II. The Kinds of Information We Collect
A. Information You Provide
We collect content, images, and information you provide to us when you access our Services, including when you complete webforms on www.tomobrokerage.com; request a referral; mail or upload documents to us; communicate with us about our Services via comments, direct message, e-mail, SMS message, or telephone; or respond to one of our surveys.
Categories of information you may choose to provide to us include:
- Your name, address, telephone number, and e-mail address;
- Details about your home and neighborhood;
- Circumstances related to your purchase or sale of a home that might help us tailor our Services to you;
- Reviews or comments you leave on our website, mobile application, or on other public websites; and
- Marital status.
B. Information We Collect From Your Device(s)
We may collect the following information from the device that you use to access our Services:
- Device attributes such as the operating system, hardware and software versions, battery level, signal strength, bandwidth, available storage space, browser type, app and file names and types, and plugins;
- Information about operations and behaviors performed on the device, such as mouse movements (which can help distinguish humans from bots) or whether a window is in the foreground or background;
- Identifiers unique to you, your device, or your account(s), such as device IDs, advertising IDs, and other similar static ID numbers such as those from apps or accounts you use;
- Information you allow us to receive through device settings you turn on, such as access to your GPS location;
- Network and connection information such as the name of your mobile operator or ISP, language, time zone, mobile phone number, and IP address; and
- Data from cookies, tags, pixels, web beacons, and log files stored on your device, including cookie IDs, page views, how often you visit our website or mobile application, and links you click on. Please note our Services do not support Do Not Track signals from your browser.
We generally use this information for your convenience and to improve our Services. For instance, we may use it to: (i) remember your information so that you do not have to re-enter it; (ii) provide you with customized content and information, including advertising; (iii) monitor the effectiveness of our Services; (iv) monitor aggregate metrics such as traffic and usage patterns; and (v) diagnose or fix technology problems.
C. Information We Collect When You Call Us
We may record telephone calls between you and our customer service team. We do this to make sure we provide you with the best possible service. Our customer service team members also enter certain information you provide into our customer service databases to ensure continuity and consistency throughout your experience with Tomo Brokerage.
D. Information We Collect from Partners, Service Providers, and Affiliated Businesses
We may collect information about you from our partners, service providers, and affiliated businesses in order to provide the services, along with certain related products and services such as homeowners insurance, title insurance, and escrow services. Information we gather about you from our partners, service providers, and affiliated businesses may include information about how you engaged with a Tomo Brokerage advertisement or social media post.
III. How We Use This Information
A. With Your Consent
We may share your information when you specifically direct us to do so. Examples of situations where we share your information with your consent include:
- Escrow and title. With your consent, we may share your information with home escrow and title insurance providers.
- Other related partners with whom you ask us to share your information. Tomo Brokerage will share your personal information with other parties at your direction.
- Real estate brokers and salespersons. If you request, we may share your information with local licensed real estate brokers or salespersons to assist you in purchasing or selling a home. If you also obtain financing from Tomo Mortgage, LLC, our general practice is to share regular loan application status updates with a borrower’s real estate agent. The updates help ensure coordination between the home buying and financing processes. If you do not want us to share those updates with your real estate agent, you can opt-out by talking to your mortgage consultant.
B. With Our Affiliated Companies
We may share your information between our affiliated companies (Tomo Mortgage, LLC and Tomo Networks, Inc.) to the extent allowed by law.
C. With Service Providers Who Facilitate Our Ability To Provide You With The Services
We may share your information with service providers, including payment processors, technology and infrastructure providers, digital communications services, commercial data and market research analysts, consumer report providers, auditors and accountants, physical site security providers, IT security and bug-fix partners, and other providers, who perform services for and on behalf of Tomo Brokerage for the sole benefit of us and our customers.
D. With Law Enforcement, Courts, or Government Agencies
We may share your information as necessary to respond to legal process or to regulatory authorities (such as pursuant to a subpoena, warrant, investigative demand from law enforcement, regulators, or others; national or international security letters; etc.); to investigate, prevent, or take action regarding suspected or actual illegal activities (including fraud) and security or technical issues; to respond to or participate in commercial disputes (e.g., lawsuits or investigations); or to protect against fraud, claims, or other liability or harm to you, us, or others.
V. When Third Parties Benefit from Tomo Brokerage Sharing Your Information with Them
A. "Selling" Your Data
Tomo Brokerage is not a data broker. However, in some circumstances we share your information with third parties not owned by or co-branded with Tomo Brokerage that benefit directly from our sharing your information with them. We want you to be aware of these sharing arrangements so that you can exercise your rights to opt-out of such sharing, as described in Section VII, below.
- Social media. If you use our services, we may provide information about you to social media networks who will use it to better target our advertising to you and other social media users similar to you (e.g., same age, geographic area, etc.) who may benefit from our Services.
- Vendor due diligence. If you are an individual or business wishing to provide services to Tomo Brokerage, we may share your information with a due diligence service as part of our obligation to perform vendor due diligence. The due diligence provider may use this information to inform and further refine its risk analysis tools.
VI. How We Protect Your Information
We use commercially reasonable physical, electronic, administrative, and procedural safeguards to preserve the integrity, confidentiality, and security of all personal information collected through the Services. However, no security measure, system, or control is infallible. Therefore, like all businesses, we cannot guarantee that our systems are invulnerable to attack or misuse.
B. Your Role
You have a major role in the security and privacy of your own information. For example, you should not provide us with personal information that we do not request. Additionally, you are responsible for controlling access to any personal computing device through which your information may be stored or accessed. You are also responsible for safeguarding any passwords or other log-in credentials that may be used to access your information, including in the Tomo Brokerage environment. We recommend that you log out of any account when you are done using it.
