Privacy policy

This policy covers www.brokerofrecordca.com and the supervision desk behind it. It is written to satisfy California’s Online Privacy Protection Act, which requires any commercial website collecting personal information from Californians to post one. B&P 22575 It is also written to be read, so it describes the actual data flows rather than every hypothetical one.

What is collected, and from whom

Two very different populations, kept separate on purpose.

• Visitors who use the request form. Name, email address, phone number, company name, and whatever you write in the message field. A one-way salted hash of your IP address is also stored, solely to rate-limit the form. The hash is not reversible and your IP address itself is not retained.
• Clients under a supervision engagement. Company legal name and contact email; each licensee’s name, DRE licence number, written agreement date, and licence expiry; trust account bank name and nickname; transaction file records; and documents uploaded in the course of supervision. This information arrives under an engagement agreement, not from browsing the site.

No bank account numbers, Social Security numbers, or payment card numbers are stored in this system. The trust account records deliberately hold the bank name only. Documents uploaded to a transaction file may contain information of that kind, which is why they sit in private storage that is unreadable without an authenticated session.

Who else processes it

Three service providers, named rather than described as “third-party partners”:

• Supabase — database and document storage, United States region.
• Vercel — website hosting and aggregate traffic analytics.
• The email provider that delivers form notifications and client statements.

Nothing is sold, rented, or shared for anyone else’s marketing. There is no advertising network on this site, no data broker relationship, and no arrangement under which a third party receives your information in exchange for a service or a fee. Information is disclosed outside those processors only where the law requires it — including production of supervisory records to the California Department of Real Estate. B&P 10148

Tracking, and the absence of it

No advertising trackers, no cross-site pixels, no third-party fingerprinting scripts run on this site. Analytics are aggregate page counts that do not use cookies and do not build a profile of you. That means no other party is in a position to collect personally identifiable information about your activity across other websites through this one.

Do Not Track: this site does not respond to Do Not Track browser signals. That is stated plainly because the statute requires disclosure of how such signals are handled, and because claiming to honour a signal that is not implemented would be worse than not honouring it.

How long it is kept

• Request-form submissions are kept while the enquiry is live and for a reasonable period afterwards, then deleted on request at any time.
• Client supervisory records are retained for three years, because California requires a broker to retain and produce them. B&P 10148 This is a legal obligation rather than a preference, and it means a client’s deletion request cannot reach records inside the retention period. Departing clients receive a complete copy of everything at no charge.

Reviewing, correcting, or deleting your information

Email jumaanebey@gmail.com and ask. You can request a copy of what is held about you, ask for a correction, or ask for deletion. Expect a reply within thirty days. Identity is verified before anything is released, because releasing a client’s records to whoever asks would be its own privacy failure. The only requests that cannot be honoured are those that would require destroying records inside the three-year retention window described above.

Security

Traffic is encrypted in transit. Every database table denies access by default and is opened only by explicit row-level policy; documents live in a private bucket that produces short-lived signed links rather than public URLs; and signed supervisory reviews are made immutable at the database level so the record cannot be quietly rewritten. No system is beyond compromise, and there is a written procedure for what happens if this one is — including notification to affected Californians as required by law. Civ. Code §1798.82

Children

This is a business-to-business service. It is not directed at children and no information is knowingly collected from anyone under 18.

Changes to this policy

Revisions are posted on this page with a new effective date at the top, and the previous version is superseded from that date. If a change materially affects how information already collected is used, active clients are notified by email before it takes effect rather than being left to notice a changed date.

Contact

Bey Group Real Estate, Inc., California DRE Corporation License #02449920. Designated Broker: Jumaane Bey, Corona, CA, DRE #02076038. jumaanebey@gmail.com