Your information stays within a small, controlled circle.

1. Scope and responsibility

This policy applies to personal information and property information collected through SellMyHighrise.ca, including the confidential property-review form, email and telephone communications, and any documents you choose to share.

SellMyHighrise.ca is responsible for the information described in this policy. References to “we,” “us,” and “our” mean SellMyHighrise.ca and the internal acquisitions team authorized to work on its private acquisition activities. Our privacy contact is listed at the end of this policy.

This policy is intended to reflect the Personal Information Protection and Electronic Documents Act (PIPEDA) and other privacy laws that may apply. If you are outside Canada, local privacy rights may also apply. This policy does not create rights beyond those provided by applicable law.

2. What we collect

We collect information you choose to provide, together with limited technical information needed to operate and protect the website.

Information you provide

• Contact information: your name, phone number, email address, and whether you are an owner or authorized representative.
• Property information: property address, city or municipality, number of units, number of floors, sale timeline, estimated NOI or annual gross revenue, and any other detail you include in correspondence.
• Documents: rent rolls, offering memoranda, income statements, unit mixes, and other files you submit through the form.
• Consent records: the date and version of the Privacy Policy and Mutual NDA you accepted, and the time of submission.

Information collected automatically

• Security and server information: our web server may record standard request information such as IP address, date and time, requested page, browser type, and error information. These logs support security, fraud prevention, and troubleshooting.
• Session information: a necessary session cookie and security token protect the form against cross-site request forgery. We also use a short-lived, hashed rate-limit record to limit automated submissions.

Please do not submit information that is not necessary for the purpose. If a document contains personal information about tenants or other individuals that is not needed for a preliminary review, you may redact or omit it.

3. Why we use information

• To review and evaluate a possible direct acquisition or other transaction involving the property.
• To respond to your inquiry, arrange a conversation, and communicate about next steps.
• To conduct confidentiality, conflict, and preliminary diligence checks.
• To document consent to the Privacy Policy and Mutual NDA.
• To protect the website, prevent spam and abuse, and maintain security.
• To meet legal, tax, accounting, regulatory, or recordkeeping obligations.
• To establish, exercise, or defend legal claims.

We will not use your information for a materially different purpose without informing you and, where required, obtaining consent. We do not use submitted property or contact information for advertising or sell access to third parties.

4. Consent, withdrawal, and cookies

Consent

By completing the form and ticking the consent box, you consent to the collection, use, and disclosure of your information as described in this policy. You also confirm that you are authorized to submit the property information and documents. Consent to the Privacy Policy is separate from any consent to a specific transaction.

You may withdraw your consent at any time, subject to reasonable notice, legal obligations, and records we must keep. Withdrawal may mean we cannot continue to evaluate or communicate about a potential acquisition. To withdraw, email [email protected] with the subject line “Privacy request.”

Cookies and similar technologies

This website uses only necessary session cookies and server-side security records. The session cookie supports the secure property-review form and expires when your browser session ends or is cleared. We do not use advertising cookies, cross-site tracking pixels, Google Analytics, or third-party marketing cookies on this site.

We self-host the site’s fonts and visual assets. The site does not load content from third-party advertising networks. If this changes, this policy will be updated and any required consent will be obtained.

Email communications

We use the contact details you provide to respond to your inquiry. We do not add you to a marketing list without consent. If we ever send commercial electronic messages, we will identify the sender, provide contact information, and include an unsubscribe mechanism where required by Canada’s anti-spam law.

5. Sharing and access

We do not sell, rent, publish, trade, or share your information with third-party marketers. Access is limited to people who need it for the purposes described above.

We may disclose information in the following limited circumstances:

• Internal acquisitions team: principals and team members evaluating the potential transaction.
• Authorized professional advisers: legal, accounting, tax, engineering, environmental, and other advisers engaged for a transaction, under confidentiality obligations.
• Financing or capital partners: only where necessary for the transaction, under written confidentiality obligations and, where required, with your consent or as permitted by law.
• Service providers: hosting, security, email, and IT providers that support the site, under contracts or controls designed to protect personal information.
• Legal or regulatory disclosures: where required by law, court order, regulatory authority, or to protect rights, safety, and security.
• Transaction continuity: in connection with a reorganization, financing, or transfer of the acquisition business, subject to appropriate confidentiality protections.

We do not publish property-identifying details on this website. If a transaction advances, sharing will be limited to what is reasonably necessary for diligence, financing, and closing.

Our hosting and service providers may process information in Canada or other jurisdictions. Where information is processed outside your jurisdiction, it may be subject to the laws of that jurisdiction. We use reasonable contractual and organizational safeguards for service providers.

6. How long we keep information

We retain information only as long as reasonably necessary for the purposes described in this policy and to meet legal obligations.

• Unsuccessful or inactive inquiries: generally up to 24 months after the last substantive contact, after which records are deleted or de-identified unless a longer period is required or you ask us to delete sooner.
• Active or completed transactions: for the life of the transaction and for the period required by tax, corporate, real estate, and legal recordkeeping requirements, which may be longer than 24 months.
• Consent and NDA records: retained for as long as needed to demonstrate compliance with the agreement and legal obligations.
• Security logs and rate-limit records: kept for a short period appropriate for website security and incident investigation.

When information is no longer required, we securely delete it or de-identify it. Backup copies may remain for a limited period until overwritten in the ordinary course.

7. How we protect information

We use reasonable administrative, technical, and physical safeguards designed to protect personal and property information, including:

• encrypted transmission over HTTPS;
• private, access-restricted storage for submitted documents and lead records outside the public website directory;
• randomized file names, file-type validation, size limits, and restricted file permissions;
• form security tokens, session protection, rate limits, and automated-submission controls;
• limited access on a need-to-know basis; and
• server and application logging for security and troubleshooting.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we take security concerns seriously. If we become aware of a privacy breach involving personal information under our control, we will investigate and make notifications required by applicable law.

8. Your privacy rights

Subject to applicable law and verification of your identity, you may request to:

• access the personal information we hold about you;
• correct inaccurate or incomplete personal information;
• withdraw your consent to certain uses or disclosures;
• ask about how your information has been used or disclosed; and
• request deletion of information that is no longer required, subject to legal retention obligations.

To make a request, email [email protected]. We may need to verify your identity and authority, especially where a request concerns a property or owner. We will respond within a reasonable period and generally within the timelines required by applicable privacy law.

If we cannot fulfill a request, we will explain why, subject to legal limitations. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or another appropriate privacy regulator.

9. Contact us

Questions about this policy, a privacy request, or the handling of your information can be sent to our privacy contact:

10. Changes to this policy

We may update this policy to reflect changes in our practices, technology, or legal requirements. The version date at the top of this page will be updated. If a change materially affects how we use previously collected personal information, we will take reasonable steps to notify affected individuals and obtain any required consent. The current version is available at privacy.php.