Privacy Policy

What we collect

We only collect the information you choose to give us:

• Contact form — your name, email address, phone number (if provided), and the message you send.
• Home valuation request — the above plus the property address and any property details you enter (type, bedrooms/bathrooms, condition, timeframe, notes).
• Market-notes newsletter — your email address.

We also receive limited, standard technical information (such as your browser type and general request data) that our hosting provider logs to operate and secure the site. We do not ask for sensitive information, and we do not knowingly collect information from children.

How we use it

We use the information you provide to:

• respond to your inquiry and provide the guidance you asked for;
• prepare and follow up on a home valuation you requested;
• send you market updates only if you signed up for them (you can unsubscribe at any time);
• operate your client portal account — signing you in, showing you what AJ has shared, saving your favourites, searches and notes, and keeping the account secure.

Portal emails come in two kinds. Service emails — your sign-in link, and a note when AJshares something new — are part of the account and are sent whether or not you opt in to marketing. Market updates are separate, require your explicit opt-in, are never pre-selected, and can be switched off at any time from your account page without affecting your access to the portal.

You can withdraw consent to marketing emails at any time. Every market-update email includes a one-click unsubscribe link that works without signing in, and you can also manage your email preferences in your portal account. Unsubscribe requests are actioned immediately.

We do not sell your personal information, and we do not share it for third-party marketing.

Where it's stored

Your information is processed by a small number of reputable service providers that operate this site on our behalf:

• Supabase — the database that stores form submissions and newsletter signups.
• Resend — delivers the email notifications and confirmations generated by the forms.
• Vercel — hosts and serves the website.

These providers process data on our instructions. Depending on the provider, information may be stored or processed in Canada or the United States.

Cross-border storage. Our Supabase project is hosted in the United States(US East). This means the personal information described above — including your client portal account and anything shared with you through it — is stored and processed on servers located in the United States, and is therefore subject to the laws of that country, including lawful access requests by United States authorities. By using the contact forms or the client portal you acknowledge this cross-border storage. If you would prefer not to have your information stored outside Canada, contact AJ and we will make other arrangements.

How long we keep it. Form submissions and enquiry records are kept for as long as needed to respond and to meet record-keeping obligations that apply to a registered brokerage. Portal account data is kept for as long as your account is open; if you delete your account it is removed immediately, and the security log is kept only for a limited period for fraud and abuse detection.

We also use two analytics providers — Google and Microsoft — that process usage data as described in Analytics and session replay below.

Your client portal account

The client portal is a private, signed-in area where AJshares work prepared for you. Access is by a single-use sign-in link sent to your email address — there is no password to store or lose. Sessions are held in secure, HTTP-only cookies.

You only ever see your own workspace.Access is enforced in the database itself, row by row, so one client’s documents, favourites, searches and notes are not reachable by another. If you and a partner or co-buyer are linked to one household, you each sign in separately and share the documents and listings prepared for you — your private notes on a listing remain yours alone.

Analytics are switched off inside the portal. Neither Google Analytics nor Microsoft Clarity runs on any portal page, and no session replay of your private workspace is ever recorded. The tags are not loaded there at all.

Deleting your account. You can permanently delete your portal account and its contents at any time from your account page. This removes your profile, favourites, saved searches, notes, security log and the record of what was shared with you. It does not affect records the brokerage is independently required to retain about a real estate transaction.

Cookies

This site uses essential, functional cookies — for example, to remember a language preference, your cookie choice, or to keep the site operator signed in to the private admin area. These are always on because the site cannot work without them.

The analytics providers described in Analytics and session replay below (Google Analytics and Microsoft Clarity) set their own cookies and browser storage to measure how the site is used. These are off by default: on your first visit a consent banner asks you to Accept all, Reject all, or Manage preferences, and nothing analytics-related loads unless you opt in. We remember your choice for about six months, then ask again; you can change it any time by clearing the site’s cookies. We do not use advertising cookies, and we do not sell your information or share it for cross-context behavioural advertising.

Analytics and session replay

To understand how visitors use the site and to improve it, we use two third-party behavioural-analytics tools:

• Google Analytics — provided by Google. It records aggregate usage such as page views, the pages you navigate between, clicks, scroll behaviour, approximate location (derived from your IP address), and general device and browser information.
• Microsoft Clarity — provided by Microsoft. In addition to similar usage metrics (clicks, scrolling, and heatmaps), Clarity produces session replays. A session replay is a reconstruction of your visit rebuilt from the page’s content (its DOM) — it is not a video or screen recording of your device, and it does not capture other tabs, applications, or anything outside this website.

What is masked. The fields where you would type personal information — such as your name, email, phone number, property address, and the message or notes in our contact and home-valuation forms — are masked, so what you type into them is not captured in analytics or session replays. Clarity masks form inputs by default, and we additionally tag these freeform fields with an explicit mask as an extra safeguard.

Google and Microsoft process this analytics data on our behalf as service providers, under their own terms and privacy policies, and may process it in the United States. To learn more, see Google’s Privacy Policy and Microsoft’s Privacy Statement. You can also limit analytics tracking through your browser settings or the Google Analytics Opt-out Browser Add-on.

Your rights under PIPEDA

You have the right to:

• access the personal information we hold about you;
• ask us to correct information that is inaccurate;
• withdraw your consent and ask us to stop contacting you or delete your information, subject to legal limits;
• complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you have a concern we have not resolved.

To exercise any of these rights, contact us using the details below.

Real estate and MLS® data

Where this website displays real estate listing data, that data is sourced from the Canadian Real Estate Association’s DDF® (REALTOR.ca Data Distribution Facility) — specifically the National Shared Pool and National Franchisor Pool.

Information is deemed reliable but not guaranteed and should be independently verified. Listing data is provided for personal, non-commercial use only and may not be redistributed, scraped, or used for any other purpose.

The trademarks REALTOR®, REALTORS®, and the REALTOR® logo are controlled by The Canadian Real Estate Association (CREA) and identify real estate professionals who are members of CREA. The trademarks MLS®, Multiple Listing Service® and the associated logos are owned by The Canadian Real Estate Association (CREA) and identify the quality of services provided by real estate professionals who are members of CREA. Used under license. The trademark DDF® is owned by The Canadian Real Estate Association (CREA) and identifies the REALTOR.ca Data Distribution Facility (DDF®).

Contact

For any question about this policy or your information, contact AJ Atoui:

• Email: aj@atouirealty.com
• Phone: (343) 333-8045

AJ Atoui, REALTOR® Salesperson — Real Broker Ontario Ltd., Brokerage. Broker of Record: Lori Ann West. 130 King Street West, Suite 1900, Toronto, Ontario, M5X 1E3.

See also our Terms of Use.