Privacy Policy

BRC Privacy Policy

Effective Date: April 1, 2025
Applies to: Applicants, residents, guarantors, and other individuals using BRC-managed ProspectPortal, ResidentPortal, or Online Application powered by Entrata.

1. Introduction

BRC Real Estate Corporation (“BRC,” “we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information of individuals who apply for, lease, or reside in apartment communities managed by BRC. This Privacy Policy explains what data we collect, how we use and share it, and what rights you have. It applies to information collected through our Entrata-powered Portals (ProspectPortal, ResidentPortal, and Online Application) and related resident services. BRC is the “business” or “controller” under applicable United States state privacy laws. Entrata and other vendors act as service providers or processors on our behalf.

2. Information We Collect

We collect information necessary to evaluate applications, manage leases, provide resident services, and comply with legal obligations. Categories include:
- Identifiers: name, address, phone number, email, date of birth, Social Security number, driver’s license or government ID.
- Application Data: rental history, employment history, income, references, guarantor or co-signer details.
- Financial Data: payment card information, bank account numbers, ACH information, payment history.
- Resident and Property Data: unit number, lease terms, vehicles, parking permits, maintenance requests.
- Communications: messages, emails, service requests, notices, recorded calls if applicable.
- Technical Data: IP address, device and browser type, login information, cookies, analytics data.
- Sensitive Data (as defined by state law): government ID numbers, background check information, financial account numbers, credit reports.

3. How We Use Your Information

We use personal information for both operational and limited community communication purposes, including to:
- Process rental applications, verify identity, and conduct background and credit checks.
- Draft, execute, and manage leases and related agreements.
- Administer billing, payments, collections, and resident accounts.
- Provide maintenance, utilities, amenities, and resident services.
- Communicate with residents about lease obligations, property matters, emergencies, or community activities.
- Send property updates, promotions, or resident communications (with opt-out options for marketing).
- Comply with laws, regulations, tax, and accounting requirements.
- Ensure safety, prevent fraud, and protect residents, staff, and property.
- Improve resident experience and portal functionality.
We do not sell personal information and we do not permit our providers to use it for unrelated purposes.

4. How We Share Information

We share information only with vetted third-party service providers under written contracts that require confidentiality and security. These may include:
- Property Services: utilities, maintenance vendors, insurance carriers, amenities providers.
- Payment Processing: banks, ACH networks, credit/debit card processors.
- Screening Providers: credit bureaus, background check agencies.
- Technology and Security: Entrata, IT support, cybersecurity vendors.
- Affiliates: BRC-owned or managed entities.
- Legal/Regulatory: where required by law, subpoena, or government authority.
- Business Transfers: in case of sale, transfer, or reorganization of a community or portfolio.
We do not allow third parties to re-use resident data for their own marketing or independent purposes.

5. Resident Privacy Rights

Depending on your state of residence, you may have the right to:
- Access: request the categories and specific pieces of personal data we hold about you.
- Correction: request correction of inaccurate information.
- Deletion: request deletion of your personal data, subject to recordkeeping and legal obligations.
- Portability: receive your data in a portable, readily usable format.
- Opt-Out: decline targeted advertising or “sharing” of data (BRC does not sell personal data).
- Appeal: if a request is denied, you may appeal our decision.

How to exercise your rights:
- Submit a request through BRC’s Data Subject Access Request (DSAR) dashboard (powered by Entrata).
- Or contact us directly (see Section 12).

We will verify your identity before responding and comply within the timeframe required by law. Authorized agents may submit requests on your behalf with valid proof of authority.

6. Cookies and Tracking

Our Portals may use cookies and similar technologies to:
- Maintain secure sessions and resident logins.
- Provide analytics and improve site performance.
- Customize resident experience.
You may manage cookie preferences in your browser. Some features may not function properly if cookies are disabled.

7. Children’s Privacy

Our Portals are not intended for children under 13. We do not knowingly collect data from children. If such information is inadvertently collected, it will be deleted.

8. Data Security

We implement technical, administrative, and physical safeguards to protect personal information, including:
- Encryption in transit and at rest where appropriate.
- Restricted system access based on role and need-to-know.
- Multi-factor authentication for staff accounts.
- Vendor risk assessments and contractual data protection obligations.
- Regular employee training and internal audits.

No system is completely secure, but we take reasonable steps to reduce risks.

9. Data Retention

We retain information only as long as required by law or necessary for legitimate business purposes, including:
- Lease and financial records: retained in line with accounting/tax law (generally 7 years).
- Application and screening data: retained for required legal periods or until no longer needed.
- Maintenance and communications records: during tenancy and a reasonable post-tenancy period.
After retention periods expire, data is securely deleted or de-identified.

10. Third-Party Links

Our Portals may link to third-party websites or services (such as utility providers). We are not responsible for the privacy practices of those third parties. Please review their privacy policies before providing information.

11. Policy Updates

We may update this Privacy Policy from time to time to reflect legal or operational changes. Updates will be posted here with a new “Effective Date.” For material changes, we may also notify residents directly through the Portals or by email.

12. Contact Us

For questions, or to exercise your privacy rights, contact us:

BRC Real Estate Corporation
8000 W 14^th Ave; Lakewood, CO; 80214