Privacy Policy

At NY Residential REIT (accessible via nyresidentialreit.com), we are committed to safeguarding the privacy and personal data of all individuals who interact with our website and services. We prioritize transparency, accountability, and compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) and California Consumer Privacy Act (CCPA). This Privacy Policy outlines how we collect, use, disclose, and protect your personal information, and your rights over it.

1. Introduction

Your privacy is of paramount importance to us. NY Residential REIT values its clients and website visitors and upholds a privacy-first approach in its data management practices. We handle all personal data in accordance with applicable international, national, and local data protection regulations and take reasonable steps to ensure your data remains secure, confidential, and used only for legitimate purposes.

2. Scope and Role of the Data Controller

This Privacy Policy applies to all individuals accessing or using any part of our website (nyresidentialreit.com), as well as any services offered through or in connection with the site. It governs the handling of personal data collected online, by email communication, through support interactions, or via third-party integrations.

For purposes of data protection law, NY Residential REIT acts as the “Data Controller” for all personal data collected directly from users. Data Controller means the entity that determines the purposes and means of processing personal data. If you have any inquiries regarding how we process your data, please direct them to [email protected].

3. Categories of Personal Data We Process

We may collect and process the following categories of personal data based on your interactions with our website and services:

a. Usage Data
This includes data about how you interact with nyresidentialreit.com and may involve:
– IP address
– Browser type and version
– Pages visited
– Session duration
– Referral sources
– Device identifiers
– Website navigation path

b. Account Data
When you register or provide details to interact with us, we may collect:
– Full name
– Residential or mailing address
– Email address
– Telephone numbers

c. Profile Data
Information that you choose to provide regarding:
– User preferences
– Purchase history
– Investment interests
– Behavior on our platform

d. Communication Data
This comprises any data exchanged through:
– Customer service requests
– Inquiry forms
– Correspondence records between you and customer support teams

e. Technical Data
Collected to improve function and experience, such data may include:
– Device type and operating system
– Internet browser configurations
– Geographic region and language settings
– Plug-ins and time zone

f. Transaction Data
For processing payments or delivering services:
– Payment method and transaction identifiers
– Billing and shipping addresses
– Fulfillment status and payment confirmations

g. Preference Data
We collect data related to how you interact with marketing and promotional material including:
– Marketing communication preferences
– Investment and product interest signals
– Consent choices

4. Legal Bases for Processing

We process personal data lawfully, fairly, and transparently under the following legal bases:

– Consent: Where you have expressly consented to data processing for specific purposes, such as newsletter subscriptions or cookie usage.
– Contractual Necessity: To perform our obligations under a contract with you, such as account creation or service fulfillment.
– Legal Obligation: To comply with applicable legal or regulatory requirements.
– Legitimate Interests: Where processing is necessary for our business interests, provided such interests are not overridden by your rights and interests (e.g., improving website usability or fraud prevention).

5. Your Rights

Depending on your location and the applicable laws, you have certain rights regarding your personal data, including:

– Right of Access: Obtain confirmation of whether and how your data is being processed.
– Right to Rectification: Correct inaccurate or incomplete personal information.
– Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
– Right to Restrict Processing: In specific situations, limit how we process your information.
– Right to Data Portability: Request your data in a structured, commonly used format to transfer to another controller.
– Right to Object: Object to our processing where it’s based on legitimate interests or direct marketing purposes.
– Right Not to Be Subject to Automated Decision-Making, including profiling, unless authorized by law.

To exercise any of these rights, please contact us at [email protected]. We will respond to valid requests in accordance with GDPR and CCPA timeframes and obligations.

6. Security Measures

NY Residential REIT implements industry-standard security measures to ensure confidentiality, integrity, and availability of your data, including:

– Encryption at rest and in transit
– Access controls and authentication protocols
– Regular security audits and system updates
– Backup and disaster recovery solutions
– Access limited to trained, authorized personnel only

Despite our best efforts, no system is entirely immune to risk. We encourage users to take steps on their own to protect their digital environments.

7. International Data Transfers

If we transfer your data outside your jurisdiction (including to partners or service providers outside the European Economic Area or the United States), we do so only when adequate safeguards, such as Standard Contractual Clauses or EU-U.S. Data Privacy Framework membership, are in place to ensure your data receives the same level of protection as within your home country.

8. Data Retention

We retain your personal data only for as long as it is necessary to fulfill the purposes for which it was collected, including:

– Usage Data: Retained for up to 12 months for analytics purposes
– Account and Profile Data: Retained for the duration of the user’s relationship with us, and for six (6) years following account closure
– Communication Data: Retained for up to three (3) years from last interaction
– Transaction Data: Retained for up to seven (7) years to comply with tax and accounting regulations
– Preference Data: Retained indefinitely, unless consent is withdrawn or user opts out

Upon expiration of the relevant retention period, data will be securely deleted or anonymized where applicable.

9. Cookie Policy

nyresidentialreit.com uses cookies and similar tracking technologies to enhance user experience and collect statistical data. These may include:

– Essential Cookies: Required for basic website functionality
– Functional Cookies: Remember user preferences and settings
– Analytical Cookies: Collect data on user behavior and site performance using tools like Google Analytics
– Performance Cookies: Monitor loading times, errors, and other performance metrics

We do not use cookies for profiling unless you have given explicit consent.

10. Cookie Management and Compliance

Upon first visit to nyresidentialreit.com, users are presented with a cookie consent banner. You can accept or reject non-essential cookies at any time by adjusting your browser or platform settings.

Under GDPR and CCPA, you have the right to opt out of non-essential cookies, and we honor “Do Not Track” signals where applicable.

11. Children’s Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal data from anyone under this age. If we learn that data belonging to a child under 13 has been collected, we will take appropriate steps to delete such information promptly. Parents who believe their child has provided us personal data without appropriate consent should contact us directly at [email protected].

12. Changes to This Policy

We reserve the right to modify or update this Privacy Policy at any time to reflect changes in legal obligations, technology, or our operations. Users are encouraged to review this page periodically for the latest information on our privacy practices. Significant changes will be communicated by appropriate means, which may include email notice or alerts on nyresidentialreit.com.

13. Contact Us

For inquiries related to this Privacy Policy, your personal information, or to exercise any of your rights under data protection legislation, please contact:

NY Residential REIT
Email: [email protected]

We are committed to ensuring that your privacy rights are respected fully. If you have any concerns regarding our data practices, we encourage you to contact us directly. You may also have the right to lodge a complaint with your local data protection authority.

This Privacy Policy aims to reflect our ongoing compliance with both the GDPR and CCPA, and to present clarity and assurance to all users of nyresidentialreit.com.