, or financial account numbers). However:
- Government IDs: For agent/agency verification, we may collect copies of professional licenses or business registration documents
- Financial Information: Payment processors may collect payment card information (we do not store full card numbers)
- Communications: Messages you send may contain sensitive information you voluntarily disclose
We handle any sensitive information with heightened security measures.
2.5 Children's Information
We do not knowingly collect information from individuals under 18 years of age. See Section 10 for details.
2.6 Anonymized and Aggregated Data
We create anonymized and aggregated data from personal information by removing identifiers. This data cannot identify you and is not personal information. We may use and share such data without restriction.
3. How We Use Your Information
We use the information we collect for the following purposes:
3.1 Provide and Improve the Platform
A. Core Services
- Create and manage your account
- Display your profile information (agents and agencies)
- Publish your property listings
- Enable forum participation and commenting
- Facilitate property inquiries and lead generation
- Deliver newsletters and requested content
- Process and respond to customer support requests
- Authenticate your identity and prevent unauthorized access
B. Platform Functionality
- Enable search and filtering
- Save your favorites and preferences
- Remember your settings and choices
- Provide personalized content and recommendations
- Display relevant property suggestions
C. Performance and Optimization
- Monitor and analyze Platform usage and trends
- Troubleshoot technical issues
- Test new features and improvements
- Optimize Platform performance and speed
- Generate analytics and usage reports
3.2 Communications
A. Transactional Communications
- Account notifications (password resets, security alerts)
- Inquiry responses and lead notifications
- Listing status updates
- Forum notifications (replies, mentions)
- System announcements and service updates
- Customer support correspondence
B. Marketing Communications (with your consent where required)
- Newsletters and property alerts
- New feature announcements
- Promotional offers and special content
- Market reports and insights
- Educational content and resources
3.3 Safety and Security
- Detect and prevent fraud, abuse, and illegal activity
- Enforce our Terms of Service and policies
- Protect against security threats and vulnerabilities
- Investigate suspicious activity
- Maintain Platform integrity and safety
- Prevent spam and automated abuse
3.4 Legal and Regulatory Compliance
- Comply with legal obligations and regulations
- Respond to law enforcement and government requests
- Protect our legal rights and interests
- Resolve disputes and enforce agreements
- Maintain records as required by law
3.5 Legal Basis for Processing (GDPR)
For users in the European Union, we process your personal information based on the following legal grounds:
- Contract Performance: To provide services you've requested and fulfill our Terms of Service
- Legitimate Interests: To improve our Platform, prevent fraud, and conduct analytics (balanced against your rights)
- Consent: For marketing communications, cookies, and certain data processing (which you can withdraw)
- Legal Obligation: To comply with laws, regulations, and legal processes
6. Your Privacy Rights and Choices
6.1 Access and Portability
Right to Access: You have the right to request:
- Confirmation of whether we process your personal information
- Access to your personal information
- Details about how we use and share your information
Right to Data Portability: You can request a copy of your personal information in structured, commonly used format (JSON, CSV).
How to Exercise: Email privacy@drlistings.com or use your account settings.
6.2 Correction and Update
Right to Correction: You have the right to correct inaccurate or incomplete personal information.
How to Exercise:
- Account Information: Update through your account settings
- Listings: Edit through listing management dashboard
- Other Information: Email privacy@drlistings.com
6.3 Deletion and Erasure
Right to Deletion (Right to be Forgotten): You can request deletion of your personal information. We will honor deletion requests except where we:
- Need the information to complete a transaction or provide a service
- Must retain information for legal, regulatory, or security purposes
- Need to detect and prevent fraud or security incidents
- Need to comply with legal obligations
What Happens When You Delete Your Account:
- Your account is deactivated
- Your personal information is deleted or anonymized
- Public content (forum posts, comments) may remain but be anonymized
- Listings may be transferred to your agency or deleted
- Some information is retained for legal compliance (see Section 7)
6.4 Marketing Communications Opt-Out
Email Marketing:
- Click "Unsubscribe" in any marketing email
- Update preferences in account settings
- Email privacy@drlistings.com
Note: You cannot opt out of transactional communications (account notifications, inquiry responses, service updates).
