Privacy Policy

Last Updated: 10 May 2025

New Space Realty, Inc. ("we," "us," or "New Space Realty") is committed to protecting the privacy of our clients and website users. This Privacy Policy explains how we collect, use, store, and share personal information in providing our real estate services in New York (including short sales, home buying and selling, foreclosure defense, investing, and relocation). It also describes your rights under New York law. By using our website or providing information to us, you consent to the practices described below.

1. Information We Collect

We collect the personal data you voluntarily provide to us and data automatically collected through our website and communications tools. Personal information may include:

• Contact Information: Name, postal address, email address, and phone number.
• Identifiers: Any online identifiers (such as IP address, device ID) and geolocation (e.g., city/state derived from IP).
• Communications Data: Content of emails, phone call recordings, or SMS you send when you contact us.
• Sensitive Data (if provided): Financial details or Social Security numbers used for mortgage or foreclosure defense purposes. (Note: We treat SSNs and financial account details as sensitive and only use them with explicit consent.)
• Usage and Cookies: Information about how you use our website (page views, forms submitted, clickstream) collected through cookies and similar technologies (see Section 9).

We do not sell your personal data or rent it to third parties.

2. How and Why We Use Your Data

We use the information we collect for the following purposes:

• Providing Services: To respond to your inquiries, connect you with agents or lenders, process real estate transactions (including purchase/sale contracts, short sales, foreclosures, relocations), and provide related customer support.
• Communications: To send you emails, SMS/text messages, or make phone calls about your inquiries and our services. We do so only if you have opted in or otherwise given us consent to contact you, as required by law. (For example, if you submit a contact form or sign up for updates, you are explicitly consenting to receive communications.)
• Marketing and Updates: To send newsletters or promotional offers by email or SMS only if you have consented. All marketing emails include a clear unsubscribe option; all marketing texts include opt-out instructions (e.g. "Reply STOP to unsubscribe"). You may revoke consent at any time (see Section 10).
• Analytics and Site Improvement: To analyze usage of our website (via analytics tools) so we can improve our site, customize content, and understand traffic trends. These analytics tools collect information (such as pages visited, time on site, and device/browser type) using cookies. We do not obtain your identity from this data.
• Legal and Compliance: To verify identity, prevent fraud, enforce our policies, protect our legal rights, and comply with applicable laws and regulations (e.g. recordkeeping requirements).

We only use your personal data for the purpose for which it was collected and to the extent necessary. If we ask for additional use of your data (e.g. new services, or sharing with new third parties), we will notify you and obtain consent if required.

3. Legal Basis for Processing

Under applicable law, we process your personal data based on the following legal bases:

• Consent: We rely on your freely given, specific consent when processing data for marketing (email/SMS) or any "sensitive data" processing (e.g. Social Security numbers, financial account info). For example, we obtain clear opt-in consent before sending SMS or handling sensitive financial data. You may withdraw consent at any time (see Section 10).
• Performance of a Contract: We process your data as necessary to perform real estate services you request (e.g. managing a home sale or purchase, conducting foreclosure defense).
• Legitimate Interests: We process data necessary to pursue our legitimate business interests, such as improving our services, communicating with you about transactions, and preventing fraud. These interests are balanced against your privacy rights.
• Legal Compliance: We process data to comply with obligations under New York law. For example, real estate brokers must retain certain transaction records for at least 3 years, and we retain data for such legally required periods (see Section 5).

4. Disclosure to Third Parties

We do not sell or share your personal data with unrelated third parties for their own advertising or marketing purposes. We only share information in the following limited circumstances:

• Service Providers: We share data with trusted vendors who perform services on our behalf under contract, such as our CRM/marketing platform, email/SMS service providers, hosting and analytics providers, and payment processors.
• Professional Partners: For real estate transactions, we may share relevant data with other licensed professionals (e.g. cooperating agents, attorneys, title companies, mortgage brokers) as needed to complete your transaction, subject to confidentiality obligations.
• Legal Requirements: We disclose data if required by law or legal process (e.g. court order, law enforcement request) or to exercise our legal rights, protect public safety, or prevent fraud.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the new owner or successor.

In all cases, we limit shared data to what is reasonably necessary. Specifically, no SMS or mobile opt-in data is shared with third parties for marketing. We do not share your personal contact details with affiliates or advertisers unless you have expressly consented.

5. Data Retention Policy

We retain your personal data only as long as necessary for the purposes described or as required by law. For example:

• Active Transactions: We keep records related to a home sale, rental, or foreclosure defense as long as the transaction is ongoing and for at least the minimum period required by law. New York law requires keeping transaction records (names, contract, etc.) for 3 years after closing. After this period, we may archive or delete most personal information.
• Customer Accounts and Communications: We may keep your contact and consent records for as long as you use our services or express interest in our communications. If you unsubscribe or request deletion, we will remove you from marketing lists (unless retention is required by law).
• Legal Compliance: We retain data for longer if needed to comply with legal obligations (tax records, licensing rules, or defense of legal claims).
• Analytics Data: We keep aggregated, de-identified analytics and logs for improving our site; personal identifiers from analytics are not stored beyond short-term use.

After the retention period, we securely delete or anonymize your personal data to protect your privacy.

