Privacy Policy
Last Updated: March 15, 2026
BuyRealty.ca (“we”, “us”, “our”) is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at buyrealty.ca and use our real estate listing search and client services. This policy is designed to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).
1. Information We Collect
1.1 Information You Provide Directly
When you create an account, save favourites, or interact with our services, we may collect:
- Account Information: Email address, phone number, first name, and last name
- Favourited Listings: Properties you save or “like” using the heart icon
- Saved Searches: Search criteria you save for future use or notifications (up to 5 per account), including city, price range, bedrooms, bathrooms, property type, and other filter preferences
- Communication Content: Messages you send or receive through our platform via SMS, MMS, WhatsApp, or RCS
1.2 Information Collected Automatically
When you browse our website, we automatically collect:
- Browsing Activity: Listings you view (page views) and photos you browse within listings (photo views)
- IP Address: Your Internet Protocol address, collected at the time of registration and during site visits, which may be used to determine your approximate geographic location
- Device & Browser Information: Browser type, operating system, and session data
- Geolocation Data: If you grant browser permission, we may collect your precise location to provide location-based search results and map functionality
- Cookies & Session Data: We use cookies to maintain your login session, remember preferences, and improve site performance
1.3 Information from Third-Party Sources
We receive real estate listing data from the Canadian Real Estate Association (CREA) through their Data Distribution Facility (DDF). This data includes property details, pricing, photos, and listing agent information. This data is publicly available MLS listing information and does not contain your personal information.
2. How We Use Your Information
We use the information we collect for the following purposes:
- Provide Our Services: Display real estate listings, enable property search, and allow you to save favourites and searches
- Account Management: Create and manage your account, verify your identity via email and SMS verification codes
- Communication: Send you verification codes, respond to your inquiries, and send listing notifications if you opt in to saved search alerts
- Personalization: Show you relevant listings based on your search history and saved preferences, generate interest profiles, and display similar properties
- Analytics & Improvement: Understand how users interact with our site, which listings are popular, and improve our services. We track page views and photo views to provide activity summaries
- Security: Detect and prevent fraud, unauthorized access, and other malicious activity. We implement SMS-based two-factor authentication for account security
- Legal Compliance: Comply with applicable laws, regulations, and legal processes
3. Client Registration & Verification
To access features such as favouriting listings and saving searches, you must create an account. Our registration process involves:
- Email Verification: A verification code is sent to your email address to confirm ownership
- Phone Verification: A 4-digit SMS verification code is sent to your phone number via our Twilio-powered messaging system
- Two-Factor Authentication: Each time you log in, a new SMS code is sent to your phone for security. Sessions expire after 3 hours of inactivity
Each email address and phone number can only be registered to one account.
4. Messaging Channels
We may communicate with you through the following channels, subject to your consent:
- SMS (Short Message Service): For verification codes, login authentication, and direct communication
- MMS (Multimedia Messaging Service): For sharing listing photos or documents
- WhatsApp: For messaging if you have opted in and provided a WhatsApp-enabled number
- RCS (Rich Communication Services): Enhanced messaging where supported by your device, with automatic fallback to SMS
- Email: For verification, saved search notifications, and direct communication
All messages sent and received through our platform are logged and stored as part of our client relationship management system.
5. Consent Under CASL
In accordance with Canada’s Anti-Spam Legislation (CASL):
- Implied Consent: When you create an account, submit inquiries, or interact with our services, you provide implied consent to receive transactional and service-related communications (e.g., verification codes, login alerts, system notifications)
- Express Consent: We obtain your express consent before sending commercial electronic messages, such as new listing alerts from saved searches. You may opt in or out of these notifications at any time through your saved searches settings on the My Favourites page
- Unsubscribe: Every commercial electronic message includes an unsubscribe mechanism. You can also withdraw consent by modifying your saved search notification settings, deleting your saved searches, or contacting us directly
6. Data Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We use trusted third-party services to operate our platform:
- Twilio Inc. — for SMS, MMS, WhatsApp, and RCS messaging (verification codes and communications)
- Google Workspace / SMTP — for email delivery
- OpenStreetMap / Leaflet — for map display and geolocation services
- IP Geolocation APIs — for approximate location determination from IP addresses
- Legal Requirements: When required by law, regulation, legal process, or governmental request
- Protection of Rights: When necessary to protect our rights, safety, or property, or that of our users or the public
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:
- Account Data: Retained until you request account deletion
- Favourited Listings: Retained until you remove them or delete your account
- Saved Searches: Retained until you delete them or delete your account
- Browsing Activity (views): Retained for analytical and service improvement purposes for up to 2 years
- Communication Logs: SMS, WhatsApp, and other message logs are retained for up to 2 years for customer service and compliance purposes
- Verification Codes: Automatically expire and are deleted after a short validity period
- Listing Revision History: Property listing change history is retained for up to 2 years
8. Data Security
We implement appropriate technical and organizational measures to protect your personal information, including:
- Secure server infrastructure with firewall protection
- SMS-based two-factor authentication for all client accounts
- Automatic session expiry after 3 hours of inactivity
- Encrypted communication channels (HTTPS/TLS) for all data transmission
- Secure storage of credentials and API tokens
- Access controls limiting personal data access to authorized personnel only
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
9. Your Rights Under PIPEDA
As a user in Canada, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct any inaccurate or incomplete personal information
- Deletion: Request that we delete your personal information and account. You may also contact us to have your account and all associated data removed
- Withdraw Consent: Withdraw your consent to the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions
- Complaint: File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated
10. Cookies
We use cookies and similar technologies to:
- Maintain your login session and authentication state
- Remember your search preferences and filter settings
- Improve site performance and user experience
You can control cookies through your browser settings. Disabling cookies may limit your ability to use certain features of our site, such as saving favourites and maintaining a logged-in session.
11. Third-Party Links
Our website may contain links to third-party websites, including social media sharing options (Facebook, Twitter, Pinterest) and external listing services. We are not responsible for the privacy practices of these third-party sites. We encourage you to review their privacy policies independently.
12. Children’s Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information.
13. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy at any time. Changes will be effective immediately upon posting to this page. We will update the “Last Updated” date at the top of this policy. We encourage you to review this page periodically. Continued use of the site after changes constitutes acceptance of the revised policy.
14. Contact Us
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your information is handled, please contact us:
- Email: [email protected]
- Phone: (647) 691-6364
- Mail: 401 Magnetic Drive, Unit 12, Toronto, ON M3J 3H9
You may also contact the Office of the Privacy Commissioner of Canada if you have unresolved privacy concerns.