C. Third Parties
Please remember to review the privacy settings and security policies of third-party sites and services that you use, such as social networks. We are not responsible for the privacy or security measures of any third party.
D. Incident Response
In the event that the security of any personal information under our control is compromised, we will take reasonable steps to investigate and mitigate the situation, including, when appropriate, notifying those individuals whose information may have been compromised and taking other steps in accordance with applicable laws and regulations.
VII. Your Rights and How To Exercise Them
A. Right to Opt-Out of Sales of Your Personal Information
You have a right to opt-out of sales of your personal information. You may request to opt-out by contacting email@example.com. We will respond to a request to opt-out of future sales within thirty days after we receive it.
B. Right to Know About the Personal Information We Collect and Share
You have the right to request that we tell you about our collection, use, and sharing of your personal information over the past twelve months. Once we receive and validate your request, we may disclose to you:
- The categories of personal information we collected about you;
- The categories of sources for the personal information we collected about you;
- Our business or commercial purposes for collecting or selling that personal information;
- The categories of third parties with whom we share that personal information;
- The specific pieces of personal information we collected about you (also called a data portability request);
- The categories of personal information about you that we disclosed to third parties for a business purpose and the categories of recipients of that information; and
- The categories of personal information about you that we sold and the categories of recipients of that information.
C. Right to Delete the Personal Information We Collect And Share
You have the right to request that we delete your personal information, subject to certain exceptions. Depending on the nature of the data, deletion may consist of erasing, aggregating, or anonymizing your information. After we receive and validate your request, we will delete and direct our service providers to delete your personal information, unless an exception applies. We may deny your deletion request, in whole or in part, if retaining the information is necessary for us or our service providers to:
- Complete the transaction for which we collected the personal information, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you, or otherwise perform our contract with you;
- Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
- Debug to identify and repair errors that impair existing intended functionality;
- Enable solely internal uses that are reasonably aligned with your expectations based on your relationship with us; or
- Comply with a legal obligation or make other internal and lawful uses of that information that are compatible with the context in which you provided it.
Please be aware that, once deleted, your data, including your account and activities, cannot be restored.
D. How to Make a Request to Know or Delete
You may, without charge, request to know or delete your personal information by contacting firstname.lastname@example.org. Only you or an authorized agent may make a request to access your personal information. You have the right to make a free request twice during any twelve-month period. The request must:
- Provide sufficient information for us to reasonably verify that you are the person, or an authorized representative of the person, about whom we collected the personal information; and
- Describe your request with sufficient detail for us to properly understand, evaluate, and respond to it.
For your safety and the safety of your information, we cannot fulfill a request to provide or delete personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you or an individual for whom you are a lawful agent. We may require additional verification before deleting or disclosing particularly sensitive information. We will only use the verification information you provide for the purpose of verifying your identity or authority to make the request.
Submitting a request does not require you to create an account with us.
We do not charge you a fee to process or respond to your verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request.
We will not discriminate against you for exercising any of your rights under Section VII. Unless permitted by law, we will not:
- Deny you goods or services;
- Charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties;
- Provide you a different level of quality of goods or services; or
- Suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services.
IX. Additional Privacy Notice for California Residents
It applies to visitors, client’s, users, and others who reside in the State of California (“consumers” or “you”). This notice contains a description of our online and offline practices regarding the collection, use, disclosure, and sale of personal information and of the rights of California residents regarding their personal information.
Any terms defined in the CCPA have the same meaning when used in this Privacy Notice.
B. Information We Collect
What is Collected
Personal information categories listed in the California Customer Records statue
A name, alias, physical characteristics or description, address, telephone number, Internet Protocol (IP) address, and email address. Some personal information included in this category may overlap with other categories.
Protected classification characteristics under California or federal law
Age (40 years or older), race, color, ancestry, national origin, citizenship, religion or creed, marital status, medical condition, physical or mental disability, sex (including gender, gender identity, gender expression, pregnancy or childbirth, and related medical conditions), sexual orientation, veteran or military status.
Records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Internet or other similar network activity
Browsing history, search history, information on your interaction with a website, application, or advertisement.
Physical location or movements
C. What is Not Collected
Genetic, physiological, behavioral, and biological characteristics, or activity patterns used to extract a template or other identifier or identifying information, such as, fingerprints, faceprints, and voiceprints, iris or retina scans, keystroke, gait, or other physical patterns, and sleep, health, or exercise data.
Non-public education information
Education records directly related to a student maintained by an educational institution or party acting on its behalf, such as grades, transcripts, class lists, student schedules, student identification codes, student financial information, or student disciplinary records.
Interferences drawn from other personal information
Audio, electronic, visual, thermal, olfactory, or similar information
D. Personal Information DOES NOT Include:
- Publicly available information from federal, state, or local government records.
- De-identified or aggregated consumer information.
- Information excluded from the CCPA’s scope, such as personal information covered by certain sector-specific privacy laws, including the Fair Credit Reporting Act (FRCA), the Gramm-Leach-Bliley Act (GLBA) or California Financial Information Privacy Act (FIPA) and the Driver’s Privacy Protection Act of 1994.
We obtain the categories of personal information listed above from the following categories of sources:
- Directly from our customers or their agents. For example, from documents that our customers provide to us related to the services that we are asked to perform.
- Indirectly from our customers or their agents. For example, through information we collect from our customers in the course of providing services to them.