Important Note for our Clients’ customers, including tenant applicants, and tenants, whether prospective, current or former ("End Users"):

Entrata, Inc. and its affiliates (collectively, "Entrata", "we", "us," "our") provide its Platforms for use by our business clients (“Clients”), which are typically residential and commercial real estate property managers and property owners. Our Clients use our Platforms for many purposes, such as to manage the leasing lifecycle, and to facilitate communication with their End Users. Entrata typically has no direct relationship with the End Users; we only process and store the End Users’ personal data ("Client Data") on our Clients’ behalf, as their service provider (i.e., data processor), while the Clients are responsible for the processing (i.e., data controllers). Any use of Client Data by us is carried out pursuant to our Client’s instructions (and/or our applicable Terms of Service) in place between Entrata and our Client.

If you, as an End User, have any questions or concerns about the data handling practices of one of our Clients using our Platforms to process and store your personal data, please contact the relevant Client directly. Our ProspectPortal Platform permits our Clients to create their own websites, which facilitate communication and transactions between prospective and current tenants. While these websites are built using our Platforms, and Client Data obtained through these websites are stored on our systems, such Client Data is governed by our Clients’ privacy notices/policies.

This Privacy Policy only governs our processing of Personal Data that is covered by the EU General Data Protection Regulation (GDPR). This may be the case if you are an individual located in the EU, or when one of our affiliates located in the EU is responsible for the processing of your Personal Data. To access our privacy policies in other regions, please click here.

Entrata is committed to protecting individuals’ privacy. It is important to us that we provide transparency regarding our collection, use, and disclosure of Personal Data.

"Personal Data" is data that identifies you as an individual or relates to an identifiable individual. This Privacy Policy describes our processing practices of Personal Data that we collect and use in connection with:

1. Our suite of products and services made available to our customers in the European Union (“EU”) by us for use on or through computers and mobile devices (collectively, the “Platforms”).
2. Websites operated by us relating to the Platforms which link to this Privacy Policy (“Entrata Sites”).
3. Our social media pages relating to the Platforms from which you are accessing this Privacy Policy (collectively, our “Social Media Pages”).
4. Offline business interactions that you have with us about the Platforms.
5. HTML-formatted email messages that we send to you that link to this Privacy Policy or other communications with you.

Collectively, we refer to the Platforms, the Entrata Sites, the Social Media Pages, the offline business interactions, and emails as the "Services").

1. What Does This Privacy Policy Apply to?

This Privacy Policy describes how we use, share, and protect the Personal Data of individuals who use the Services. It also describes your rights and choices regarding your Personal Data.

Our Services may contain links to other third-party websites. This Privacy Policy does not address, and we are not responsible for, the privacy, information, or other practices of any third parties, including any third party operating any website or service to which the Services link. The inclusion of a link on the Services does not imply endorsement of the linked site or service by us or by our affiliates. The information practices and content of such third-party websites are governed by their own privacy policies. We encourage you to review the privacy policies of such third-party websites to understand their information practices.

In addition, we are not responsible for the data collection, use, disclosure, or security policies or practices of other organizations, such as Meta, Apple, or Microsoft, or any other social media platform provider, operating system provider, or device manufacturer, including with respect to any Personal Data you disclose to other organizations through or in connection with the Platforms or our Social Media Pages.

2. Which Categories of Personal Data Do We Process?

We collect Personal Data in various ways, including through our Services and from other sources, as set out in the grids below.

We need to collect certain Personal Data in order to provide the requested Services to you. If you do not provide the data requested, we may not be able to provide the Services. We will note which Personal Data is required to provide the Services at the time of its collection.

If you disclose any Personal Data relating to other people to us, you represent that you have the authority to do so and to permit us to use the information in accordance with this Privacy Policy.

Personal Data we receive directly from you

‍

Personal Data we collect through your use of our Services or from other sources

‍

3. Why Do We Collect Personal Data?

We use your Personal Data for legitimate business purposes as described in the grids below. Entrata does not use personal data for purposes that are materially different to the purposes for which they were originally collected. If these purposes change in the future, we will provide you with relevant notice and the option to opt-out of this use where so required by applicable law.

Making our Services available to you

‍

Events, Programs and Visits

‍

Marketing and engagement

‍

Personalization and improving our Services

‍

Security and legal reasons

‍

• For more information on our legal obligations, please see section ‘Other Disclosures’ below.

** For more information on disclosure of Personal Information in connection with a sale or business transaction, please see ‘Other Disclosures’ below.

