This Privacy Policy explains how PropertyHub.ca ("we", "us", "the Site") — operated by Central Home Realty Inc., Brokerage — collects, uses, stores, discloses, and protects your personal information. It applies to everything we do online: this website, our email communications, and the services we offer through them.
We follow the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal privacy law that governs how Canadian organizations handle personal information, as well as the rules of the Real Estate Council of Ontario (RECO) and the Toronto Regional Real Estate Board (TRREB).
1. What we collect
We only collect the information we actually need. The categories below cover everything we touch:
Information you give us
- Contact details — name, email, phone number, when you submit a viewing request, offer, contact form, or sign up for listing alerts.
- Search preferences — neighbourhoods, price range, bedroom count, and other filter criteria you save to a search alert.
- Account credentials — email and (hashed) password if you create a free account to access sold-price data under the VOW Client Agreement.
- Messages — the text content of any note you send Scott through a form on the Site.
Information collected automatically
- Usage data — pages viewed, listings opened, filters applied, time on site. Collected via Google Analytics 4 and Microsoft Clarity (session replay) in aggregate, IP-anonymized form.
- Device data — browser, operating system, screen size, approximate geolocation derived from IP (city-level, never precise GPS).
- Cookies and local storage — small text identifiers used to keep you signed in, remember your map position, store your favourites, and queue lead submissions for retry if you go offline.
Information we do not collect
- We do not collect SIN, date of birth, banking details, credit-card numbers, or government ID.
- We do not pull your credit report.
- We do not buy data about you from third-party brokers.
2. How we use it
We use your information for the specific purpose you provided it for, and for no other purpose without your consent:
- Reply to your inquiry. When you submit a viewing request, offer, or contact form, Scott receives an email with your details and responds personally — usually same day.
- Send the listing alerts you signed up for. Matching new listings are emailed to you on the cadence you chose. You can unsubscribe from any alert email with one click.
- Show you sold prices under VOW. If you accept the VOW Client Agreement, we display TRREB sold and leased data on listings you view.
- Improve the Site. Aggregate, de-identified analytics help us understand which pages and tools are useful.
- Comply with the law. Limited disclosures may be required by court order, regulatory request from RECO or TRREB, or to prevent fraud.
3. Where your data lives
We use a small set of vetted service providers to operate the Site. Each one processes data only on our instructions and only for the purpose listed:
- Cloudflare (United States & global edge) — web hosting, DNS, DDoS protection. Sees: every page request, IP address, browser headers.
- Supabase (United States, AWS us-east-1) — database for listings, buildings, account records, and saved searches. Hosts: your account email, saved-search criteria, VOW consent record.
- Resend (United States) — transactional email delivery for viewing confirmations, alert notifications, and contact replies. Sees: your email address and the message body.
- Mapbox (United States) — map tiles and clustering. Sees: anonymous map-view requests with a tile coordinate. No personal identifier is sent to Mapbox.
- Google Analytics 4 (United States, IP-anonymized) — aggregate site analytics. We do not share your name, email, or any identifier with Google.
- Microsoft Clarity (United States) — anonymous session replay used to fix usability bugs. Form fields you type into are automatically masked before recording.
Some of these providers store data in the United States. By using the Site, you understand that your data may be transferred outside Canada for processing, where it remains subject to the protections of the applicable provider's terms and U.S. law.
4. MLS® listing data
Active listings shown on the Site come from the TRREB PropTx IDX feed under licence. We display this data; we do not own it. Photos remain the copyright of the listing brokerage and the original photographer. We do not collect personal information about listing sellers or buyers beyond what TRREB publishes in the public feed.
Sold and leased prices are served separately under TRREB's Virtual Office Website (VOW) rules and require a signed VOW Client Agreement before display. See our VOW Client Agreement page for the full terms.
5. Cookies and tracking
We use the minimum cookies needed to make the Site work, plus aggregate analytics:
- Essential cookies (always on): session token, sign-in state, VOW consent record, favourite-listings list, map-view position. Without these, core features break.
- Analytics cookies (Google Analytics 4, Microsoft Clarity): anonymous usage measurement.
We do not run advertising trackers, retargeting pixels, or third-party ad networks on the Site. You can disable cookies in your browser settings, but sign-in and favourites will stop working.
6. How long we keep it
- Lead and contact-form submissions — retained in Scott's inbox indefinitely so we can serve you over the lifetime of your home search and any future transactions. You can request deletion at any time.
- Account records — retained until you delete your account. After deletion, basic VOW consent records are retained for 3 years per TRREB compliance requirements.
- Listing alerts — retained until you unsubscribe or pause the alert.
- Analytics data — Google Analytics 4 default retention (14 months), Microsoft Clarity (30 days).
7. Your rights
Under PIPEDA you have the right to:
- Access — ask what personal information we hold about you and receive a copy.
- Correct — ask us to update inaccurate information.
- Delete — ask us to delete your information (subject to the retention limits above for regulated records).
- Withdraw consent — opt out of marketing emails, alerts, or further communications at any time.
- Complain — raise a concern with the Office of the Privacy Commissioner of Canada at priv.gc.ca.
To exercise any of these rights, email Scott at [email protected] with the subject line Privacy request. We respond within 30 days as required by PIPEDA.
8. Security
We protect your data using:
- HTTPS/TLS encryption in transit across the entire Site.
- Encryption at rest for all data stored in Supabase.
- Row-level security policies limiting which records each account can access.
- Two-factor authentication on the brokerage's email accounts.
- Cloudflare WAF and rate-limiting against bot traffic and abuse.
No system is perfectly secure. If we ever experience a breach affecting your personal information, we will notify you within 72 hours per PIPEDA breach-notification requirements.
9. Children
The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, please email [email protected] and we will delete it.
10. CASL — email consent
Under Canada's Anti-Spam Legislation (CASL), we send commercial email (alerts, the monthly Toronto house update) only with your express consent. We use double opt-in: you confirm your email address by clicking a link in a verification message before we add you to any list. Every email we send includes a one-click unsubscribe link in the footer.
11. Changes to this policy
If we make a material change to how we handle your data, we'll update the "Last updated" date at the top of this page and, where the change reduces your privacy in a meaningful way, email registered account holders in advance.
12. Contact
Privacy questions, access requests, or complaints:
Scott Miralami — Broker, Privacy Officer
Central Home Realty Inc., Brokerage
Email: [email protected]