Privacy Protection Summary

Bank-Level Encryption: All personal information protected with AES-256-GCM encryption

GDPR Compliant: Full compliance with General Data Protection Regulation

No Third-Party Sharing: Your data is never sold or shared with external parties

Texas Compliance: Adherent to Texas Real Estate Commission privacy requirements

1. INTRODUCTION AND SCOPE

Canady Realty ("Company," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us in connection with real estate services.

This policy applies to all information collected by Canady Realty through our website, mobile applications, and any related services, sales, marketing, or events.

Legal Authority: Texas Business and Commerce Code Chapter 521; 15 U.S.C. § 1681 et seq. (Fair Credit Reporting Act); EU General Data Protection Regulation (GDPR) 2016/679

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect information you voluntarily provide to us, including:

Contact Information: Name, email address, phone number, mailing address
Property Preferences: Desired location, price range, property type, size requirements
Financial Information: Income details for pre-qualification, budget information
Communication Preferences: Preferred contact method, best times to contact
Property Details: Information about properties you wish to sell or buy
Transaction History: Details of past real estate transactions with us
Special Requirements: Accessibility needs, specific requests

2.2 Automatically Collected Information

When you visit our website or use our services, we automatically collect:

Technical Data: IP address, browser type, device information, operating system
Usage Data: Pages visited, time spent, search queries, click-through rates
Location Data: General geographic location (city/state level)
Communication Records: Records of correspondence and interactions

2.3 Third-Party Sources

We may obtain information from:

Multiple Listing Service (MLS) databases
Public property records and assessments
Credit reporting agencies (with your consent)
Mortgage lenders and financial institutions (with your consent)

3. HOW WE USE YOUR INFORMATION

3.1 Primary Business Purposes

Real Estate Services: Property searches, market analysis, transaction facilitation
Client Communication: Responding to inquiries, providing updates, scheduling appointments
Market Analysis: Comparative market analysis, property valuations
Transaction Support: Contract preparation, closing coordination, documentation
Lead Management: Assigning agents, tracking interactions, follow-up communications

3.2 Business Operations

Improving our website and service offerings
Analyzing market trends and customer preferences
Maintaining business records and analytics
Ensuring compliance with legal and regulatory requirements
Preventing fraud and ensuring security

Legal Basis: Texas Occupations Code Chapter 1101; TREC Rules 22 TAC § 535.2; legitimate business interests under GDPR Art. 6(1)(f)

4. DATA PROTECTION AND SECURITY

Enterprise-Grade Security Measures

Encryption Standard: AES-256-GCM (Advanced Encryption Standard, 256-bit, Galois/Counter Mode)

Key Management: PBKDF2 key derivation with 100,000 iterations using SHA-512

Data Integrity: Authentication tags prevent unauthorized tampering

Secure Storage: Unique salt and initialization vector for each encrypted record

4.1 Technical Safeguards

Security Measure	Implementation	Purpose
Data Encryption	AES-256-GCM	Protect stored personal information
Transmission Security	TLS 1.3, HTTPS	Secure data in transit
Access Controls	Role-based permissions	Limit data access to authorized personnel
Audit Logging	Comprehensive activity tracking	Monitor data access and modifications
Input Validation	XSS protection, sanitization	Prevent malicious data injection
Rate Limiting	API request throttling	Prevent abuse and attacks

4.2 Physical and Administrative Safeguards

Secure server hosting with 24/7 monitoring
Regular security audits and vulnerability assessments
Employee training on data protection and privacy
Incident response and breach notification procedures
Data backup and disaster recovery protocols

5. DATA SHARING AND DISCLOSURE

NO THIRD-PARTY DATA SHARING

We DO NOT sell, rent, or share your personal information with third-party marketers, data brokers, or advertising companies.

Your data remains within our secure systems and is used exclusively for providing real estate services to you.

