Privacy Policy

Effective date: September 19, 2026 · Last updated: September 19, 2026

This policy describes the current operation of the local KTVendu website at ktvendu.com, which mirrors the public KTVendu site structure. It is intended to be reviewed before any production publication. It is not legal advice and does not by itself establish that every legal obligation has been met.

1. Who operates this site

The site presents Kathleen Thompson as a residential and commercial real estate broker working with Proprio Direct. The public business contact shown on the site is info@ktvendu.com, and the public business address shown on the site is 3899 Autoroute des Laurentides, bureau 200, Laval, QC H7L 3H7, Canada.

Person responsible for the protection of personal information: [Name and title to be confirmed before publication]. Until this is confirmed, privacy requests may be sent to info@ktvendu.com. The operator should confirm that this mailbox is the official channel for privacy requests before production.

2. What this policy covers

It applies to information collected through the KTVendu website, including its English and French pages, contact and real-estate inquiry forms, guide requests, appraisal requests, and requests for a conversation. It does not replace any separate agreement, brokerage contract, OACIQ form, or notice that may apply to a real-estate transaction.

3. Information that may be collected

The forms actually rendered on the audited home page can request different combinations of:

• first and last name;
• telephone or mobile number;
• email address;
• address and city for a property appraisal request;
• property details, timing, preferences, inquiry text, or other information you choose to provide; and
• your choice on a consent checkbox, where the form includes one.

No public account-creation or comment workflow was observed during this audit. No payment or checkout process was observed. Do not submit information that is not needed for the request, particularly financial, identity-document, health, or other highly sensitive information.

4. How information is collected

• Directly from you: through a form, email, telephone call, or other communication you initiate.
• From the site’s technical operation: WordPress, the theme, WPML language handling, the form system, and the consent interface may process technical information needed to serve a page, remember language or consent choices, prevent abuse, and deliver a form.
• From other sources: not assumed. If information is received from a third party in a brokerage file, the applicable transaction notice or agreement should govern that collection.

Server logs may contain technical request information such as an IP address, date, browser, or requested URL. The local audit could not confirm the production server’s log contents, retention, or access rules, so no more specific statement is made here.

5. Why information is used

Information submitted through a form may be used to:

• respond to your question or request for a call;
• provide a requested buyer’s guide, seller’s guide, market communication, or property-appraisal follow-up;
• understand the property or service context you choose to describe;
• organize follow-up communications and the next step you requested;
• administer, secure, troubleshoot, and improve the website; and
• meet professional, contractual, legal, or dispute-management obligations when they apply.

The current local audit did not confirm Google Analytics, Google Tag Manager, Meta Pixel, Google Ads conversion tags, or another advertising or audience-measurement script loading on the front end. This policy should be updated before any such tool is added.

6. Consent and communications

Several forms include a required checkbox referring to the use of submitted information for communications or for responding to an inquiry. A form may not be submit-able if its required consent is not provided. Consent should be requested in clear language for the specific purpose described beside the checkbox.

You may withdraw consent for optional communications by writing to info@ktvendu.com. Withdrawal does not affect processing that already occurred lawfully or processing that is necessary for a service, a transaction, security, or a legal obligation.

7. Service providers and disclosures

Form submissions are stored by the WS Form system in the WordPress database and are configured on this local site to expire from the form-submission database after 90 days. The same forms are configured to send notification or response emails through WordPress email functions. The production email provider, hosting company, data locations, and any external CRM or marketing service could not be confirmed from this local environment.

Information may therefore be accessible to people or providers who maintain the website, operate hosting or email delivery, or provide a service you requested, but only to the extent needed for the stated purpose and subject to the operator’s instructions and legal obligations. The site was not found to sell personal information.

If information is communicated outside Quebec or entrusted to a provider outside Quebec, the operator must identify the destination, assess the privacy factors, and put the required contractual and other safeguards in place before doing so. The local audit cannot confirm whether this occurs in production.

8. Retention, destruction, and anonymization

The local form configuration specifies a 90-day expiry for saved submissions on the audited forms. The operator should confirm that this setting is enforced, applies to every language and form variant, and is compatible with any separate brokerage-file or professional-record requirements. No blanket 36-month retention period is claimed.

Information should be kept only while it is needed for the purpose for which it was collected, for a service or transaction, for a legal or professional obligation, or to establish or defend a right. When the applicable purpose and required retention period end, it should be securely destroyed or anonymized where permitted and appropriate. The operator should formalize an internal retention schedule.

9. Security

Reasonable safeguards must be selected according to the sensitivity, purpose, quantity, distribution, and medium of the information. This local audit does not verify production hosting, encryption in transit, backups, access controls, email security, plugin-update practices, or incident-response procedures. The local site itself was audited over HTTP, so the previous claim that all forms are encrypted or that production uses SSL has been removed.

10. Access, correction, withdrawal, and complaints

You may write to info@ktvendu.com to ask what personal information is held about you, request correction of inaccurate information, ask how it was collected or used, or withdraw consent where consent is the legal basis. The person responsible should verify your identity only as reasonably necessary and respond within the time required by applicable law.

If your concern is not resolved, you may have recourse to the Commission d’accès à l’information du Québec or another competent authority. The operator should document an internal complaint process and publish the confirmed privacy officer’s title and contact details.

11. Confidentiality incidents

If the operator becomes aware of an incident involving personal information, it should assess the risk of serious harm, take reasonable steps to reduce the risk and prevent recurrence, maintain the required incident register, and notify the Commission and affected people when the law requires it. This policy does not promise that an incident will never occur.

12. Children and third-party sites

The site is designed for real-estate services and is not directed to children. If a person under 14 provides personal information, a parent or guardian should contact the operator so the situation can be assessed under the applicable rules.

Links to third-party sites, portals, social networks, or property services are governed by those parties’ own practices. Leaving KTVendu may expose you to different cookies, terms, and privacy policies.

13. Changes to this policy

This policy may be revised when the site, forms, providers, or legal requirements change. The date at the top will be updated, and material changes should be communicated through an appropriate notice.

14. Contact

For a privacy question, access or correction request, consent withdrawal, or complaint, write to info@ktvendu.com. Confirm the formal privacy officer’s name and title before this page is published on production.