Haven.
Effective Date: January 15, 2025

Privacy Policy

Your privacy is our priority. Learn how we collect, use, protect, and respect your personal information.

Section 1

Introduction

Haven & Hearth ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.havenhearth.com (the "Website"), use our mobile application, or engage with our real estate services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

Our Commitment

We adhere to the California Consumer Privacy Act (CCPA), the General Data Protection Regulation (GDPR) where applicable, and other relevant data protection laws. We are committed to transparency, security, and giving you control over your personal data.

Section 2

Information We Collect

We collect several categories of information to provide and improve our Services:

Personal Identification Information

Full name, email address, phone number, postal address, date of birth, government-issued ID (for certain transactions), and social security number (when required for mortgage applications).

Financial Information

Bank account details, mortgage pre-approval letters, income verification documents, credit reports (with your explicit consent), and transaction history related to property purchases or rentals.

Technical & Usage Data

IP address, browser type, operating system, device identifiers, pages visited, time spent on pages, referring URLs, search queries, saved property listings, and interaction with our emails and advertisements.

Property & Preference Data

Property search criteria, budget ranges, preferred locations, property viewing history, saved listings, communication preferences, and feedback provided through surveys or reviews.

Section 3

How We Use Your Information

We use the information we collect for the following legitimate business purposes:

Service Delivery

Process property inquiries, schedule tours, facilitate transactions, and provide customer support.

Personalization

Tailor property recommendations, saved searches, and content based on your preferences and browsing history.

Communication

Send property alerts, newsletters, market updates, and respond to your inquiries and requests.

Analytics & Improvement

Analyze Website usage patterns to improve functionality, user experience, and service offerings.

Marketing

Deliver targeted advertisements about properties and services that may interest you (with consent where required).

Legal Compliance

Comply with applicable laws, regulations, legal processes, and enforce our Terms & Conditions.

Section 4

Information Sharing & Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

With Your Consent

We share information with third parties when you explicitly direct us to do so, such as when applying for a mortgage through our partner lenders.

Service Providers

We engage trusted third-party vendors for services like cloud hosting (AWS), email delivery (SendGrid), analytics (Google Analytics), and payment processing (Stripe). These providers are contractually bound to protect your data.

Legal Obligations

We may disclose information if required by law, court order, subpoena, or to protect the rights, property, or safety of Haven & Hearth, our clients, or the public.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

Section 5

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable law. Our retention periods are as follows:

Data Type Retention Period Basis
Account Information While account is active + 2 years Contractual necessity
Transaction Records 7 years Legal obligation (tax/audit)
Inquiry Data (non-account) 18 months Legitimate interest
Marketing Preferences Until consent withdrawn Consent
Section 6

Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:

256-bit SSL Encryption

All data transmitted between your browser and our servers is encrypted.

Secure Cloud Infrastructure

Data stored on ISO 27001 certified servers with 24/7 monitoring.

Multi-Factor Authentication

MFA available for all user accounts to prevent unauthorized access.

Regular Security Audits

Quarterly penetration testing and vulnerability assessments.

Employee Training

All staff undergo annual data protection and privacy training.

Incident Response Plan

48-hour breach notification protocol in compliance with regulations.

Section 7

Your Rights & Choices

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Right to Access

Request a copy of the personal data we hold about you.

Free

Right to Rectification

Correct inaccurate or incomplete personal data.

Free

Right to Deletion

Request deletion of your data ("Right to be Forgotten").

Subject to legal holds

Right to Data Portability

Receive your data in a structured, machine-readable format.

Free

Right to Opt-Out

Opt-out of marketing communications and data sales (CCPA).

Anytime
Section 8

Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take immediate steps to delete such information from our servers.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@haven.com.

Section 9

International Data Transfers

Haven & Hearth is headquartered in the United States. Your personal information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These jurisdictions may have different data protection laws than your country of residence.

For transfers from the European Economic Area (EEA) or the United Kingdom, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or other valid legal mechanisms, to ensure adequate protection of your data.

EU/EEA Users: You have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

Section 10

Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The "Effective Date" at the top of this page indicates when this policy was last revised.

For material changes, we will provide prominent notice on our Website or send you an email notification. Your continued use of our Services after any modifications indicates your acceptance of the updated Privacy Policy.

Section 11

Contact Us

Privacy Team

privacy@haven.com

Phone

+1 (555) 234-5678

Address

123 Luxury Lane, Suite 400
New York, NY 10001

Response Time

Within 48 hours

Section 12

Submit a Data Request

Use the form below to exercise your privacy rights. We will respond to all verified requests within 30 days as required by applicable law.

Request Received!

Our privacy team will review your request and respond within 30 days.