This Privacy Policy explains how CondoGo.ca ("we", "us", "the Site") — operated by Central Home Realty Inc., Brokerage — collects, uses, stores, discloses, and protects your personal information. It applies to everything we do online: this website, our email communications, and the services we offer through them.
We follow the Personal Information Protection and Electronic Documents Act (PIPEDA), the federal privacy law that governs how Canadian organizations handle personal information; Quebec's Act respecting the protection of personal information in the private sector (Law 25) for Quebec residents; and the rules of the Real Estate Council of Ontario (RECO) and the Toronto Regional Real Estate Board (TRREB).
1. What we collect
We only collect the information we actually need. The categories below cover everything we touch:
Information you give us
- Contact details — name, email, phone number, when you submit a viewing request, offer, contact form, or sign up for listing alerts.
- Search preferences — neighbourhoods, price range, bedroom count, and other filter criteria you save to a search alert.
- Account credentials — email and (hashed) password if you create a free account to access sold-price data under the VOW Client Agreement.
- Messages — the text content of any note you send Scott through a form on the Site.
Information collected automatically
- Usage data — pages viewed, listings opened, filters applied, time on site. Collected via Google Analytics 4 and Microsoft Clarity (session replay) in aggregate, IP-anonymized form, managed through Google Tag Manager. These load only after you grant analytics consent in our cookie banner.
- On-site activity (our own measurement) — if you grant analytics consent, our site records how you use it: pages and listings viewed, time spent and how far you scroll, photo-gallery use, searches, filters, sorting and map actions (pan, zoom, pin taps, drawn areas), saved listings and alerts, calculator and estimate use, form starts, abandons and submissions, button clicks (such as Request a viewing), links that leave the site, and technical errors. Each record carries a random anonymous visitor ID (a cookie,
condogo_aid, kept up to one year) and a session ID, plus device type, screen size, language, the page you came from, any campaign parameters, and the IP address and browser of the session. If you are signed in, or you send us an enquiry, we link this activity to your account or enquiry so we can follow up with relevant information. We do not use fingerprinting, we do not put your name, email address or phone number inside activity records, and we ignore automated traffic. Nothing is recorded until you accept analytics; you can withdraw consent at any time under “Cookie Preferences” in the footer. - Share links — when you use Share, copy link, text message, WhatsApp or email on a listing or building, the link we create ends in a random share code (for example
?s=k3x9m2pq). The code contains no personal information. If you have accepted analytics, we record that a share happened (the listing or page, how it was shared, and the code, with your anonymous visitor ID, or your account if you are signed in) so we can see which listings people share. When someone opens a shared link and has accepted analytics, that visit — and any enquiry they later make — is counted against the share code, which lets us credit the link to the visitor who shared it. We do not ask for the recipient’s contact details, we do not track recipients beyond their own anonymous ID, and links with a share code are kept out of search engines. - Advertising & campaign data — if you grant advertising consent, Google Ads, the Meta (Facebook/Instagram) Pixel, and the LinkedIn Insight Tag measure which ad brought you here and let us show you relevant CondoGo ads. We also read campaign parameters in the link you arrived from (utm_source, utm_medium, utm_campaign, and the Google/Meta click identifiers gclid/fbclid) for attribution.
- Device data — browser, operating system, screen size, approximate geolocation derived from IP (city-level, never precise GPS).
- Cookies and local storage — small text identifiers used to keep you signed in, remember your map position, store your favourites, record your cookie choices, and queue lead submissions for retry if you go offline.
Information we do not collect
- We do not collect SIN, date of birth, banking details, credit-card numbers, or government ID.
- We do not pull your credit report.
- We do not buy data about you from third-party brokers.
2. How we use it
We use your information for the specific purpose you provided it for, and for no other purpose without your consent:
- Reply to your inquiry. When you submit a viewing request, offer, or contact form, Scott receives an email with your details and responds personally.
- Send the listing alerts you signed up for. Matching new listings are emailed to you on the cadence you chose. You can unsubscribe from any alert email with one click.
- Show you sold prices under VOW. If you accept the VOW Client Agreement, we display TRREB sold and leased data on listings you view.
- Improve the Site. Aggregate, de-identified analytics help us understand which pages and tools are useful.
- Comply with the law. Limited disclosures may be required by court order, regulatory request from RECO or TRREB, or to prevent fraud.
3. Where your data lives
We use a small set of vetted service providers to operate the Site. Each one processes data only on our instructions and only for the purpose listed:
- Cloudflare (United States & global edge) — web hosting, DNS, DDoS protection. Sees: every page request, IP address, browser headers.
- Supabase (United States, AWS us-east-1) — database for listings, buildings, account records, and saved searches. Hosts: your account email, saved-search criteria, VOW consent record.
- Resend (United States) — transactional email delivery for viewing confirmations, alert notifications, and contact replies. Sees: your email address and the message body.
- Mapbox (United States) — map tiles and clustering. Sees: anonymous map-view requests with a tile coordinate. No personal identifier is sent to Mapbox.
- Google Tag Manager (United States) — tag-management container that loads our analytics and advertising tags subject to your cookie choices. It does not, by itself, set tracking cookies.
- Google Analytics 4 (United States, IP-anonymized) — aggregate site analytics. We do not share your name, email, or any identifier with Google. Loads only with analytics consent.
- Microsoft Clarity (United States) — anonymous session replay used to fix usability bugs. Form fields you type into are automatically masked before recording. Loads only with analytics consent.
- Google Ads (United States) — conversion measurement and remarketing for our paid-search campaigns. Loads only with advertising consent.
