Greater Rochester Association of REALTORS® Privacy Policy

Last Updated: March 17, 2026

INTRODUCTION

The Greater Rochester Association of Realtors ("GRAR," "we," "us," or "our") respects the privacy of our users ("User," "you," or "your"). This Privacy Policy explains how we collect, use, disclose, and otherwise process your information in connection with our www.search.grar.net website ("Site"). By using our Site, you agree to the collection and use of your information in accordance with this Policy.

Privacy Highlights

This summary provides key points from our Privacy Policy. You can find more details about any of these topics by clicking the respective links in our Table of Contents.

What personal information do we collect?

When you visit our Site, we collect and process personal information to assist you with finding the real estate related information you seek. We also collect and process personal information so we can share additional information we think you will find beneficial, and to help us improve and administer our Site and services.

With whom do we share your personal information?

We do not sell your personal information. We may share personal information with our service providers and with other third parties, including advertisers, as defined in this Policy.

How do we keep your personal information safe?

We have administrative, technical and physical safeguards in place to protect your personal information. However, no electronic transmission or storage of personal information is 100% secure; and, as such, we cannot guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to circumvent our security efforts and improperly access your personal information.

What are your privacy rights?

Depending on where you are located or live, applicable privacy laws may give you certain rights regarding your personal information. See the section below entitled "What are your privacy rights?" for details on those rights and how to exercise them.

Table of Contents

1. Who are we?
2. What is personal information?
3. How do we collect personal information from you?
4. What personal information do we collect from you and how do we use it?
5. Cookies and other technologies
6. With whom do we share your personal information?
7. How do we store and protect your personal information?
8. How long do we retain your personal information?
9. What are your privacy rights?
10. Children's privacy
11. Links to other websites and services
12. How to exercise your privacy rights
13. Contact us
14. Changes to the Policy

WHO ARE WE?

The Greater Rochester Association of Realtors ("we" or "us") is the sole owner of the www.search.grar.net website (as defined above, the "Site"). When we collect your personal information, we are acting as a "Controller" of your data. A Controller is an entity that determines the purposes and means of processing of your personal information.

WHAT IS PERSONAL INFORMATION?

When we use the term "personal information" in this Privacy Policy, we mean any data or information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked with a particular natural person or household or any other data or information that constitutes "personal data", "personal information," or "personally identifiable information" as those terms are defined under applicable privacy laws.

HOW DO WE COLLECT PERSONAL INFORMATION FROM YOU?

We collect personal information in three ways: (1) we collect the information you provide to us, (2) we automatically collect certain information (for example, through our Site) and (3) we collect information from third parties. Each of these collection practices is described further below.

WHAT PERSONAL INFORMATION DO WE COLLECT FROM YOU AND HOW DO WE USE IT?

We collect the personal information you provide to us. During your visit to our Site, you may choose to provide us with certain information in order to:

Create a User Account.

We collect certain information from you in order to establish a user account. This information includes basic demographic information, such as: your name, email address, telephone number, and password information. If you are a licensed real estate professional, we may also collect your licensing information and website URL. You may edit this information at any time by logging into your account.

Profile Settings.

A profile is a set of information for each individual user that details viewing and account preferences within their User Account. Profile settings include your preferences for receiving push notifications and emails regarding your account or the services. If you wish to opt-out from receiving these types of communications, you may do so at any time by logging into your account and toggling the opt-out button accordingly.

We automatically collect certain information. When visiting our Site, we automatically collect information about your computer hardware and software. This information can include: your IP address, browser type, domain names, access times and referring website addresses. This information is used for the operation of the Site, to maintain quality of the Site, and to provide general statistics regarding use of our Site and services.

Cookies and other technologies

We use cookies to allow us to personalize your visits, keep track of your preferences and learn about the way in which you use our Site. A cookie is a small file that is placed on your computer when you visit our Site and allows us to recognize you as a user. We employ both "Essential" and "Non-essential" cookies. Essential cookies are necessary to the effective operation of our Site and make the interaction between you and the Site faster and easier. Non-essential cookies are not required for a website to function but are used for other purposes, such as analytics or advertising.

We also use web beacons, which are tiny graphics with a unique identifier that allow us to track usage patterns, count users who have visited a particular page, etc. Web beacons only collect limited information, including a cookie number, time and date of a page view, and a description of the page on which the web beacon resides. These beacons are used to track the effectiveness of Site. The information generated related to our Site is used to create reports about the use of the Site. We use this information to develop, test and further improve our Site.