6.5 Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority:
- European Union: Contact your local data protection authority
- Other Jurisdictions: Contact your local privacy or data protection regulator
6.6 How to Exercise Your Rights
Methods:
- Email: privacy@drlistings.com with subject "Privacy Rights Request"
- Account Settings: Use privacy and data management tools
Response Timeline:
- We respond within 30 days (45 days for complex requests)
- We may extend by 30 additional days with notice
- We may request additional information to verify your identity
7. Data Retention
7.1 Retention Principles
We retain personal information for as long as necessary to:
- Provide services you've requested
- Comply with legal obligations
- Resolve disputes and enforce agreements
- Prevent fraud and abuse
- Maintain security and business operations
7.2 Retention Periods by Data Type
A. Account Information
- Active Accounts: Retained while account is active
- Deleted Accounts: Personal data deleted within 90 days, except as noted below
B. User-Generated Content
- Forum Posts: Retained indefinitely but anonymized after account deletion
- Comments: Retained indefinitely but anonymized after account deletion
C. Communications and Inquiries
- Inquiry Messages: Retained for 2 years for business records
- Customer Support: Retained for 3 years for quality assurance and legal compliance
D. Transaction and Payment Data
- Transaction Records: Retained for 7 years for tax and accounting purposes
- Payment Information: Not stored by us (handled by payment processors)
E. Usage Data and Analytics
- Raw Usage Logs: Retained for 90 days
- Aggregated Analytics: Retained indefinitely (anonymized)
7.3 Legal and Regulatory Retention
We may retain information longer when required by applicable laws, legal proceedings, or court orders.
7.4 Anonymization and Aggregation
After retention periods expire, personal identifiers are removed and data is anonymized. Anonymized data may be retained indefinitely for analytics and research.
8. Data Security
8.1 Security Commitment
We take the security of your personal information seriously and implement reasonable administrative, technical, and physical safeguards to protect it.
8.2 Technical Security Measures
A. Encryption
- In Transit: All data transmitted via HTTPS/TLS encryption
- At Rest: Sensitive data encrypted in databases (AES-256 or equivalent)
- Passwords: Hashed using bcrypt or similar secure algorithms
B. Access Controls
- Authentication: Multi-factor authentication for admin access
- Authorization: Role-based access control (RBAC)
- Least Privilege: Users and systems have minimum necessary access
C. Application Security
- Input Validation: Sanitization of user inputs to prevent injection attacks
- CSRF Protection: Cross-site request forgery tokens
- XSS Prevention: Content Security Policy and output encoding
- SQL Injection Prevention: Parameterized queries and prepared statements
8.3 Third-Party Security
Third-party service providers we use maintain their own security measures:
- Vercel: SOC 2 Type II certified hosting
- Supabase: Enterprise-grade database security
- Payment Processors: PCI DSS compliant (when implemented)
8.4 Security Limitations
Important: Despite our efforts, no security measures are perfect or impenetrable. We cannot guarantee absolute security. Data transmission over the internet has inherent risks.
8.5 Your Security Responsibilities
Protect Your Account:
- Use strong, unique passwords
- Enable two-factor authentication (when available)
- Keep your password confidential
- Log out from shared or public computers
- Report suspicious activity immediately
Recognize Phishing:
- We will never ask for your password via email
- Verify email sender addresses
- Don't click suspicious links
- Report phishing attempts to security@drlistings.com
8.6 Security Breach Notification
If we experience a data breach that affects your personal information:
- We will notify you without undue delay
- Notification will include nature of breach, data affected, and steps to take
- We will notify relevant authorities as required by law
- We will take steps to remediate and prevent future breaches
9. International Data Transfers
9.1 Cross-Border Transfers
DRListings.com operates globally and your personal information may be:
- Stored on servers in various countries
- Accessed by service providers in different jurisdictions
- Transferred across international borders
9.2 Legal Framework
When we transfer personal information internationally, we comply with applicable data protection laws:
European Union Transfers
For transfers from the EU to countries without adequacy decisions:
- Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
- Adequacy Decisions: Transfers to countries the EU Commission deems adequate
- Explicit Consent: Where appropriate and legally permitted
9.3 Data Protection Standards
Regardless of where data is stored or processed:
- We maintain consistent data protection standards
- Service providers must meet our security requirements
- Contractual protections are in place
- We monitor compliance with data protection obligations
9.4 Your Rights Across Borders
Your privacy rights (see Section 6) apply regardless of where your data is stored or which jurisdiction processes your data.