- Meta Pixel — Meta Platforms, Inc. (United States) — conversion measurement and audience building for Facebook/Instagram campaigns. Loads only with advertising consent.
- LinkedIn Insight Tag — LinkedIn Corporation (United States) — conversion measurement for LinkedIn campaigns. Loads only with advertising consent.
Some of these providers store data in the United States. By using the Site, you understand that your data may be transferred outside Canada for processing, where it remains subject to the protections of the applicable provider's terms and U.S. law.
Beyond these providers, the Site may link out to third-party websites — for example, a partner mortgage broker, a government resource, or a map provider. Once you follow such a link, you leave the Site, and we don't control and aren't responsible for the content or privacy practices of those external sites. Review their own privacy policies before sharing information with them.
4. MLS® listing data
Active listings shown on the Site come from the TRREB PropTx IDX feed under licence. We display this data; we do not own it. Photos remain the copyright of the listing brokerage and the original photographer. We do not collect personal information about listing sellers or buyers beyond what TRREB publishes in the public feed.
Sold and leased prices are served separately under TRREB's Virtual Office Website (VOW) rules and require a signed VOW Client Agreement before display. See our VOW Client Agreement page for the full terms.
We never feed MLS® data into artificial-intelligence or machine-learning systems. MLS® listing, sold, and leased data is used only to display properties to you on the Site under our TRREB licence — it is never used to train, fine-tune, or supply any AI or large-language model, and our AI-powered search features build queries from your words without ever sending MLS® records to a third-party AI service. This is a condition of our TRREB IDX/VOW data licence.
5. Cookies and tracking
The first time you visit, a cookie banner lets you accept or reject optional cookies by category. Nothing in the optional categories loads until you choose — this is enforced with Google Consent Mode, so no analytics or advertising cookie is set before you opt in. The three categories are:
- Strictly necessary (always on): session token, sign-in state, VOW consent record, favourite-listings list, map-view position, and the cookie that remembers your consent choice. Without these, core features break.
- Analytics (Google Analytics 4, Microsoft Clarity): anonymous, aggregate usage measurement. Off until you accept.
- Advertising (Google Ads, Meta Pixel, LinkedIn Insight Tag): conversion measurement and remarketing for our paid campaigns. Off until you accept.
You can change your choices at any time using the "Cookie Preferences" link in the footer, or withdraw advertising consent with the "Do Not Sell or Share My Personal Information" link. Your choice is stored for one year. You can also disable cookies in your browser settings, but sign-in and favourites will stop working.
6. How long we keep it
- Lead and contact-form submissions — retained in Scott's inbox indefinitely so we can serve you over the lifetime of your home search and any future transactions. You can request deletion at any time.
- Account records — retained until you delete your account. After deletion, basic VOW consent records are retained for 3 years per TRREB compliance requirements.
- Listing alerts — retained until you unsubscribe or pause the alert.
- Analytics data — Google Analytics 4 default retention (14 months), Microsoft Clarity (30 days).
7. Your rights
Under PIPEDA you have the right to:
- Access — ask what personal information we hold about you and receive a copy.
- Correct — ask us to update inaccurate information.
- Delete — ask us to delete your information (subject to the retention limits above for regulated records).
- Portability — receive the computerized personal information you provided to us in a structured, commonly used technological format (a right expressly granted under Quebec's Law 25).
- Withdraw consent — opt out of marketing emails, alerts, analytics, advertising, or further communications at any time, including via the cookie controls described in section 5.
- Complain — raise a concern with the Office of the Privacy Commissioner of Canada at priv.gc.ca, or, if you are a Quebec resident, the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.
To exercise any of these rights, email Scott at info@condogo.ca with the subject line Privacy request. We respond within 30 days as required by PIPEDA (and Law 25).
Quebec Law 25 — Do Not Sell or Share
We do not sell your personal information to data brokers, and we never have. "Selling or sharing" in the advertising sense can include letting ad platforms use cookie identifiers to build audiences. You can refuse this entirely: choose Reject All on the cookie banner, toggle Advertising off under "Cookie Preferences", or use the "Do Not Sell or Share My Personal Information" link in the footer. Quebec residents may also designate someone to exercise these rights on their behalf and, where automated decision-making is ever used, request human review — we currently make no automated decisions that produce legal or similarly significant effects about you. Our designated person responsible for the protection of personal information (Privacy Officer under Law 25) is named in section 12.
8. Security
We protect your data using:
- HTTPS/TLS encryption in transit across the entire Site.
- Encryption at rest for all data stored in Supabase.
- Row-level security policies limiting which records each account can access.
- Two-factor authentication on the brokerage's email accounts.
- Cloudflare WAF and rate-limiting against bot traffic and abuse.
No system is perfectly secure. If we ever experience a breach affecting your personal information, we will notify you within 72 hours per PIPEDA breach-notification requirements.
9. Children
The Site is intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has submitted information to us, please email info@condogo.ca and we will delete it.
10. CASL — email consent
Under Canada's Anti-Spam Legislation (CASL), we send commercial email (alerts, the monthly Toronto condo update) only with your express consent. We use double opt-in: you confirm your email address by clicking a link in a verification message before we add you to any list. Every email we send includes a one-click unsubscribe link in the footer.
11. Changes to this policy
If we make a material change to how we handle your data, we'll update the "Last updated" date at the top of this page and, where the change reduces your privacy in a meaningful way, email registered account holders in advance.
12. Contact
Privacy questions, access requests, or complaints:
Scott Miralami — Broker, Privacy Officer
Central Home Realty Inc., Brokerage
Email: info@condogo.ca