PRIVACY POLICY AND PERSONAL INFORMATION HANDLING

Last updated: August 2, 2026

1. Introduction

Diana Puerta and Puerta Real Estate Inc., collectively referred to in this Privacy Policy as “Diana Puerta Real Estate,” “we,” “us,” or “our,” respect the privacy of individuals who visit dianapuertarealestate.com, communicate with us, or request our real estate services.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when an individual:

  • Visits our website.

  • Completes a form.

  • Requests an appointment or consultation.

  • Communicates with us by telephone, email, SMS, or WhatsApp.

  • Registers for a seminar, event, or activity.

  • Requests information about buying, selling, renting, or investing in real estate.

  • Voluntarily subscribes to informational or promotional communications.

  • Interacts with our advertisements, social media accounts, or digital services.

This policy has been prepared with consideration for Canadian privacy legislation, including the Personal Information Protection and Electronic Documents Act, commonly known as PIPEDA.

2. Accountability for Personal Information

The person responsible for overseeing privacy practices relating to this website is:

Diana Puerta
Real Estate Broker
Puerta Real Estate Inc.
4040 Steeles Avenue West, Unit 44, Boardroom 8
Vaughan, Ontario, L4L 4Y5
Canada

Telephone: (416) 890-8328
Email: rebrokerdp@gmail.com

Privacy-related inquiries may be submitted with the subject line: Privacy Request.

3. What Is Personal Information?

Personal information means information about an identified individual or information through which an individual may be identified, directly or indirectly.

Depending on how an individual interacts with us, we may collect the following categories of information.

3.1 Identity and Contact Information

  • First and last name.

  • Email address.

  • Telephone number.

  • Mailing address.

  • City, province, or area of residence.

  • Preferred language.

3.2 Real Estate Service Information

  • Interest in buying, selling, renting, or investing.

  • Type of property of interest.

  • Preferred location or geographic area.

  • Approximate price range or budget.

  • Expected transaction timeline.

  • Desired property features.

  • Address of a property the individual wishes to sell or have evaluated.

  • General information related to a move or relocation.

  • Information voluntarily included in forms, messages, or inquiries.

We do not request highly sensitive financial information, passwords, complete credit card numbers, complete bank account numbers, or government identification numbers through public website forms.

Where a real estate transaction requires additional information, it may be collected through separate, secure, and authorized processes involving the applicable brokerage.

3.3 Appointment, Seminar, and Event Information

When an individual requests an appointment or registers for an event, we may collect:

  • Name.

  • Email address.

  • Telephone number.

  • Number of attendees.

  • Preferred date and time.

  • Real estate interests.

  • Information required to administer registration or participation.

3.4 Technical and Website Usage Information

When an individual visits the website, certain information may be collected automatically through cookies, server logs, and similar technologies, including:

  • Internet Protocol or IP address.

  • Browser type.

  • Device type.

  • Operating system.

  • Browser language.

  • Date and time of access.

  • Pages viewed.

  • Approximate time spent on the website.

  • Referring website, advertisement, or campaign.

  • Interactions with buttons, forms, and links.

  • Identifiers associated with cookies or similar technologies.

  • Approximate geographic location derived from an IP address.

Further information about cookies and tracking technologies is provided in our Cookie Policy.

3.5 Communications

We may retain the content and related information associated with communications submitted through:

  • Website forms.

  • Email.

  • Telephone.

  • SMS.

  • WhatsApp.

  • Appointment platforms.

  • Social media.

  • Advertising lead forms.

4. How We Collect Information

We may collect personal information in the following ways.

4.1 Directly From the Individual

For example, when the individual:

  • Completes a form.

  • Requests a property evaluation or consultation.

  • Registers for an event.

  • Schedules an appointment.

  • Communicates by email, telephone, or WhatsApp.

  • Provides information during a conversation or meeting.

  • Subscribes to communications.

  • Enters into a professional real estate relationship.

4.2 Automatically

Through:

  • Cookies.

  • Server logs.

  • Analytics tools.

  • Advertising pixels and conversion tags.

  • Forms and security systems.

  • Technologies integrated with WordPress.

4.3 From Third Parties

We may receive information from:

  • The brokerage with which Diana Puerta is registered.

  • Real estate platforms and listing systems.

  • Form or appointment providers.

  • Advertising platforms.

  • Social media platforms.

  • Event service providers.

  • Individuals who refer a potential client.

  • Professionals participating in a transaction, where authorized or legally permitted.

When an individual provides personal information about another person, the individual providing it represents that they are authorized to do so.

5. Purposes for Which We Use Information

We may collect and use personal information to:

  • Respond to inquiries and requests.

  • Schedule calls, appointments, or meetings.

  • Provide information about buying, selling, renting, or investing in real estate.

  • Prepare preliminary property-related inquiries or estimates.

  • Identify properties that may meet an individual’s criteria.

  • Follow up with prospective buyers, sellers, landlords, or tenants.

  • Facilitate the provision of real estate services.

  • Administer registrations for seminars, events, or activities.

  • Send confirmations, reminders, and operational communications.

  • Maintain professional and business records.

