Notice: SRM Urban is adopting a new Privacy Policy, which is set forth below in full, effective as of October 15, 2020
SRM URBAN PRIVACY POLICY
Effective Date: October 15, 2020
Last Revised: January 1, 2023
1. GENERAL
This SRM Urban Privacy Policy (“Privacy Policy”) describes how SRM Urban and its affiliates (collectively, “SRM,” “we” “us” or “our”) treat and use data and information about you (“user”, “you” or “your”) that SRM collects and receives directly and indirectly from you, about you through and from the Websites (as defined below), the Services (as defined below), and third parties. This policy applies to all visitors, users, residents, prospective residents, tenants, prospective tenants, employees, job applicants, contractors, consumers and others who reside in the State of California. We adopt this notice to comply with the California Consumer Privacy Act of 2018 (CCPA) and any terms defined in the CCPA have the same meaning when used in this notice.
The “Websites” means all websites operated now and in the future by or for SRM, any websites or internet locations to which this Privacy Policy is linked and include without limitation: srmurban.com and all other SRM websites linked to these Terms now or in the future.
The “Services” means those services, products or features SRM may offer from time to time to residents, employees, job applicants, contractors, and consumers, including, without limitation, listings of available residential and commercial properties, online rental application services, online rental or lease payment services, online service request capability, community classifieds, online career center and job application capability, testimonial submission center, community rewards programs, and event calendars and newsletters.
We want you to understand how we collect, use, and disclose data collected online and offline, including your interactions with our Services and Websites, specifically the portions of the Websites or Services that require you to register and/or log in to gain access, fill out forms or otherwise provide information about you.
2. ACCEPTANCE OF PRIVACY POLICY
This Privacy Policy is made part of, and incorporated into, SRM’s Terms of Use (“Terms”) by reference. As described in the Terms, by accessing or using each Website and Service, and moving forward to provide your personal information, you acknowledge that you have read, understood and agree to be bound by the Terms, including this Privacy Policy, which form an agreement that is effective as if you had signed it.
3. TYPES AND COLLECTION OF INFORMATION
We collect information that identifies, relates to, describes, references, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household ("personal information"). In each case, we collect and disclose your personal information for legitimate business purposes. SRM will not collect additional categories of personal information or collect personal information from additional sources without notifying you.
Over the last twelve (12) months, SRM has collected personal information that falls into the following categories of information from residents, potential residents or consumers:
Category A: Identifiers, such as a real name, alias, postal address, Internet Protocol address, email address, Social Security number, driver's license number, passport number, or other similar identifiers.
Category B: Personal information categories listed in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), such as a name, signature, Social Security number, address, telephone number, passport number, driver's license or state identification card number, employment, employment history, bank account number, medical information or health insurance information.
Category C: Protected classification characteristics under California or federal law, which includes age, race, color, ancestry, national origin, citizenship, marital status, medical condition, physical or mental disability, sex, including gender, protected medical leaves and related medical conditions, sexual orientation, veteran or military status.
Category D: Internet or other similar network activity, such as browsing history, search history, personal social media activity, personal email, online transactions, information on a consumer’s interaction with a website, application, or advertisement.
Category E: Professional or employment-related information, including current or past job history.
Category F: Sensitive Personal Information, including Government ID, account log-in, financial accounts information in combination with any required access credentials, precise geolocation, and racial or ethnic origin; however, this information is collected and used consistent with the permissible uses under the CCPA.
Category G: Personal information related to COVID-19 tracking and tracing, including, to the extent volunteered by resident or potential resident, medical information and COVID-19 test results, travel history, information about close contacts, household members and other contact tracing related information, and details regarding the onset of COVID-19 symptoms.
SRM obtains the categories of personal information listed above from the following categories of sources:
- Directly from you. For example, from forms you complete, e-mail, text, or voicemail communications from you, and other SRM Services you may interact with.
- Indirectly from you. For example, from observing your actions on our Website and other Services we may provide.
- From third parties. For example, from brokers or third parties we use to learn of prospective tenants, from government agencies such as the DMV pursuant to background checks, application processing or payment processing service providers, and from publicly available sources.
