Privacy Policy

Information We Collect

When you register for a haho.ca account, we collect:

• First and last name
• Email address (verified)
• Phone number (optional)
• Purpose of real estate interest (buyer, seller, renter, investor)
• Password (stored as a bcrypt hash — never in plain text)
• Date and time of Terms of Use acceptance

We also automatically collect:

• IP address and browser user agent on each session login
• Listing pages viewed and searches performed (audit log)
• Date and time of each access event

How We Use Your Information

• To verify your email address and activate your account
• To authenticate your sessions and enforce the 90-day password expiry
• To provide you with access to MLS® listing data as a bona fide consumer
• To send you property alerts and search notifications (if you opt in)
• To connect you with our real estate agent — Naeem Hussain, Salesperson, Century 21 Leading Edge Realty Inc., Brokerage — or, for mortgage inquiries, with licensed brokers via our partner iShopRates (only if you request it; your details go to the professional handling your request and are never sold)
• To maintain the audit trail required under our MLS® data licence

Sharing With PropTx

As required by the PropTx VOW Data Feed Agreement (§9.1) and MLS® Rules, your personal information — including your name, email address, username, and audit trail — may be shared with PropTx Innovations Inc. upon their request, for the purposes of verifying compliance with MLS® Rules and Policies, investigating suspected breaches, or for legal and regulatory purposes.

Data Retention

As required by PropTx VOW Rules, your account records (name, email, username, and audit trail) are retained for a minimum of 180 days after your password expires. After that period, we will delete or anonymize your personal information unless required to retain it for legal purposes.

Your Rights Under PIPEDA

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Withdraw consent and request deletion of your account
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise these rights, contact us at [email protected] or by mail: Century 21 Leading Edge Realty Inc., Brokerage, 641 Kingston Rd, Pickering, ON L1V 3N7. For MLS® listing removal requests, we will comply and notify PropTx and the listing brokerage as required by the VOW Data Feed Agreement.

Security

We implement industry-standard security measures including bcrypt password hashing, HTTPS-only transmission, httpOnly session cookies, and rate-limiting. Sessions expire after 60 minutes of inactivity. We maintain security protocols against unauthorized access and third-party data scraping as required by MLS® Rules R-8.13.

Cookies

We use a single session cookie (haho_user) to maintain your authenticated session. This cookie is httpOnly, secure (HTTPS only in production), and expires after 60 minutes of inactivity. No third-party tracking cookies are used on authenticated pages.