We may also use services hosted by third parties, such as Google Analytics, a web analytics service provided by Google, Inc., to assist in providing our Site and services. Google Analytics uses cookies and other tracking technologies to help us analyze how users use our Site. The information generated by the cookie or other tracking technology about your use of the Site (including your IP address) will be transmitted to, and stored by, Google on their servers. Google will use this information for the purpose of evaluating your use of the Site, compiling reports on Site activity for us and providing other services relating to Site activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. By using the Site, you consent to the processing of data about you by Google in the manner and for the purposes set out above. To opt out of tracking by Google Analytics, click here.

Your browser settings may also allow you to transmit a "Do Not Track" signal when you visit various websites. Like many websites, our Site does not use or respond to "Do Not Track" signals in your web browser. To learn more about "Do Not Track" signals, you can visit http://www.allaboutdnt.com/.

Note, certain tracking technologies we use may send information concerning your browsing session to third parties. For example, Google Analytics trackers can send data concerning search terms placed into a search bar for analytics purposes. By using our Sites, you consent to all such transmission to such third parties.

We also collect information from third parties.

We may also collect information about you from social media or other publicly available sources. When an individual interacts with our Site through various social media networks, such as when someone "Likes" us on Facebook or follows us or shares our content on Google, Instagram, X or other social networks, we may receive some information about individuals that they permit the social network to share with third parties. The data we receive is dependent upon an individual's privacy settings with the social network, and may include your profile information, profile picture, gender, username, user ID associated with your social media account, age range, language, country, and any other information you permit the social network to share with third parties. Individuals should always review and, if necessary, adjust their privacy settings on third-party websites and social media networks and services before sharing information and/or linking or connecting them to other services. We use this information to operate, maintain, and provide to you the features and functionality of the Site, as well as to communicate directly with you, such as to send you email messages about our Site or services that may be of interest to you.

With whom do we share your personal information?

We may share information collected about you in the following ways:

(1) With service providers. We work with certain third parties who provide services to us, such as managing visitor/customer information, managing our marketing and promotions activities, managing certain information technology systems, and conducting other activities of the kind described elsewhere in this Privacy Policy on our behalf. In such cases, we may disclose your personal information to such service providers, who act as processors of your data on our behalf. We do not authorize any of these service providers to make any use of your information other than for our benefit.

(2) With analytics service providers and advertisers. We permit third parties to use cookies, web beacons, and similar tracking technologies on our Site. Such parties may collect information about how you use our Site and other websites over time and across different services. This information may be used to, among other things, analyze and track data, determine the popularity of certain content, and better understand your online activity. Information collected in this fashion may be used for targeted marketing purposes – namely, to deliver advertisements targeted to your interests and preferences. To learn about your choices regarding this sharing of your information please see "How to Exercise Your Privacy Rights" section below.

(3) With third parties for legal reasons. We would share information about you if we reasonably believe that disclosing the information is needed to: (i) comply with any valid legal process, governmental request, or applicable law, rule, or regulation; (ii) investigate, remedy, or enforce potential violations of our Terms of Use or Privacy Policy; (iii) protect the rights, property, and safety of us, our users, or others; or (iv) detect and resolve any fraud or security concerns.

(4) With third parties as part of an acquisition or liquidation. If we are involved in a merger, asset sale, financing, corporate divestiture, reorganization, or acquisition of all or some portion of our business to another company, or if we undergo liquidation or bankruptcy proceedings, we may share your information with that company before and/or after the transaction closes or the proceedings are completed.

(5) Aggregated or de-identified information with third parties. We also share with third parties, such as advertisers, aggregated or de-identified information; and we may permit our third-party providers to further use, sell, license, distribute, or disclose de-identified data. Aggregated or de-identified information does not identify you and, as such, is not considered personal information.

How do we store and protect your personal information?

We take reasonable precautions, including the implementation of administrative, technical and physical safeguards, to protect your information. Please keep in mind that the internet is not a 100% secure medium for communication, and we cannot guarantee that the information collected about you will always remain private when using our Site. As a result, while we strive to protect your personal information, we cannot guarantee the security of information you transmit to us, and you do so at your own risk.

How long do we retain your personal information?