4. USE OF PERSONAL INFORMATION
We may use or disclose the personal information we collect from you for one or more business purposes. SRM will not use the personal information we collect from you for materially different, unrelated, or incompatible purposes without providing you notice.
SRM may use or disclose your personal information for one or more of the following business purposes:
- To fulfill a contract with you or meet the reason you provided the information. For example, if you share your name and contact information to request tour of a property, we will use that personal information order to process an application to lease or for payment of rent or other sums due to us.
- To provide you with support and to respond to your inquiries and requests for services, including to investigate and address your concerns and monitor and improve our responses.
- To provide you with email alerts and other notices concerning our Services or events or news that may be of interest to you.
- To keep a record of contact and address information and correspond with you about the Services.
- To create, maintain, customize, and secure your account with us and to prevent transactional fraud.
- To provide, support, personalize, and develop our Website and Services.
- As described to you when collecting your personal information or as otherwise set forth in the CCPA.
- As we believe necessary or appropriate, under applicable law, including to (i) comply with legal process or legal obligations, (ii) to respond to law enforcement requests and as required by applicable law, court order or governmental regulations, (iii) to protect our operations or those of any of our affiliates, (iv) to protect the rights, privacy, safety or property of us, our clients or others, or (v) to allow us to pursue available remedies or limit the damages that we may sustain.
- To help maintain the safety, security, and integrity of our Website, Services, databases and other technology assets, and business.
- To evaluate or conduct a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of SRM’s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by SRM is among the assets transferred.
- To evaluate the risk that your presence may pose to others in the workplace as a result of the COVID-19 pandemic.
- To help maintain the safety and security of all employees, visitors, and contractors to all SRM properties or facilities.
5. DISCLOSURE OF PERSONAL INFORMATION
SRM may disclose your personal information to a third party for a business purpose. When we disclose personal information for a business purpose, we enter a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract.
Disclosures of Personal Information for a Business Purpose
In the preceding twelve (12) months, SRM has disclosed the following categories of personal information for a business purpose:
Category A: Identifiers. The personal information from this category may be disclosed to third party payment processing providers; parking vendors; insurance providers; security vendors; including onsite at properties and cyber; government agencies; financial institutions; professional service providers; including attorneys and accountants.
Category B: California Customer Records personal information categories. The personal information from this category may be disclosed to third party payment processing providers; parking vendors; insurance providers; security vendors; including onsite at properties and cyber; government agencies; financial institutions; professional service providers; including attorneys and accountants.
Category C: Protected classification characteristics under California or federal law. The personal information from this category may be disclosed to third party payment processing providers; parking vendors; insurance providers; security vendors; including onsite at properties and cyber; government agencies; financial institutions; professional service providers; including attorneys and accountants.
Category D: Internet or other similar network activity. The personal information from this category may be disclosed to IT service providers; and security vendors, including cyber.
Category E: Professional or employment-related information. The personal information from this category may be disclosed to third party payment processing providers; parking vendors; insurance providers; security vendors; including onsite at properties and cyber; government agencies; financial institutions; professional service providers; including attorneys and accountants.
Category F: Sensitive Personal Information. The personal information from this category may be disclosed to human resources information service providers; financial investment and financial institution service providers; insurance providers; payroll service providers; third party payment processing providers; professional service providers such as attorneys.
Category G: Personal information related to COVID-19 tracking and tracing. The personal information from this category may be disclosed to government agencies.
Sales and Sharing of Personal Information
In the preceding twelve (12) months, SRM has not sold personal information.
In the preceding twelve (12) months, SRM has not shared your personal information for purposes of targeted or cross-contextual behavioral advertising.
6. RETENTION PERIODS
SRM will retain personal information, including sensitive personal information, for no longer than is reasonably necessary for its disclosed business purposes.
Category A: Identifiers. The personal information from this category may be retained for four (4) years after either of: (i) the date of resident’s move-out, (ii) the date of application, or (iii) the date of sale of property where resident lived.
Category B: California Customer Records personal information categories. The personal information from this category may be retained for four (4) years after either of: (i) the date of resident’s move-out, (ii) the date of application, or (iii) the date of sale of property where resident lived.
Category C: Protected classification characteristics under California or federal law. The personal information from this category may be retained for four (4) years after either of: (i) the date of resident’s move-out, (ii) the date of application, or (iii) the date of sale of property where resident lived.
Category D: INTENTIONALLY OMITTED.
Category E: Professional or employment-related information. The personal information from this category may be retained for four (4) years after either of: (i) the date of resident’s move-out, (ii) the date of application, or (iii) the date of sale of property where resident lived.
Category F: Sensitive Personal Information. The personal information from this category may be retained for four (4) years after either of: (i) the date of resident’s move-out, (ii) the date of application, or (iii) the date of sale of property where resident lived.
Category G: Personal information related to COVID-19 tracking and tracing. The personal information from this category may be retained for one (1) year after the date of collection.
7. COOKIE AND OTHER TRACKING TECHNOLOGIES
- Cookies. Cookies are bits of electronic information that can be transferred to your computer or other electronic device to uniquely identify your browser. When you use the Websites and Services, we may place one or more cookies on your computer or other electronic device. We may use cookies to connect your activity on the Websites with other information we store about you in your account profile or your prior interactions on the Websites to, for example, store your preferences. The use of cookies helps us improve the quality of the Websites and Services for you, by identifying information which is most interesting to you, tracking trends, measuring the effectiveness of advertising, or storing information you may want to retrieve on a regular basis, such as your favorite properties.
At any time, you may adjust settings on your browser to refuse cookies according to the instructions related to your browser. You may also adjust settings on your mobile device and mobile browser regarding cookies and sharing of certain information, such as your mobile device model or the language your mobile device uses, by adjusting the privacy and security settings on your mobile device. Please refer to the instructions provided by your mobile service provider or mobile device manufacturer. However, if you choose to disable cookies, many of the Websites and Services will not operate properly.
- Web Beacons. The pages on the Websites may include Web beacons or pixels, which are electronic files to count users who have visited that page, to track activity over time and across different websites, to identify certain cookies on the computer or other electronic device accessing that page, or to collect other related information, and this information may be associated with your unique browser, device identifier, or Internet Protocol address. We may, for example, implement a pixel on the pages of the Websites where you view a certain advertisement so that we can track whether you visit a website associated with that advertisement at a later time.
- Third Party Analytics and Other Tracking Tools. We use Google Analytics, which collects information about our users of our Websites and reports usage trends to us, without identifying individual visitors. Google Analytics may collect similar information from you when you are on other websites. To learn more about Google Analytics, including how to opt out, please visit https://tools.google.com/dlpage/gaoptout.
Other than the use of cookies set forth above, we do not currently use other third-party analytics programs or knowingly permit third parties to use cookies, web beacons, or other tracking on or from our Websites.
- Do Not Track and Opt-Out Preference Signals. SRM does not currently sell or share your personal information for targeted or cross contextual behavioral advertising.
8. THIRD PARTY WEBSITES
Please be aware that our Websites may contain links to other sites on the Internet that are owned and operated by third parties, including, without limitation, third party providers of certain Services such as our third-party payment processing providers. The information practices of those websites linked to our Websites are not covered by this Privacy Policy and, except as required under applicable law, we are not responsible for the privacy policies of websites to which the Websites link. If you provide any information to such third parties websites, different rules regarding the collection and use of your personally identifiable information may apply. We do not control the collection of this information and we suggest you review such third party’s privacy policies before providing any data to them. You should contact these entities directly if you have any questions about their use of the information that they collect.
9. YOUR RIGHTS AND CHOICES
The CCPA provides consumers (California residents) with specific rights regarding their personal information, including the right to access specific information, the right to data portability, the right to correct personal information, and the right to request deletion of your information in certain circumstances.
For residents, potential residents, or consumers, learn more about your rights under the CCPA.