5.1 Limited Disclosure Circumstances

We may disclose your information only in the following limited circumstances:

5.1.1 Legal Compliance

Court orders, subpoenas, or legal process
Texas Real Estate Commission investigations
Compliance with federal and state regulations
Law enforcement requests (when legally required)

5.1.2 Transaction-Related Disclosures

Other Real Estate Professionals: Listing agents, buyer agents (with your consent)
Service Providers: Title companies, lenders, inspectors (as necessary for transaction)
Legal Professionals: Real estate attorneys (when required for closing)

5.1.3 Business Protection

Protection of our rights, property, or safety
Protection of client rights and safety
Investigation of fraud or illegal activities

Disclosure Authority: Texas Property Code § 5.008; TREC Rule 22 TAC § 535.16; Texas Government Code Chapter 552

6. YOUR PRIVACY RIGHTS

6.1 General Data Protection Regulation (GDPR) Rights

If you are a resident of the European Union, you have the following rights:

Right	Description	How to Exercise
Access	Request a copy of your personal data	Email info@canadyrealty.com
Rectification	Correct inaccurate personal information	Contact us with corrections
Erasure	Request deletion of your data	Submit deletion request
Restrict Processing	Limit how we use your data	Specify processing restrictions
Data Portability	Receive your data in portable format	Request data export
Object	Object to processing for direct marketing	Opt-out request

6.2 Texas Residents' Rights

Under Texas law, you have the right to:

Know what personal information we collect and how it's used
Request access to your personal information
Request correction of inaccurate information
Opt-out of the sale of personal information (Note: We do not sell personal information)

6.3 Response Timeline

We will respond to your requests within:

GDPR Requests: 30 days (may be extended to 60 days for complex requests)
Texas Requests: 45 days
General Inquiries: 5 business days

7. DATA RETENTION

7.1 Retention Periods

Data Type	Retention Period	Legal Requirement
Active Lead Information	3 years from last contact	Business practice
Completed Transaction Records	7 years	TREC Rule 22 TAC § 535.3
Financial Records	7 years	IRS Requirements
Marketing Communications	Until unsubscribe	CAN-SPAM Act
Website Analytics	26 months	GDPR Article 5
Audit Logs	5 years	Security best practices

7.2 Data Deletion

At the end of the retention period, we securely delete or anonymize your personal information using industry-standard data destruction methods.

Retention Authority: Texas Occupations Code § 1101.652; TREC Rule 22 TAC § 535.3; GDPR Article 5(1)(e)

8. COOKIES AND TRACKING TECHNOLOGIES

8.1 Types of Cookies We Use

Essential Cookies: Necessary for website functionality
Performance Cookies: Help us understand how visitors use our site
Functionality Cookies: Remember your preferences and settings
Marketing Cookies: Track effectiveness of our marketing efforts

8.2 Managing Cookies

You can control cookies through your browser settings. Disabling certain cookies may limit website functionality.

9. THIRD-PARTY SERVICES

9.1 MLS and Property Data

We access Multiple Listing Service (MLS) databases to provide current property information. MLS data is governed by separate agreements and regulations.

9.2 Service Providers

We work with carefully vetted service providers who assist with:

Website hosting and maintenance
Email communication services
Property photography and marketing
Transaction management platforms

All service providers are bound by strict data protection agreements and cannot use your information for their own purposes.

10. CHILDREN'S PRIVACY

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

11. INTERNATIONAL DATA TRANSFERS

Your personal information is processed and stored within the United States. If you are located outside the United States, please note that we may transfer your information to and process it in the United States, where data protection laws may differ from those in your jurisdiction.

12. PRIVACY POLICY CHANGES

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Material changes will be communicated through:

Posted notice on our website with updated "Last Modified" date
Email notification to active clients
Direct communication for significant changes affecting your rights

13. CONTACT INFORMATION

Privacy Officer Contact Information

Email: info@canadyrealty.com

Phone: (512) 850-5405

Mailing Address:
Canady Realty
Attn: Privacy Officer
501 W Crestland Dr
Austin, TX 78752

Business Hours

Monday - Friday: 9:00 AM - 6:00 PM CST
Saturday: 10:00 AM - 4:00 PM CST
Sunday: By appointment

Emergency Contact

For urgent privacy-related matters: (512) 850-5405

14. REGULATORY COMPLIANCE

14.1 Texas Real Estate Commission Compliance

License Information:
Brent Canady, Broker - License #468717
Canady Realty - Brokerage License #9015262

TREC Contact Information:
Texas Real Estate Commission
Phone: (512) 936-3000
Website: www.trec.texas.gov

14.2 Federal Compliance

Fair Housing Act: 42 U.S.C. § 3601 et seq.
Real Estate Settlement Procedures Act (RESPA): 12 U.S.C. § 2601 et seq.
Fair Credit Reporting Act: 15 U.S.C. § 1681 et seq.
CAN-SPAM Act: 15 U.S.C. § 7701 et seq.

14.3 Data Protection Compliance

GDPR: EU Regulation 2016/679
Texas Identity Theft Enforcement and Protection Act: Texas Business and Commerce Code Chapter 521