Privacy Policy

Our Commitment to Privacy

American Thistle ("Company," "we," "us," or "our") is a California-based real estate services firm providing property management, investment advisory, and real estate services. This Privacy Policy applies to our website and all related services where we collect personal information.

We are committed to transparency and protecting your personal information. This policy explains how we collect, use, disclose, and safeguard your information in accordance with California's Consumer Privacy Act (CCPA), CalOPPA, and other applicable laws.

Data Collection Methods

We collect information you voluntarily provide and information automatically gathered through your use of our services:

Categories of Personal Information:

• Identifiers (name, email, phone, postal address)
• Financial Information (bank account, investment portfolio, transaction history)
• Property Data (property addresses, assessed values, ownership records)
• Professional Information (employment history, credentials, licensure status)
• Biometric Data (none collected)
• Commercial Information (purchase history, investment preferences)
• Internet Activity (browsing history, search history, interaction data)

Purposes of Data Processing

We use collected information for legitimate business purposes including:

• Providing property management and real estate advisory services
• Processing investment analysis requests and consultations
• Maintaining client portals and account access systems
• Communicating service updates, performance reports, and market analyses
• Facilitating 1031 exchange transactions and tax-deferred strategies
• Compliance with regulatory requirements and legal obligations
• Fraud prevention and security measures
• Website optimization and service improvement
• Marketing communications (with your opt-in consent)

Data Disclosure Practices

We limit data sharing to essential parties only:

• Service Providers: Payment processors, email platforms, cloud hosts (under confidentiality agreements)
• Legal Requirements: Law enforcement, regulatory agencies, court orders
• Business Partners: Property inspectors, contractors, title companies (only with consent)
• Tenant Screening: Third-party providers (for property management clients)
• No Sale of Data: We do NOT sell personal information to third parties
• No Marketing Lists: Your contact information is not shared for external marketing

We require all third parties to maintain equivalent privacy protections and use your data only for specified purposes.

Website Technologies

Our website uses cookies and tracking technologies to:

• Maintain your login session and user preferences
• Understand traffic patterns and user engagement
• Deliver personalized property recommendations
• Measure email and notification effectiveness

Your Options: You may disable cookies through your browser settings. This may limit access to certain features. We do not respond to "Do Not Track" signals but provide manual opt-out mechanisms for tracking.

How Long We Keep Your Data

We retain personal information for as long as necessary to fulfill the purposes for which it was collected:

• Client Records: 7 years after relationship termination (legal/tax requirements)
• Website Visitors: 1 year (analytics and marketing purposes)
• Transactional Data: 10 years (regulatory compliance, 1031 exchanges)
• Marketing Communications: Until you unsubscribe

Upon request, we will delete or anonymize your data where legally permissible and business records are no longer required.

CCPA and Consumer Privacy

Under California law, you have the right to:

• Know: Request what personal information we collect, use, share, or sell
• Delete: Request deletion of personal information (with certain exceptions)
• Opt-Out: Direct us not to sell or share your personal information
• Non-Discrimination: Receive equal service even if you exercise your rights
• Correct: Update or correct inaccurate information we maintain

To exercise your rights, contact us at privacy@americanthistle.com with the subject "CCPA Request." Include your name, email, phone, and the specific right you wish to exercise. We will respond within 45 days.

Protecting Your Information

We implement industry-standard security measures to protect your personal information:

• 256-bit SSL/TLS encryption for data in transit
• Role-based access controls limiting employee access
• Regular security audits and penetration testing
• Secure data centers with redundancy and backup systems
• Employee confidentiality agreements and privacy training
• Incident response protocols and breach notification procedures

No Guarantee: While we employ robust safeguards, no security system is completely impenetrable. By using our services, you acknowledge the inherent risks of online communication and assume responsibility for maintaining confidentiality of your login credentials.

External Websites and Services

Our website may contain links to third-party websites including property listings, investor platforms, and partner sites. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing personal information.

Third-party payment processors (e.g., Stripe, PayPal) maintain their own privacy policies separate from ours. Your financial information is subject to their terms.

Updates to This Policy

We reserve the right to modify this Privacy Policy at any time. Material changes will be communicated via email to active clients or prominent notice on our website. Your continued use of our services after policy changes constitutes acceptance of updated terms.

Last Updated: January 15, 2025

Privacy Questions & Requests

If you have questions about this Privacy Policy or wish to exercise your rights, please contact:

California Residents: You may submit requests to the California Attorney General's office if you believe we have violated your privacy rights.