Right to Access: You have the right to request confirmation of whether we are processing your personal information, and if so, to obtain a copy of the personal information we hold about you. This is sometimes called the right to know what personal information is collected, used, shared, or sold. We will provide you with the requested information in a portable and readily usable format, where required by law.

Right to Correction/Rectification: You have the right to request that we correct or update any inaccurate or incomplete personal information we hold about you. Upon verification of the accuracy of the new information, we will correct our records. (California residents gained the right to request correction of inaccurate personal information under the CPRA, effective January 2023, and EU individuals have this right under GDPR.)

Right to Deletion: You can request that we delete your personal information. This is sometimes referred to as the “right to be forgotten.” We will delete the information we hold about you, and direct our service providers to do the same, subject to certain exceptions. For example, we may retain data if needed to complete a transaction you requested, detect security incidents, comply with a legal obligation, or other exceptions permitted by law. If an exception applies, we will let you know in our response.

Right to Restrict Processing: Where applicable (such as under GDPR), you can ask us to limit or suspend the processing of your personal information under certain circumstances – for instance, if you contest the accuracy of the information or object to our processing, we may restrict use while we consider your request.

Right to Object: You have the right to object to our processing of your personal information in certain situations. Under GDPR, you can object when we process data based on legitimate interests or for a task in the public interest, and we will honor your objection unless we have compelling legitimate grounds to continue. You also have an absolute right to object to us using your personal information for direct marketing purposes. For example, if you no longer wish to receive promotional emails from us, you can opt out at any time.

Right to Data Portability: You have the right to request a copy of certain personal information in a structured, commonly used, machine-readable format, and to have that information transmitted to another data controller where technically feasible. This right applies to information you provided to us directly and that we process by automated means, under the GDPR.

Right to Opt Out of Sale/Sharing: If you are a California resident, you have the right to opt out of the sale of your personal information (as detailed in the “Sale of Personal Information” section above). California law also gives you the right to opt out of the “sharing” of personal information for cross-context behavioral advertising, though as noted, DealTrail does not engage in such sharing. We extend the option to opt out of any non-essential data transfers to all users where practicable. To exercise this right, contact us at [email protected].

Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights. In practice, this means we won’t deny you our services, charge you different prices, or provide a different level of service just because you exercised your rights. (Do note that if you request deletion of certain data or opt out of certain uses, it may impact our ability to provide some services – for example, if you opt out of our lead sale and you are a consumer, we can’t connect you with a real estate agent through our platform. But we will not punish you for making the request itself.)

Right to Withdraw Consent: If we are processing your personal information based on your consent, you have the right to withdraw that consent at any time. For example, if you consented to receive marketing emails or to be contacted by our Clients and you change your mind, you can withdraw your consent. This will not affect the lawfulness of processing based on consent before its withdrawal.

Right to Lodge a Complaint: If you believe we have infringed your privacy rights or violated data protection laws, you may have the right to complain to a data protection authority. For individuals in the EU/EEA, this would be a supervisory authority in the country of your residence or workplace. For example, a UK user can complain to the UK Information Commissioner’s Office (ICO). We would appreciate the opportunity to address your concerns directly, so we encourage you to contact us first at [email protected] so we can try to resolve the issue.