Privacy Policy

1. Introduction

Gilbert G. Ayala ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. This policy applies to all users across the Americas, including the United States, Canada, Mexico, Brazil, and other Latin American countries.

2. Data Controller

The data controller responsible for your personal information is Gilbert G. Ayala, a licensed real estate agent operating under United Real Estate in Houston, Texas. For privacy-related inquiries, contact us at privacy@zayrumgroup.com.

3. Information We Collect

We collect the following categories of personal information:

• Lead Forms: When you submit a buyer, rental, consultation, global listing, or selling inquiry form, we collect your full name, email address, phone number, property preferences, budget range, and any additional information you provide.
• Newsletter: When you subscribe to our newsletter, we collect your email address.
• Authentication: When you log in to the admin area, we collect your email address and authentication credentials.
• Technical Data: Our servers automatically log IP addresses, user agent strings, and request timestamps for security and debugging purposes. These logs are retained for 7 days.

4. How We Use Your Information

We use your personal information for the following purposes:

• To respond to your inquiries and provide the real estate services you requested.
• To send you property alerts and relevant listing information based on your preferences.
• To deliver our newsletter with new listings and market updates (only if you subscribed).
• To comply with applicable laws, regulations, and legal processes.

5. Lawful Basis for Processing

Depending on your jurisdiction, we process your personal data on the following lawful bases:

• Consent: When you submit a lead form, subscribe to our newsletter, or otherwise provide explicit consent.
• Legitimate Interest: For security monitoring, fraud prevention, and improving our services.
• Contract: To provide the services you have requested from us.

6. How We Share Your Information

We do not sell your personal information. We may share your information with:

• Resend: Our email service provider, used for transactional emails, newsletters, and lead notifications.
• Cloud Storage Providers: For storing uploaded images and documents.
• Legal Obligations: When required by law, court order, or government regulation.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

7. International Data Transfers

Your personal information may be transferred to and processed in the United States, where our servers are located. The United States may have data protection laws that differ from those in your country. By using our services and providing your information, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain your personal information only as long as necessary:

• Lead inquiries: 2 years after your last interaction with us, or until you request deletion.
• Newsletter subscriptions: Until you unsubscribe.
• Authentication accounts: While your account is active, plus 30 days after deletion.
• Server logs: 7 days.
• Consent records: Permanently stored on the lead record for compliance purposes.

9. Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Portability: Request your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests.
• Restriction: Request limitation of how we process your data.

To exercise any of these rights, submit a request through our Data Subject Access Request portal at /privacy/request . We will respond within the timeframe required by applicable law.

10. Region-Specific Rights

• California (CCPA/CPRA): California residents have the right to know what personal information is collected, to request deletion, to opt-out of the sale of personal information (we do not sell personal data), and to not be discriminated against for exercising these rights.
• Brazil (LGPD): Brazilian residents have the right to confirmation of processing, access to data, correction of incomplete or inaccurate data, anonymization or deletion of unnecessary data, portability, deletion of data processed with consent, and information about public and private entities with which we share data.
• Canada (PIPEDA): Canadian residents have the right to access their personal information, challenge its accuracy and completeness, and have it amended as appropriate.
• Quebec (Loi 25): Quebec residents have rights similar to GDPR, including transparency, access, rectification, portability, and the right to be forgotten, with specific requirements for automated decision-making and privacy impact assessments.
• Mexico (LFPDPPP): Mexican residents have the rights of access, rectification, cancellation, and opposition (ARCO rights) regarding their personal data.

11. Cookies and Tracking

We use only functional cookies necessary for the operation of our website: authentication session cookies and language preference cookies. We do not use advertising cookies, third-party tracking cookies, or analytics cookies that identify individual users. You can configure your browser to block cookies, but this may affect website functionality.

12. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a minor has provided us with personal data, please contact us immediately.

13. Changes to This Policy

We may update this Privacy Policy from time to time. The effective date at the top of this page indicates when it was last revised. We encourage you to review this policy periodically. Continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact us at: