Privacy Policy

Last updated: July 18, 2026

1. Who we are and what this policy covers

This policy explains how Jennifer Kavur, REALTOR®, of Keller Williams Energy Real Estate, Brokerage (“I”, “me”) collects, uses, stores, and protects your personal information when you use:

  • The private Seller Portal at seller.jenniferkavurrealestate.com;
  • The private Buyer Portal at buyer.jenniferkavurrealestate.com; and
  • The contact form at jenniferkavurrealestate.com.

The portals are private, invitation-only tools provided to my clients to support an active real estate transaction. This policy does not cover information collected through brokerage systems (such as transaction documents, trust deposit records, or the brokerage's client database), which is governed by the brokerage's own privacy practices, or information I am required to collect and retain under law (see Section 7).

I comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario real estate regulation.

2. What information is collected

Portal account information. When I create a portal for you: your name, email address, and a password you can change. Passwords are stored only in securely hashed form — I cannot see your password.

Information you enter in the portals. Depending on which tools you use, this can include: your phone number and occupation; the municipalities, neighbourhoods, and home features you are looking for; your budget, maximum purchase price, down payment plans, and mortgage pre-approval details (if you choose to enter them in the wishlist or financial worksheets); notes you record about properties; and your progress through checklists.

Information I enter on your behalf. Property addresses, showing schedules, offer details, key transaction dates, documents relevant to your transaction (for example market statistics, feature sheets, or comparative market analyses), and weekly updates.

Usage information. To keep your portal current and useful, the portal records when you last logged in, which sections you have viewed, and your checklist progress. This information is visible only to me. The portals do not use advertising or analytics trackers. A session cookie (or equivalent token) is used solely to keep you logged in.

Website contact form. If you submit the contact form on my website: your name, contact details, and the message you send.

What is NOT collected through the portals: date of birth, government identification, driver's licence details, SIN, or banking/account numbers. Identification required under federal law (FINTRAC) is collected in person and handled through brokerage processes, not through these portals.

3. Why your information is collected and how it is used

Your information is used to:

  • Provide and personalize your private portal;
  • Coordinate your purchase or sale — showings, offers, key dates, and documents;
  • Understand your search criteria and priorities so I can represent you effectively;
  • Send you portal notifications you have opted into (for example, an email when I post a weekly update);
  • Respond to inquiries submitted through my website; and
  • Meet my professional and legal obligations as a registrant.

I do not sell your personal information. I do not use it for advertising. I do not share it with third parties except the service providers described in Section 4 and as required in the course of your transaction or by law.

4. Service providers and where your information is stored

I use a small number of service providers to operate these tools:

  • Railway (hosting). Portal applications and their data are hosted on Railway infrastructure located in Singapore. This means your personal information is stored and processed outside Canada and may be subject to the laws of the jurisdiction in which it is stored, including lawful access by authorities there.
  • Resend (email delivery). Used to send portal notification emails to the email address on your account.
  • Google (backups). Encrypted-in-transit backups of portal data are stored in a Google Drive account under my control, which may store data outside Canada.
  • GitHub (application code only). The software code of the portals is stored on GitHub. Your personal information is not stored in these code repositories.

Each provider is used only to perform the function described. By using the portals, you consent to your information being transferred to and stored with these providers, including outside Canada.

5. Consent

Portals are created only for clients, by invitation. By accepting your portal credentials and using the portal, you consent to the collection, use, and storage of your information as described in this policy. Most information in the portal beyond your account details is optional — you choose what to enter in wishlists, worksheets, and notes. You may withdraw consent at any time (subject to legal and contractual limits) by contacting me; withdrawing consent may mean I can no longer provide the portal, but it does not affect my representation of you.

6. How your information is protected

  • All connections to the portals are encrypted (HTTPS).
  • Passwords are stored as bcrypt hashes, never in plain text.
  • Repeated failed login attempts are throttled.
  • Administrative access is restricted to me and protected by separate credentials.
  • Portal data is excluded from public code repositories and deployment artifacts.
  • Daily backups are automated and access-restricted.

No system is perfectly secure. If I become aware of a breach of security safeguards creating a real risk of significant harm to you, I will notify you and report as required by PIPEDA.

7. How long your information is kept

Records relating to a real estate trade must be retained for six years under Ontario regulation (O. Reg. 579/05 under TRESA). Information in your portal that forms part of your transaction record is retained accordingly. When your transaction completes and your portal is archived or deleted, portal data that is not required to be retained is removed from the live system; backups are retained on a rolling basis. You may request deletion of optional information (for example wishlist content) at any time.

8. Your rights

You may at any time:

  • Request access to the personal information I hold about you in these systems;
  • Request correction of inaccurate information;
  • Withdraw consent as described in Section 5; and
  • Ask questions or raise concerns about these practices.

Contact:

Jennifer Kavur
jenniferkavur@kw.com
416-833-5707

If you are not satisfied with my response, you may contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

9. Changes to this policy

If this policy changes, the updated version will be posted on this page with a new “Last updated” date. Material changes affecting active portal clients will be communicated directly.