  • Comply with legal, regulatory, and professional obligations.

  • Protect the security of the website.

  • Prevent fraud, misuse, spam, or malicious activity.

  • Analyze and improve website operation.

  • Measure the effectiveness of advertising campaigns.

  • Personalize content or advertising where appropriate consent has been obtained.

  • Address inquiries, complaints, or disputes.

  • Send commercial communications where consent exists or the law otherwise permits.

We will not use personal information for a materially different purpose without informing the individual and obtaining additional consent where required.

6. Consent

By voluntarily providing personal information, an individual authorizes its collection, use, and disclosure for the purposes identified at the time of collection and described in this policy.

The appropriate form of consent may depend on:

  • The sensitivity of the information.

  • The purpose for which it is requested.

  • The individual’s reasonable expectations.

  • The existing professional or commercial relationship.

  • Applicable legal requirements.

Where express consent is required, we may request it through:

  • A checkbox.

  • A signature.

  • Written confirmation.

  • An affirmative action within a form.

  • Documented verbal authorization.

  • A preference setting.

Consent for marketing must remain separate from consent required to respond to an inquiry or provide a requested service.

7. Withdrawal of Consent

An individual may withdraw consent for certain future uses of personal information, subject to legal, regulatory, contractual, or professional restrictions.

A request to withdraw consent may be submitted to:

rebrokerdp@gmail.com

Withdrawal does not affect processing that lawfully occurred before we received the request.

In some circumstances, withdrawing consent may prevent us from continuing to provide a requested service. Where applicable, we will explain the consequences of the request.

8. Commercial Electronic Communications

We will send newsletters, promotions, event invitations, real estate updates, or other commercial electronic communications only where:

  • The individual has provided consent.

  • An existing relationship permits the communication under applicable law.

  • The communication is otherwise permitted or required by law.

Commercial communications will identify the sender and include a reasonable method to unsubscribe.

An individual may unsubscribe by:

  • Using the unsubscribe link contained in the message.

  • Replying with a request to stop receiving messages.

  • Contacting rebrokerdp@gmail.com

We may continue sending communications necessary to answer an inquiry, administer an appointment, provide services, or meet legal obligations even after the individual has unsubscribed from promotional communications.

9. Disclosure of Information to Third Parties

We do not sell or rent personal information.

We may disclose personal information where reasonably necessary to the following categories of recipients.

9.1 Brokerage and Real Estate Professionals

We may share information with the brokerage that employs or authorizes Diana Puerta and with its representatives, administrators, or service providers where necessary to manage inquiries or provide real estate services.

9.2 Service Providers

We may use providers offering:

  • Website hosting.

  • WordPress administration.

  • Email services.

  • Website forms.

  • Customer relationship management or CRM systems.

  • Appointment scheduling.

  • Data storage and backups.

  • Website analytics.

  • Digital advertising.

  • Spam prevention.

  • Information security.

  • Video conferencing.

  • Messaging and communications.

  • Event registration and administration.

  • Technical support.

These providers should process the information only as required to provide their contracted services and in accordance with applicable obligations.

9.3 Professionals Connected With a Transaction

With the individual’s authorization or where otherwise necessary, information may be shared with:

  • Lawyers.

  • Lenders or mortgage professionals.

  • Home inspectors.

  • Appraisers.

  • Photographers and real estate marketing providers.

  • Condominium managers.

  • Other brokerages or real estate agents.

  • Service providers involved in a real estate transaction.

Each professional may be independently responsible for their own privacy practices.

9.4 Authorities and Legal Obligations

We may disclose information where we reasonably believe it is necessary to:

  • Comply with a law, court order, or legal demand.

  • Cooperate with a regulatory authority.

  • Prevent or investigate fraud or illegal activity.

  • Protect rights, safety, or property.

  • Manage a claim or legal proceeding.

  • Meet requirements imposed by the brokerage, RECO, or another competent authority.

9.5 Business Transactions

If the business is reorganized, sold, transferred, or otherwise changes structure, personal information may be transferred as part of the transaction, subject to reasonable confidentiality and limited-use protections.

10. Third-Party Platforms and Services

The website may contain links, buttons, or embedded content from third parties, including, where enabled:

  • Google.

  • Google Analytics.

  • Google Ads.

  • Google Maps.

  • YouTube.

  • Meta, Facebook, and Instagram.

  • WhatsApp.

  • Appointment platforms.

  • Real estate platforms.

  • Spam-protection services.

  • Social media services.

Interacting with these services may allow the third party to collect information directly from the visitor in accordance with its own privacy policy.

We do not control the independent privacy practices of third parties. Individuals should review the relevant policies before providing information or using those services.

11. Cookies and Similar Technologies

We use or may use cookies and similar technologies to:

  • Operate essential website functions.

  • Remember preferences.

  • Protect forms.

  • Analyze traffic and performance.

  • Understand how visitors reach the website.

  • Measure conversions.

  • Improve content.

  • Display or measure advertising where consent has been obtained.

Where applicable, non-essential cookies will be subject to the preferences selected through our consent banner.