10. Children's Privacy
10.1 Age Restriction
The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18.
Age Verification:
- Users must affirm they are 18+ when creating accounts
- We may request age verification if we suspect underage use
10.2 Parental Notice
If you are a parent or guardian and believe your child under 18 has provided us with personal information:
- Contact us immediately at privacy@drlistings.com
- Provide details of the account or information
- We will promptly delete the information and terminate the account
10.3 Discovery of Child Information
If we discover we have collected information from a child under 18:
- We will delete the information as soon as possible
- We will terminate the account
- We will not use the information for any purpose
10.4 COPPA Compliance (U.S.)
For users in the United States:
- We comply with the Children's Online Privacy Protection Act (COPPA)
- We do not collect personal information from children under 13
- We do not have actual knowledge of collecting information from children
11. Third-Party Services and Links
11.1 Third-Party Websites and Links
The Platform contains links to third-party websites and services. We are not responsible for:
- Privacy practices of third-party sites
- Content or accuracy of third-party sites
- Security of third-party services
- Data collected by third parties
Your Responsibility: Review third-party privacy policies and make informed decisions about sharing information.
11.2 Third-Party Service Providers
Key third parties have their own privacy policies:
- Vercel: vercel.com/legal/privacy-policy
- Supabase: supabase.com/privacy
- Google Analytics: policies.google.com/privacy
- WhatsApp Business API: whatsapp.com/legal/business-policy
11.3 Single Sign-On (SSO)
If you use third-party authentication (Google, Facebook, etc.):
- You authorize the provider to share certain information
- We receive information according to provider's policies and your settings
- Review the provider's privacy policy and permissions
12. Changes to This Privacy Policy
12.1 Right to Modify
We reserve the right to modify this Privacy Policy at any time to:
- Reflect changes in our data practices
- Comply with legal requirements
- Improve clarity and transparency
- Add new features or services
12.2 Notice of Changes
Material Changes: For significant changes that affect how we use your personal information:
- We will provide prominent notice on the Platform
- We will send email notification to registered users
- We will provide at least 30 days' notice before changes take effect
Non-Material Changes: For minor changes:
- We will update the "Last Updated" date
- Changes take effect immediately upon posting
- Continued use constitutes acceptance
12.3 Your Choices Upon Changes
If you disagree with policy changes:
- You may delete your account before changes take effect
- You may opt out of new data processing activities (where possible)
- You may exercise your privacy rights (see Section 6)
12.4 Version History
Previous versions are archived and available upon request. Email privacy@drlistings.com to request previous versions.
13. Contact Information
13.1 Privacy Questions and Requests
For privacy-related questions, concerns, or to exercise your privacy rights:
Email: privacy@drlistings.com
Subject Line: "Privacy Inquiry" or "Privacy Rights Request"
13.2 Security Issues
To report security vulnerabilities or concerns:
Email: security@drlistings.com
Please do not publicly disclose security issues. We appreciate responsible disclosure.
