Effective Date: September 15, 2025

Sand and Stone Real Estate (“we,” “our,” or “us”) is committed to protecting the privacy of visitors to our website and users of our services. This Privacy Policy explains how we collect, use, store, and share your personal data, and how we comply with global privacy laws, including GDPR (EU), CCPA (California), and CalOPPA (California).

By using our website or services, you consent to the practices described in this policy.

1. Information We Collect

We collect information directly from you, automatically through technology, and from third-party sources:

1.1 Personal Information:

• Name, email, phone number, mailing address, date of birth, and other contact information.
• Financial information provided for insurance policies, home loan inquiries, or real estate transactions.

1.2 Transactional Information:

• Property inquiries, purchases, rentals, and management services.
• Online orders and e-commerce transaction details.

1.3 Technical Information:

• IP address, browser type, operating system, device information, pages visited, and other website activity through cookies, analytics, and tracking technologies.

1.4 Third-Party Information:

• Data received from banking partners, insurance companies, and other authorized third parties to facilitate services.

2. How We Collect Information

• Directly: When you submit forms, email us, call us, or engage with us in person.
• Automatically: Through website cookies, analytics tools, and mobile app interactions.
• From Partners: Authorized banks, insurance companies, or other service providers.

3. How We Use Your Information

We use your personal data for specific, legitimate purposes, including:

• Providing real estate services, including property sales, rentals, and management.
• Facilitating insurance purchases as an authorized agent for Brand X Insurance.
• Qualifying and forwarding home loan leads to authorized banking partners.
• Processing online orders and delivering products purchased from our e-commerce store.
• Responding to inquiries, questions, or requests for support.
• Improving our website, services, products, and user experience.
• Marketing communications, promotions, and updates (with consent where required).
• Complying with legal obligations, dispute resolution, and enforcing agreements.

4. Legal Basis for Processing (GDPR)

For users in the EU, we rely on the following lawful bases for processing personal data:

• Consent: When you agree to receive communications or provide information.
• Contractual Necessity: To fulfill service agreements or transactions.
• Legal Obligation: To comply with applicable laws and regulations.
• Legitimate Interests: To improve services, prevent fraud, and ensure security.

5. How We Share Your Information

We may share your data with:

• Service Providers: Insurance companies, banks, developers, and other partners to provide requested services.
• Professional Advisors: Legal, auditing, and consulting services.
• Regulatory Authorities: When required by law.
• Business Transfers: In connection with mergers, acquisitions, or sale of assets.

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy or to comply with legal, tax, or regulatory obligations.

7. Security of Information

We implement robust measures to protect your personal data:

• Encryption: Our website uses SSL encryption to protect data in transit.
• Spam Protection: Website forms are protected with reCAPTCHA.
• Administrative & Technical Controls: Access controls, firewalls, secure servers, and monitoring to prevent unauthorized access, disclosure, alteration, or destruction.

8. Cookies and Tracking Technologies

We use cookies and similar tools to:

• Enhance website functionality and user experience.
• Analyze website traffic and usage patterns.
• Serve targeted advertising and marketing campaigns.

You may disable cookies in your browser, but some website features may be limited.

9. User Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of personal information where legally permitted.
• Objection/Restriction: Object to or request restriction of processing in certain circumstances.
• Data Portability: Request a copy of your data in a portable format.
• Opt-Out: Opt-out of marketing communications or the sale of personal data (where applicable, e.g., CCPA).

To exercise your rights, contact us at info@sandandstonebelize.com. We will respond in accordance with applicable law.

10. Children’s Privacy

• Our services are not intended for children under 13, and we do not knowingly collect information from children. If you believe we have collected data from a child, please contact us to have it deleted.

11. Legal Compliance

Sand and Stone Real Estate adheres to privacy laws, including GDPR, CCPA, and CalOPPA, by:

• Being transparent about what data we collect, why, and how it is used.
• Ensuring user rights to access, correct, or delete personal information.
• Protecting personal data with appropriate security measures.
• Providing clear, accessible privacy information broken into understandable sections.

12. Changes to This Policy

• We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or technology. Updates will be posted on this page with a revised effective date.

13. Contact Information

• For questions about this Privacy Policy or how we handle personal information:

Sand and Stone Real Estate

• Phone/WhatsApp: +501-613-7663
• Email: info@sandandstonebelize.com
• Address: #22 Canada Hill St., Belmopan City, Belize