For information about cookie categories, retention periods, and changing preferences, please review our Cookie Policy.

12. Processing and Storage Outside Canada

Some service providers may store or process information on servers located outside Canada, including in the United States or other countries.

When information is processed in another jurisdiction, it may be subject to that country’s laws and may be accessible to courts, government authorities, or law-enforcement agencies in accordance with local law.

We take reasonable steps when selecting providers and protecting information under our control. However, we cannot guarantee that all information will remain exclusively within Canada.

13. Retention of Information

We retain personal information only for as long as reasonably necessary to:

  • Fulfil the purpose for which it was collected.

  • Follow up on an inquiry.

  • Provide services.

  • Maintain professional records.

  • Meet legal, tax, regulatory, or brokerage obligations.

  • Resolve disputes.

  • Prevent fraud.

  • Enforce agreements.

The applicable retention period depends on the nature of the information and the context in which it was collected.

When information is no longer required, we take reasonable steps to:

  • Delete it.

  • Securely destroy it.

  • Anonymize it.

  • Restrict its use.

Residual copies may remain temporarily within backup systems until deleted under normal retention cycles.

14. Security

We use reasonable administrative, technical, and physical safeguards to protect information against:

  • Loss.

  • Theft.

  • Unauthorized access.

  • Misuse.

  • Alteration.

  • Disclosure.

  • Unauthorized copying or destruction.

Safeguards may include:

  • Restricted access.

  • Passwords and authentication.

  • Security certificates.

  • Software updates.

  • Backups.

  • Spam and malware protection.

  • Provider access controls.

  • Internal procedures and training.

No electronic transmission or storage system can guarantee absolute security. Individuals should not submit highly sensitive financial or identification information through public website forms.

15. Security Incidents

If an incident involving personal information occurs, we will assess its potential consequences and take reasonable steps to contain, investigate, and mitigate the incident.

Where required by applicable law, we will notify:

  • Affected individuals.

  • The appropriate privacy authority.

  • Other organizations that may be able to reduce the risk of harm.

We will also maintain records of incidents where legally required.

16. Accuracy of Information

We take reasonable steps to ensure that personal information used by us is accurate, complete, and current for the purposes for which it is used.

An individual may request a correction or update by contacting:

rebrokerdp@gmail.com

17. Access to Personal Information

An individual may request information regarding:

  • The existence of personal information under our control.

  • How the information has been used.

  • The parties to whom it has been disclosed.

  • Access to the information.

  • Correction of inaccurate or incomplete information.

Requests must be submitted in writing to rebrokerdp@gmail.com and must include sufficient information to identify the requester and locate the relevant records.

We may request reasonable identity verification before releasing information.

Access may be subject to legal exceptions, including information protected by legal privilege, confidential commercial information, or the personal information of another person.

Where we cannot fully or partially fulfil a request, we will explain the reason unless the law restricts us from doing so.

18. Deletion Requests

An individual may request the deletion of their personal information.

We will assess each request in light of:

  • Legal and regulatory obligations.

  • Brokerage retention requirements.

  • An existing relationship or transaction.

  • The need to retain records to defend claims.

  • Backup systems.

  • Other lawful and legitimate retention requirements.

Where no valid obligation or need to retain the information exists, we will take reasonable steps to delete, anonymize, or restrict its use.

19. Children’s Privacy

This website and the real estate services offered through it are not directed to children.

We do not knowingly collect personal information from a minor without the authorization of a parent or guardian where such authorization is required.

If we discover that information relating to a minor was collected without appropriate authorization, we will take reasonable steps to delete it.

20. External Links

The website may contain links to websites operated by third parties.

We are not responsible for:

  • The content of those websites.

  • Their security measures.

  • Their cookies.

  • Their privacy policies.

  • The manner in which they collect or use information.

This Privacy Policy applies only to information under our control.

21. Changes to This Policy

We may update this Privacy Policy to reflect:

  • Changes in law or regulation.

  • New tools or service providers.

  • Changes to our services.

  • Changes to our information practices.

  • Security improvements.

The updated version will be posted on this page with a revised date.

Where a change is material, we may provide an additional website notice or request renewed consent where required.

22. Questions and Complaints

To ask a question, request access or correction, withdraw consent, or submit a complaint regarding our privacy practices, please contact:

Privacy Officer: Diana Puerta
Puerta Real Estate Inc.
4040 Steeles Avenue West, Unit 44, Boardroom 8
Vaughan, Ontario, L4L 4Y5
Canada

Telephone: (416) 890-8328
Email: rebrokerdp@gmail.com

We will investigate complaints and respond within a reasonable period.

If an individual believes that their concern has not been resolved, they may contact the Office of the Privacy Commissioner of Canada or another applicable authority.

23. Languages

This Privacy Policy is available in English and Spanish.

Both versions are intended to communicate the same privacy practices. If an interpretation issue arises, the version enforceable under the laws of Ontario and Canada will apply.

24. Acknowledgement

By using this website or providing personal information after having an opportunity to review this policy, the individual acknowledges that they have been informed of our privacy practices.

Where express consent is required by law, use of the website alone will not replace the specific authorization requested.