We will usually store the personal information we collect about you for no longer than necessary to fulfill the purposes for which it was collected, and in accordance with our legitimate business interests and applicable law. However, if necessary, we may retain personal information for longer periods of time, until set retention periods and deadlines expire. For instance, where we are required to do so in accordance with legal, tax and accounting requirements set by law, regulation or government authority.

To determine the appropriate duration of the retention of personal information, we consider the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of personal information and if we can attain our objectives by other means, as well as our legal, regulatory, tax, accounting and other applicable obligations.

Once retention of the personal information is no longer necessary for the purposes outlined above, we will either delete or deidentify the personal information or, if this is not possible (for example, because personal information has been stored in backup archives), then we will securely store the personal information and isolate it from further processing until deletion or deidentification is possible.

What are your privacy rights?

In accordance with applicable privacy laws, and depending upon the jurisdiction in which you reside or are located, you may have some or all of the following rights in respect of your personal information:

• Right of access. You may have the right to obtain: (i) confirmation of whether, and where, we are processing your personal information; (ii) information about the categories of personal information we are processing, the purposes for which we process your personal information and information as to how we determine applicable retention periods; (iii) information about the categories of recipients with whom we may share your personal information; and (iv) a copy of the personal information we hold about you.
• Right of portability. You may have the right, in certain circumstances, to receive a copy of the personal information you have provided to us in a structured, commonly used, machine-readable format that supports re-use, or to request the transfer of your personal information to another person.
• Right to rectification or correction. You may have the right to obtain rectification or correction of any inaccurate or incomplete personal information we hold about you.
• Right to deletion or erasure. You may have the right, in some circumstances, to require us to delete or erase your personal information.
• Right to restriction. You may have the right, in some circumstances, to require us to limit the purposes for which we process your personal information if the continued processing of the personal information in this way is not justified, such as where the accuracy of the personal information is contested by you.
• Right to opt-out. You may have the right to opt-out of certain processing activities. For example, you may have the right to opt-out of the use of your personal information for targeted advertising purposes, or the "sale" or "sharing" your personal information with third parties in certain contexts, as those terms are defined in applicable privacy laws.
• Right to control over automated decision-making or profiling. You may have the right to direct us not to use automated decision-making or profiling for certain purposes.
• Right to withdraw consent. If you have provided consent for the processing of your personal information, you may have the right to withdraw your consent. If you withdraw your consent, this will not affect the lawfulness of our use of your personal information before your withdrawal.
• Right to appeal. In the event that we decline to take action on a request exercising one of your rights set forth above, you may have the right to appeal our decision.

You may also have the right to not receive retaliatory or discriminatory treatment in connection with a request to exercise the above rights. Regardless, we do not retaliate or discriminate against our users that exercise their privacy rights. To exercise any applicable rights, please refer to the "How to Exercise Your Privacy Rights" section below.

Children's privacy

Our Site and Services are not directed to, and we do not intend to, or knowingly, collect or solicit personal information from children under the age of 18. If an individual is under the age of 18, they should not provide us with any personal information either directly or by other means. If a child under the age of 18 has provided personal information to us, we encourage the child's parent or guardian to contact us to request that we remove the personal information from our systems. If we learn that any personal information we collect has been provided by a child under the age of 18, we will promptly delete that personal information.

Links to other websites and services

Our Services may include links to third-party websites, such as to our advertising partners and affiliates. Except where we post, link to or expressly adopt or refer to this Privacy Policy, this Policy does not apply to, and we are not responsible for, any personal information processing practices of third-party websites, online services or the practices of other third parties. To learn about the personal information practices of third parties, please visit their respective privacy notices. We encourage you to read the privacy policy of every site you visit.

How to exercise your privacy rights

Please submit a request as set forth in the "Contact Us" section below. Before processing your request, we may need to verify your identity and confirm you are entitled to the applicable privacy rights. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request. We will respond to your request as required under applicable privacy laws, generally within 45 days, unless we require more time, in which case we will provide you notice.

In certain circumstances, you are permitted to use an authorized agent to submit requests on your behalf through the designated methods set forth above where we can verify the authorized agent's authority to act on your behalf.

Contact us

If you wish to exercise any of your privacy rights or have any questions about this Notice, please contact us at:

By email at: privacy@grar.net

By mail at:

Changes to the Policy

We may update this Policy from time to time. When we make changes, we will change the date at the beginning of this Policy. All changes shall be effective from the date of publication unless otherwise indicated.