‍Other Disclosures

‍We also disclose your Personal Data as necessary or appropriate, in particular when we have a legal obligation or legitimate interest to do so, as set out in further detail below.

‍

4. Which Recipients Receive Personal Data?

‍

5. Use of Services by Children

The Services are not directed to individuals under the age of sixteen (16), and we do not knowingly collect Personal Data from individuals under the age of sixteen (16). If you believe that we may have collected personal data from or about a child under the age of sixteen (16), please send an email to dataprivacy@entrata.com with the subject line "Personal Data of a Minor".

6. How Do We Protect Your Personal Data?

We seek to use reasonable organizational, technical, and administrative measures to protect Personal Data within our organization. Unfortunately, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with Section 12 below.

7. Transfers outside of the EEA

Your Personal Data may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you understand that your Personal Data will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.

Where this will involve transferring your Personal Data outside the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

1. Adequacy Decisions: Some non-EEA countries are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these countries is available here.
2. Standard Contractual Clauses: For transfers of Personal Data from the EEA to countries which are not considered adequate by the European Commission, we have put in place standard contractual clauses adopted by the European Commission to protect your Personal Data. You may obtain a copy of these measures by contacting us in accordance with Section 12 below.

8. Retaining Your Personal Data

We retain Personal Data for as long as necessary to fulfill the purpose(s) for which they were obtained unless a longer retention period is required or permitted by law, for example, for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

The criteria used to determine our retention periods include:

1. The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);
2. Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for a certain period of time before we can delete them); or
3. Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Where a legal obligation arises or retention is advisable in light of our legal position, in some circumstances, we will retain certain Personal Data, even after your account has been deleted and/or we no longer provide the Services to you; for example:

1. To cooperate with law enforcement or public, regulatory, and government authorities: If we receive a preservation order or search warrant, related to your Services account, we will preserve Personal Data subject to such order or warrant after you delete your Services account.
2. To comply with legal provisions on tax and accounting: We may retain your Personal Data, such as Billing Information, Relationship History, and/or Transaction Information for up to 10 years after you delete your Services account, as required by tax law and to comply with bookkeeping requirements.
3. To pursue or defend a legal action: We may retain relevant Personal Data in the event of a legal claim or complaint, including regulatory investigations or legal proceedings about a claim related to your Personal Data, or if we reasonably believe there is a prospect of litigation (whether in respect of our relationship with you or otherwise) for up to 10 years after the dispute has been settled or decided by a court or tribunal from which there is no further right of appeal.

In some circumstances we will anonymize Personal Data (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

9. Your Individual Rights

You have the right to access, correct, change, delete, restrict your Personal Data, exercise your right to data portability, object to or opt out of the processing of Personal Data or withdraw your consent (which will not affect the lawfulness of processing prior to the withdrawal) to the extent these rights are provided to you by applicable law.

1. You can elect not to receive marketing communications by changing your preferences in your account, by following the unsubscribe instructions in each communication, or by contacting us at dataprivacy@entrata.com. Please note that if you opt out of receiving marketing related emails from us, we may still send you important administrative messages (such as changes to our Terms of Use or privacy practices), from which you cannot opt out.
2. If you would prefer that we discontinue sharing your Personal Data on a going-forward basis with our affiliates for their direct marketing purposes, you may opt out of this sharing by contacting us at dataprivacy@entrata.com.

You can exercise your rights by contacting us directly with your request at dataprivacy@entrata.com with the subject line "Exercise of EU Data Subject Right". We will respond to your request consistent with applicable law.

You may also lodge a complaint with an EU/EEA data protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of data protection authorities is available here.

Please note that we are not responsible for handling any End User individual rights requests, because the relevant Client is the data controller of the End User’s Personal Data. As an End User, you can exercise your rights by contacting the respective Client with whom you have a direct relationship. For more information, please refer to the note at the top of the page, marked " Important to Note for our Clients’ customers, including tenant applicants, and tenants, whether prospective, current or former ("End Users")".

10. Sensitive Information

Unless we request it, we ask that you not send us, and you not disclose, any sensitive Personal Data (e.g., social security numbers, information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background, or trade union membership) on or through the Services or otherwise to us.

11. Updates to this Privacy Policy

It is our policy to post any changes we make to our Privacy Policy on this page, with a notice that it has been updated on our main homepage. The date that this Privacy Policy was last revised is listed at the top of this page. Any changes will become effective when we post the revised Privacy Policy on the Platforms or the Entrata Sites.

12. Contacting Us

If you have any questions or complaints related to our practices under this Privacy Policy, please feel free to contact us at dataprivacy@entrata.com. Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.