6. Your Rights Under New York Law

Although New York currently does not have a comprehensive consumer privacy statute in force, we honor rights analogous to those under proposed privacy laws (like the New York Privacy Act) and other data protection standards:

• Right to Access: You can request a copy of the personal data we hold about you and information on how it is processed.
• Right to Correction: You may ask us to correct or update any inaccurate personal data we maintain. We will make corrections to ensure our records are accurate and complete.
• Right to Deletion: You may request deletion of your personal data. We will comply unless retention is necessary to comply with law or complete a transaction (e.g. recordkeeping for closings).
• Right to Withdraw Consent: For marketing communications or other processing based on consent (including sensitive data), you may withdraw consent at any time. We will stop processing your data for those purposes once consent is withdrawn.
• Right to Opt-Out: If we ever engage in targeted advertising or sell data (we do not do so under current practice), you would have the right to opt out. In any case, you can always opt-out of direct marketing communications (see Section 10).

To exercise any rights, please contact us as described below. We will respond to verified requests within a reasonable time (generally within 30–45 days). We do not charge a fee for complying with such requests unless a request is frivolous or repetitive. Upon your request, we will inform you of the personal data we have collected and any third parties it has been shared with.

7. Data Access, Correction, and Deletion

You may review and update certain information through your account if applicable. Otherwise, to access or change your data, or request deletion, please reach out to us.

When requesting access, please identify the specific information you want. For deletion or correction, describe what data needs to be changed or erased. We will verify your identity before acting on requests, to protect your data. Any data collected via third-party tools will be processed in accordance with their policies and your consent. If you ask to delete data collected by these tools, we will delete it from our systems, but you may also contact those service providers directly as needed.

8. Data Protection Measures

We employ robust administrative, technical, and physical safeguards to protect personal data, as required by the New York SHIELD Act and industry best practices. For example:

• Administrative Controls: We conduct regular risk assessments, train our staff on privacy and data security procedures, and designate personnel responsible for data security. We carefully vet and contractually obligate all service providers to implement adequate safeguards.
• Physical Safeguards: We restrict physical access to offices and servers where data is stored. We ensure secure disposal of sensitive documents and drives when no longer needed.
• Technical Safeguards: We use industry-standard encryption (SSL/TLS) for all data transmitted between your browser and our servers. Sensitive data (like financial information and Social Security numbers) are encrypted at rest and access-controlled. We employ firewalls, access controls, and monitoring to prevent unauthorized access. Access to personal data is limited to authorized personnel and requires unique credentials. We regularly test and update our systems to guard against vulnerabilities.

These measures help ensure that your data is protected "at a reasonable degree" as expected under NY SHIELD. In the unlikely event of a data breach involving New York residents' private information, we will follow the SHIELD Act's notification requirements to promptly inform affected individuals and regulators as required by law.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies for functionality, analytics, and (if applicable) advertising. Cookies are small text files stored on your device. We use them for purposes such as:

• Essential Cookies: Necessary for site operation (e.g. keeping you logged in, remembering language settings).
• Analytics Cookies: To analyze site usage and improve content. For example, we use analytics tools to collect information about website traffic and user behavior.
• Marketing/Advertising Cookies: We may use cookies from advertising networks to show relevant ads to interested users or measure campaign effectiveness. These are only used if you have consented to marketing cookies on our site.

You can control cookie use through your browser settings (disable or delete cookies) or by using privacy controls on our site. However, blocking cookies may affect site functionality. For more details on cookie usage, please see our separate Cookie Policy (or the "Cookie" section on our website). We do not collect personal information from cookies unless you voluntarily provide it through our site (e.g. by submitting a form).

10. Communications and Opt-Out Choices

We respect your communication preferences and provide clear ways to opt out of marketing and other contacts:

• Email: All marketing or promotional emails from us include a clear "unsubscribe" link or instructions on how to opt out. If you unsubscribe, we will stop sending you marketing emails promptly (within 10 business days as required by CAN-SPAM). Transactional emails (e.g. confirmations) will not contain marketing content.
• SMS/Text Messaging: We will send SMS only with your prior express consent. Every marketing text message will include opt-out instructions (typically "Reply STOP to unsubscribe"). Replying "STOP," "END," "QUIT," or a similar command to any text will terminate further texts from us. You will receive a one-time SMS confirming your opt-out.
• Phone Calls: We do not place automated marketing calls without your permission. You can always revoke consent to receive calls by notifying us verbally or in writing. We also comply with the National Do-Not-Call Registry. If you do not want to receive phone calls from us, please let us know and we will honor your request.
• No Text/Email Without Consent: We will not send marketing texts or calls to your mobile number without express written consent. Informational messages (e.g. appointment reminders) will be sent only to the phone number you provided for that purpose.

In summary, you may opt out of any communications at any time. Opt-out requests will be processed within the time required by law, and in any event within a reasonable period (usually within 10 business days). Opting out of one channel (e.g. email) does not automatically unsubscribe you from others; please use the appropriate method (reply, link, or contacting us) for each channel.

11. Changes to This Policy and Notification

We may update this Privacy Policy from time to time. We will post the revised policy on our website with a new "Last Updated" date. If we make material changes (e.g. changing how we use or share data), we will notify you by email or by a notice on our website before the changes take effect. As required by privacy best practices, we encourage you to review this policy periodically. The updated policy will always be available at www.newspacerealty.net/privacy and you can see the "last updated" date at the top. We may also maintain an archive of previous policy versions for reference.