13.3 General Support
For general customer support (non-privacy):
Email: support@drlistings.com
13.4 Response Time
We strive to respond to privacy inquiries:
- Acknowledgment within 3 business days
- Substantive response within 30 days
- Complex requests may take up to 45-60 days
- We will notify you of any delays
14. Jurisdiction-Specific Provisions
14.1 European Union (GDPR)
For users in the European Economic Area (EEA), United Kingdom, and Switzerland:
A. Legal Basis for Processing
We process your personal data based on:
- Contract Performance: To provide services and fulfill our Terms of Service
- Legitimate Interests: Platform improvement, fraud prevention, analytics
- Consent: Marketing communications, cookies, certain data processing
- Legal Obligation: Compliance with laws and regulations
B. Your GDPR Rights
In addition to rights in Section 6, you have:
- Right to object to processing based on legitimate interests
- Right to restrict processing in certain circumstances
- Right to data portability in machine-readable format
- Right to withdraw consent without affecting prior processing
- Right not to be subject to automated decision-making (if applicable)
- Right to lodge a complaint with your supervisory authority
C. Data Protection Authority
You can lodge complaints with your local EU supervisory authority: edpb.europa.eu/about-edpb/board/members_en
D. GDPR Contact
For GDPR-specific inquiries: gdpr@drlistings.com
14.2 California (CCPA/CPRA)
For California residents, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide additional rights:
A. Information We Collect
Categories of personal information we collect (past 12 months):
- Identifiers: Name, email, phone, IP address, device ID
- Internet Activity: Browsing history, search history, interaction with Platform
- Geolocation Data: Approximate location from IP, precise location if granted
- Professional Information: Employment, credentials (for agents/agencies)
- Inferences: Preferences and characteristics derived from activity
B. Your California Rights
- Right to Know: Request disclosure of information we collect, use, and share
- Right to Delete: Request deletion of your personal information
- Right to Correct: Request correction of inaccurate information
- Right to Opt-Out: Opt out of "sale" or "sharing" of personal information
- Right to Non-Discrimination: We will not discriminate for exercising rights
C. Do Not Sell or Share
- We do not "sell" personal information as defined by CCPA
- We do not "share" personal information for cross-context behavioral advertising
D. How to Exercise Rights
Email: privacy@drlistings.com with "California Privacy Rights Request"
We respond to verifiable requests within 45 days (may extend by 45 additional days for complex requests).
14.3 Dominican Republic
For users in the Dominican Republic:
A. Applicable Laws
We comply with:
- Ley No. 172-13 sobre Protección de Datos de Carácter Personal
- Other applicable Dominican Republic data protection regulations
B. Your Rights
Under Dominican Republic law, you have:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to cancellation of data under certain circumstances
- Right to object to processing
14.4 Other Jurisdictions
We comply with applicable data protection laws in all jurisdictions where we operate, including:
- Canada (PIPEDA): Right to access and correct personal information
- Brazil (LGPD): Rights similar to GDPR
- United Kingdom (UK GDPR): Post-Brexit data protection law similar to GDPR
- Australia (Privacy Act): Australian Privacy Principles apply
If you are located in a jurisdiction with specific data protection laws, please contact us at privacy@drlistings.com.
15. Data Processing Addendum
15.1 Business Relationship
When you use the Platform as an agent or agency owner and collect personal information of your clients or leads:
- You are the data controller
- We are the data processor
- This section governs our data processing relationship
15.2 Processing Instructions
We will process personal data:
- Only on your documented instructions (via Platform features)
- Only for purposes of providing Platform services
- In accordance with this Privacy Policy and Terms of Service
- In compliance with applicable data protection laws
15.3 Data Security Obligations
We will:
- Implement appropriate technical and organizational measures (see Section 8)
- Ensure personnel are bound by confidentiality
- Assist with data security incident response
- Notify you of data breaches without undue delay
15.4 Sub-Processors
We may use sub-processors (service providers listed in Section 4.3):
- We remain liable for sub-processor compliance
- Sub-processors are bound by contractual obligations
- We will notify you of changes to sub-processors (where required)
Current Sub-Processors: Vercel (hosting), Supabase (database), Email service providers, Analytics providers. Complete list available upon request.
15.5 Data Subject Rights Assistance
We will assist you in:
- Responding to data subject access requests
- Fulfilling data subject rights (correction, deletion, etc.)
- Providing necessary information and documentation
15.6 Return and Deletion of Data
Upon termination or at your request:
- We will return or delete your personal data
- We will certify deletion (if requested)
- We may retain data as required by law (see Section 7)
15.7 DPA Terms
For enterprise customers or where required by law, we can execute a separate Data Processing Agreement (DPA).
Request DPA: Contact business@drlistings.com
Document Information:
Version: 1.0
Effective Date: December 12, 2025
Last Updated: December 12, 2025
Document Owner: DRListings.com Privacy Team
La Politique de confidentialité n'est pas disponible dans la langue sélectionnée. La version anglaise ci-dessous est le document juridiquement contraignant.