Privacy Policy

This policy explains what personal information we collect through nickbadyal.com, why, who helps us handle it, where it is stored, how long we keep it, and the choices and rights you have under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Read it with the Cookie Notice and the CASL page.

1. Who we are and who to contact

“We” means Nick Badyal, REALTOR®, serving clients across New Brunswick: residential real estate with Century 21 Generation Real Estate Advisors and commercial real estate with ONE Commercial Real Estate Advisors. Nick Badyal is responsible for personal information collected through this website and is our privacy contact.

Privacy contact: Nick Badyal
Email: privacy@nickbadyal.com
Mail: 55 Highfield St, Moncton, NB E1C 1L8

If you become a client, your brokerage also keeps records of your transaction under its own privacy policy and legal obligations.

2. What we collect

What you give us in a form. Depending on the form: your first and last name, email, phone, company, city, how you prefer to be contacted, your message, and the answers you choose (for example buying or selling, property type and address, number of bedrooms, timeline, commercial asset type, your role, and a preferred call time). Listing inquiries also record which listing you asked about.

Saved searches. If you ask us to email you new listings, we save your search filters (for example area, price range, property type or school) with your name, email and optional phone.

Consent records. With each submission we record what you agreed to and when: the notice version you saw, whether you ticked the optional market-updates box, and the cookie choices you had made at the time. This lets us prove consent and honour your choices.

How you found us. If you arrived from a link with campaign tags (UTM parameters) or from another website, we record those tags, the referring page and the first page you visited, and attach them to your inquiry. This is kept in your browser tab only until you close it; no cookie is used.

Live chat. If you use the chat, your messages and anything you share there (such as your name or email) are stored in our Odoo system so we can reply. If you allow functional cookies, the chat keeps your session in your browser while a conversation is open; otherwise it loads only when you click “Chat with us”. If you hide the chat button, that choice is remembered in your browser.

Call bookings. “Book a call” opens our booking page on clients.nickbadyal.com (Odoo), where you choose a time and give your name, email, phone and an answer to one question.

Listing views and the nb_ddf_uid cookie. CREA, which supplies the MLS® listings, requires us to report each listing view. If you allow analytics cookies, we set nb_ddf_uid, a random anonymous ID that lasts 12 months, so repeat views from the same browser can be counted together. It contains no name or contact details and cannot be read by page scripts. Without analytics consent, each view is still reported with a one-off random ID, and nothing is stored in your browser (an existing nb_ddf_uid cookie is deleted).

Analytics. Only if you allow analytics cookies, the site may load PostHog analytics, which records pages viewed, clicks, and browser and device type with an anonymous ID (stored in cookies and local storage).

Cookie banner. Your cookie choices are saved in your browser (the nb_cookie_consent cookie and local storage) for 12 months. Full details are in the Cookie Notice.

Technical and security data. Like any website, our hosting provider receives your IP address, browser type and the pages you request. We use your IP address to limit repeated form submissions and block spam. Our logs of rejected submissions do not contain names, email addresses, phone numbers, messages or IP addresses. Submissions rejected as spam are not stored.

We do not knowingly collect information from children, and we do not collect payment information on this site.

3. How we use it

• To reply to your inquiry, prepare a valuation, book a call, or follow up on a listing you asked about.
• To send listings that match your saved search, and market updates, only if you asked for them.
• To send you a confirmation that we received your request, and alert Nick so he can respond quickly.
• To provide the real estate services you ask for, with the right brokerage.
• To keep the site secure, stop spam and abuse, and meet CREA's listing rules.
• With your consent only, to understand how the site is used so we can improve it.
• To keep records of consent and meet our legal and professional obligations.

We do not sell your personal information, we do not use it for advertising, and we do not share your inquiry with other agents. We share it with Century 21 Generation Real Estate Advisors (residential) or ONE Commercial Real Estate Advisors (commercial) only as needed to provide the services you request. New-inquiry alerts are delivered to Nick's brokerage email address for the relevant side of the business. We may also disclose information where the law requires it.

