Privacy Policy
How we handle information you submit through this website.
This policy describes what information The BLX Realty collects through this website, why it is collected, and the services used to process it. It covers only this website.
1. Information We Collect
We collect information only when you choose to submit it through a form on this website.
- Contact enquiries: your name, email address, phone number and the message you write.
- Property viewing requests: your first and last name, email address, phone number, your preferred viewing date and time, any additional information you add, and how you heard about us.
- Career applications: your first and last name, email address, phone number, the position you apply for, your experience, your location, your message, and the CV or resume file you upload.
- Newsletter sign-up: your email address.
- User accounts: if you create an account, your email address, phone number, name, and a password. Passwords are stored only as a bcrypt hash, never as readable text.
We do not use analytics, advertising or visitor-tracking scripts on this website.
2. Why We Collect It
- To respond to your enquiry and arrange property viewings you request.
- To assess career applications you submit.
- To send you the newsletter, if you have subscribed.
- To create and sign you in to an account, if you register.
Submitting a contact request, viewing request or career application also creates a basic record against your email and phone number so that your enquiry can be linked to your previous ones.
3. Where It Is Stored and Processed
- Supabase hosts our PostgreSQL database and file storage. Form submissions are stored in that database, and CV and resume uploads are stored in a private storage area that is not publicly listable.
- Vercel hosts and serves this website.
- Microsoft Graph (Microsoft 365) is used to send notification and confirmation emails relating to your enquiry or application.
- Upstash Redis holds short-lived counters derived from your IP address. These exist only to rate-limit form submissions and login attempts and to prevent abuse.
- Google Maps is loaded on property and contact pages to display maps. When a map loads, your browser contacts Google directly and Google receives that request under its own privacy policy.
4. Cookies and Sessions
This website sets a session cookie only when you sign in. It is an httpOnly cookie, meaning it cannot be read by JavaScript in your browser, and it is marked secure in production. It exists to keep you signed in, and signing out clears it. We do not set advertising or tracking cookies.
5. Access to Your Information
Enquiries, viewing requests, career applications and uploaded CVs are accessible to authorised BLX Realty administrators through a password-protected admin area. Uploaded CVs are served only through an authenticated admin route and are not published on the public website.
6. Contacting Us About Your Information
If you have a question about the information you have submitted, or you would like it corrected or removed, contact us at Discoverblr@theblxrealty.com or through our contact page.
Still to be completed
This page currently documents only what can be confirmed from how the website operates. The following require confirmation from The BLX Realty before they can be stated here, and have deliberately been left out rather than assumed:
- the registered legal entity name and address of the data controller
- how long each type of submission is kept before deletion
- the governing law and jurisdiction for this policy
- which data-protection regimes apply and what rights you have under them, and how to exercise them
- whether information is shared with any party not listed in section 3
- a named contact for data-protection questions, if one is appointed