Entrata, Inc. (a US company located at 4205 Chapel Ridge Road, Lehi, UT 84043) is the company responsible (i.e., the data controller) for the processing of Personal Data covered by this Privacy Policy and can be contacted at dataprivacy@entrata.com.

‍

Entrata Canada, Inc. (collectively, "Entrata", "we", "our") pride ourselves on our privacy practices. We are committed to being transparent about the personal information we collect, the manner in which such personal information is used by us and the limited circumstances in which some personal information may be disclosed. To help us meet this commitment to you, we have created this Privacy Policy (this "Privacy Policy") and have appointed a Privacy Officer to ensure that any personal information you provide to us through our websites and our other online platforms, including our ResidentPortal™ or ProspectPortal® websites (collectively, the "Platforms"), will only be collected, used and disclosed in accordance with this Privacy Policy.

Our Privacy Officer can be reached at: dataprivacy@entrata.com

This Privacy Policy describes how we collect, use, share and secure the personal information you provide. It also describes your choices regarding use, access and correction of your personal information. References to "user", "you" and "your" throughout this Privacy Policy are to you as a user of the Platforms.

Your Consent

This Privacy Policy governs your use of the Platforms. By registering for a user account on the Platforms or otherwise accessing or using the Platforms you agree with the terms of this Privacy Policy as it may be modified from time to time and consent to the collection, use and disclosure of personal information in accordance with the terms of this Privacy Policy.

Children

Nothing on the Platforms is intended to solicit information from minors (people under eighteen (18) years old) or to seek to determine whether a visitor is a minor. If you are under eighteen (18), you are not permitted to submit any personal information to us. Anyone under eighteen (18) who wants to obtain any product from Entrata or otherwise submit any personal information to us should ask a parent or guardian to do it in his/her own name. Because such information will not be specifically identified as being from a minor, users of the Platforms should be aware that personal information submitted by minors may be treated in the same manner as information given by an adult. If we learn we have collected or received personal information from a child under the age of 18 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under the age of 18, please send an email to support@entrata.com.

Meaning of Personal Information

For the purposes of this Privacy Policy, "personal information" means information about an identifiable individual, but does not include the name, title or business address or telephone number of an employee of an organization when collected, used or disclosed solely for the purpose of communicating or facilitating communication with the individual in relation to their employment, business or profession.

The Personal Information We Collect & How We Use It

Except as otherwise provided in this Privacy Policy, the personal information we collect from you is comprised entirely of the information you provide to us through the Platforms. We may collect the following personal information from you when you register to use the Platforms: your name, address, phone number and email address. We may use this personal information for the following purposes:

1. providing you with access to and use of the Platforms;
2. completing and processing any transactions you have authorized through the Platforms;
3. communicating with you with respect to your use of the Platforms; and
4. as otherwise required by applicable law.

In addition, we may collect certain personal information from you on behalf of the owner or manager of the property which you lease or wish to lease (your "Property Management") or otherwise receive certain personal information from your Property Management (or from another third party on behalf of your Property Management ). Below are examples of the types of personal information we may collect, or otherwise receive from, or on behalf of your Property Management and how we will use such information.

Please note that any personal information we collect on behalf of your Property Management or receive from or on behalf of your Property Management is the responsibility of your Property Management. While we will only use and disclose such information as contemplated in, and in accordance with, this Privacy Policy, we have no control over how your Property Management uses your personal information or to whom your Property Management discloses your personal information. For more information on how your Property Management collects, uses, discloses and secures your personal information, please contact your Property Management.

Au sein d’Entrata Canada, Inc. (collectivement, « Entrata », « nous », « notre » ou « nos »), nous sommes fiers de nos pratiques en matière de protection de la vie privée. Nous nous engageons à être transparents à propos des renseignements personnels que nous recueillons, de la manière dont nous les utilisons et des cas limités où certains d’entre eux peuvent être communiqués. Afin de nous aider à respecter cet engagement envers vous, nous avons élaboré la présente politique de protection de la vie privée (la « politique ») et nommé un responsable de la protection de la vie privée afin de nous assurer que tous les renseignements personnels que vous nous fournissez par l’intermédiaire de nos sites Web et de nos autres plateformes en ligne, notamment nos sites Web ResidentPortalMC et ProspectPortalMD (collectivement, les « plateformes » ou, individuellement, une « plateforme ») sont uniquement recueillis, utilisés et communiqués conformément à la présente politique.

Vous pouvez joindre notre responsable de la protection de la vie privée à l’adresse dataprivacy@entrata.com.