Access to Specific Information and Data Portability Rights
You have the right to request that SRM disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request (see Exercising Rights), we will disclose to you:
- The categories of personal information we collected about you.
- The categories of sources for the personal information we collected about you.
- Our business or commercial purpose for collecting that personal information.
- The categories of third parties with whom we share that personal information.
- The specific pieces of personal information we collected about you (also called a data portability request).
- If we disclosed your personal information for a business purpose, we will identify the personal information categories that each category of recipient obtained.
You have the right to request SRM correct any inaccurate personal information we may hold about you. Once we receive and confirm your verifiable consumer request (see Exercising Rights), we will use commercially reasonable efforts to correct inaccurate personal information, taking into the account the nature of the personal information and the purpose for our processing.
Deletion Request Rights
You have the right to request that SRM delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request (see Exercising Rights), we will delete (and direct our service providers to delete) your personal information from our records, unless an exception applies.
To exercise the access, data portability, correction, and deletion rights described above, please submit a verifiable consumer request to us by either:
- Calling us toll-free at: (833) 965-2107
- Emailing us at: communications@srmurban.com
Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child. To designate an authorized agent to make a request on your behalf, please provide us with a written authorization that identifies the agent and describes the specific authority that has been assigned to the agent. Please note we may need to verify the identity of the agent before we can comply with your request.
You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:
- Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information or an authorized representative.
- Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it.
We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.
We will only use personal information provided in a verifiable consumer request to verify the requestor's identity or authority to make the request.
We will confirm receipt of the request within ten (10) days of its receipt. We endeavor to respond to a verifiable consumer request within forty-five (45) days of its receipt. If we require more time (up to 45 days), we will inform you of the reason and extension period in writing.
Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request's receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your personal information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance.
We do not charge a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
10. NON-DISCRIMINATION
We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not:
- Deny you goods or Services.
- Charge you different prices or rates for goods or Services, including through granting discounts or other benefits, or imposing penalties.
- Provide you a different level or quality of goods or Services.
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or Services.
11. INFORMATION SECURITY, RETENTION AND STORAGE
We have implemented various reasonable security measures for the purpose of protecting your personal information against unlawful destruction or accidental loss, alteration, unauthorized disclosure or access and against other unlawful forms of processing. No transmission of information via the Internet can be entirely secure, however, so please always use caution when submitting personal information to the Websites and Services. Any transmission of personal information is at your own risk and SRM is not responsible for circumvention of any privacy settings or security measures contained on the Websites. We will retain your personal information for as long as you have an active account, as needed to provide you with the Services, to comply with our legal, financial reporting, or compliance obligations, and to enforce this Privacy Policy and our Terms.
12. CHILDREN
The Websites are directed to persons 18 years of age or older. SRM and the Websites do not knowingly collect information from or provide Services to children under age 18. If you are under age 13, you are not permitted to use the Websites or any Services therein, or to submit any personally identifiable information to the Websites. Please see the Terms for more information regarding use of the Websites and Services by persons under age 18.
13. OTHER CALIFORNIA PRIVACY RIGHTS
California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our Website that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to communications@srmurban.com or call us at the toll-free number: (833) 965-2107.
14. INQUIRIES AND COMPLAINTS
If you have questions or concerns regarding this Privacy Policy or about privacy at SRM, please contact us by sending an email to communications@srmurban.com or calling us at the toll-free number: (833) 965-2107.
15. MODIFICATIONS OF THE PRIVACY POLICY
We reserve the right to modify this Privacy Policy at any time. We encourage you to frequently review the Privacy Policy for any modifications. You can determine when the Privacy Policy was last revised by referring to the “Last Revised” legend at the top of this page. When we make material changes to this privacy notice, we will notify you of the changes and post the updated notice on our Website and update the notice's effective date. Your continued use of our Services, Website, and other offerings following the posting of changes constitutes your acceptance of such changes.
16. CONTACT INFORMATION
If you have any questions or comments about this notice, the ways in which SRM collects and uses your information described below and in the Privacy Policy, your choices, and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at:
Phone (toll-free): (833) 965-2107
Email: communications@srmurban.com