4. Consent, including CASL

Replying to you. When you send an inquiry, you are asking us to contact you about it. We use your details to reply to that request. Under Canada's Anti-Spam Legislation (CASL), this implied consent lasts 6 months from your inquiry. The pop-up forms also ask you to tick a box agreeing that we may contact you about the request.

Marketing emails. We add you to market updates only if you tick the optional, unticked box. A saved search requires you to tick a box agreeing to receive matching listings and occasional market updates. These emails are reviewed and sent personally, not automatically, and every one includes a way to unsubscribe.

Cookies. Analytics and functional cookies are off until you allow them. You can change your choice at any time from the Cookie Notice.

Withdrawing consent. You can withdraw consent at any time: use the unsubscribe option in any email, reply “unsubscribe”, or email privacy@nickbadyal.com. We act on unsubscribe requests within 10 business days, as CASL requires. Withdrawing consent may mean we cannot continue to help with an open request.

5. Service providers and where data is stored

We use the service providers below to run the website and our business. They process personal information on our behalf, only for the purposes described, under their own security and confidentiality commitments. Some of your information is stored or processed outside Canada, mainly in the United States, where it may be accessible to courts, law enforcement and national security authorities under the laws of that country.

Our brokerages, Century 21 Generation Real Estate Advisors and ONE Commercial Real Estate Advisors, receive information only as described in section 3, and handle it under their own privacy policies.

6. How long we keep it

• Inquiries that do not lead to working together: 2 years after our last contact, then deleted.
• Clients: while we are working together, then 7 years after we finish working together, for business, tax and professional records.
• Saved searches and market updates: until you unsubscribe or ask us to stop. After that we keep only your email address and the date, so we do not contact you again.
• Consent records: as long as we keep the related information, plus 3 years, so we can show that we had consent.
• Live chat conversations: 2 years after the conversation, unless they become part of a client file.
• Analytics data (only if you allowed it): no longer than 12 months.
• Cookies: your cookie choices and the nb_ddf_uid listing-view ID last 12 months; the chat session lasts while a conversation is open. See the Cookie Notice.

When information is no longer needed, we delete it or make it anonymous.

7. Your rights: access, correction, withdrawal and deletion

You can ask us to:

• tell you what personal information we hold about you, how we use it and who we have shared it with, and give you a copy;
• correct information that is wrong or incomplete;
• stop sending you marketing emails, or withdraw another consent you gave;
• delete your information, unless we must keep it by law or for an active transaction.

How to ask: email privacy@nickbadyal.com or write to us at 55 Highfield St, Moncton, NB E1C 1L8. Tell us what you are asking for and the email address or phone number you used with us. We may ask you to confirm your identity before we act, to protect your information.

Response time: we will respond within 30 days of receiving your request, as PIPEDA requires. If we need more time, we will tell you within those 30 days, explain why, and let you know how long it will take. Requests are free. If we cannot give you some or all of the information, we will explain why, unless the law prevents us.

8. How we protect it

• The whole site uses encrypted connections (HTTPS), and browsers are told to always use them.
• Our lead database cannot be read or written from the public website; only our server code can save inquiries, using keys that are never sent to your browser.
• Access to inquiries, chats and client records is limited to the people who need it to serve you.
• Forms are protected against spam and abuse with Cloudflare Turnstile, rate limits and other checks.
• A strict content security policy limits which outside services the site can load.
• The live chat runs in a separate, sandboxed frame.
• Our logs of rejected submissions leave out personal details.

No method of storing or sending information is completely secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and the Office of the Privacy Commissioner of Canada, as the law requires.

9. Questions and complaints

If you have a concern about how we handle your personal information, please contact us first at privacy@nickbadyal.com and we will look into it. If you are not satisfied with our response, you can file a complaint with the Office of the Privacy Commissioner of Canada.

10. Changes to this policy

We may update this policy when our practices, service providers or the law change. The date at the top shows when it was last updated. If we make a significant change to how we use information you have already given us, we will ask for your consent where required.