La présente politique décrit la manière dont nous recueillons, utilisons, communiquons et protégeons les renseignements personnels que vous fournissez. Elle décrit également vos choix concernant l’utilisation et la correction de vos renseignements personnels ainsi que l’accès à ceux-ci. Dans la présente politique, les termes « utilisateur », « vous », « votre » et « vos » vous désignent à titre d’utilisateur des plateformes.

Votre consentement

La présente politique régit votre utilisation des plateformes. Lorsque vous créez un compte d’utilisateur sur les plateformes ou que vous accédez à celles-ci ou les utilisez autrement, vous consentez aux modalités de la présente politique, dans sa version modifiée de temps à autre, et consentez à la collecte, à l’utilisation et à la communication de vos renseignements personnels conformément aux modalités de la présente politique.

Enfants

Les plateformes ne visent aucunement à solliciter des renseignements auprès de mineurs (personnes âgées de moins de dix-huit [18] ans) ou à tenter de déterminer si un visiteur est mineur. Si vous avez moins de dix-huit (18) ans, vous n’êtes pas autorisé(e) à nous fournir des renseignements personnels. Toute personne âgée de moins de dix-huit (18) ans qui souhaite obtenir un produit d’Entrata ou qui nous soumet autrement des renseignements personnels doit demander à un parent ou à un tuteur de le faire en son nom. Comme ces renseignements ne seront pas identifiés expressément comme étant ceux d’un mineur, les utilisateurs des plateformes doivent savoir que les renseignements personnels fournis par un mineur peuvent être traités de la même manière que ceux fournis par un adulte. Si nous apprenons que nous avons recueilli ou reçu des renseignements personnels d’un enfant âgé de moins de dix-huit (18) ans sans que le consentement d’un parent ait été vérifié, nous supprimerons ces renseignements. Si vous croyez que nous pourrions avoir des renseignements fournis par un enfant de moins de dix-huit (18) ans ou sur celui-ci, veuillez nous envoyer un courriel à support@entrata.com.

Signification de l’expression « renseignements personnels »

Aux fins de la présente politique, l’expression « renseignements personnels » désigne les renseignements concernant une personne identifiable, mais ne comprend pas le nom, le titre, l’adresse professionnelle, ni le numéro de téléphone d’un employé d’une organisation lorsqu’ils sont recueillis, utilisés ou communiqués uniquement dans le but de communiquer ou de faciliter la communication avec la personne relativement à son emploi, à son entreprise ou à sa profession.

Renseignements personnels que nous recueillons et manière dont nous les utilisons

À moins d’indication contraire dans la présente politique, tous les renseignements personnels que nous recueillons auprès de vous proviennent des renseignements que vous nous fournissez par l’intermédiaire des plateformes. Lorsque vous vous inscrivez pour utiliser les plateformes, nous pouvons recueillir les renseignements personnels suivants à propos de vous : nom, adresse postale, numéro de téléphone et adresse électronique. Nous pouvons utiliser ces renseignements personnels aux fins suivantes :

1. vous permettre d’accéder aux plateformes et de les utiliser;
2. effectuer et traiter les opérations que vous avez autorisées par l’intermédiaire des plateformes;
3. communiquer avec vous au sujet de votre utilisation des plateformes;
4. toute autre façon requise par les lois applicables.

De plus, nous pouvons recueillir certains de vos renseignements personnels pour le compte du propriétaire ou du gestionnaire de la propriété que vous louez ou souhaitez louer (votre « gestionnaire immobilier ») ou recevoir par ailleurs certains renseignements personnels de votre gestionnaire immobilier (ou d’un autre tiers pour le compte de votre gestionnaire immobilier). Vous trouverez ci-après des exemples des types de renseignements personnels que nous pouvons recueillir ou recevoir de votre gestionnaire immobilier ou pour son compte, ainsi que la manière dont nous utilisons ces renseignements.

Veuillez noter que votre gestionnaire immobilier est responsable de tous les renseignements personnels que nous recueillons pour son compte ou que nous recevons de lui ou pour son compte. Même si nous utilisons et communiquons ces renseignements seulement de la manière prévue dans la présente politique et conformément à celle-ci, nous n’exerçons aucun contrôle sur la manière dont votre gestionnaire immobilier utilise vos renseignements personnels ou sur les personnes à qui il les communique. Pour en savoir plus sur la manière dont votre gestionnaire immobilier recueille, utilise, communique et protège vos renseignements personnels, veuillez communiquer directement avec lui.