Privacy policy.

Who we are

This website is operated by MBC Legacy Real Estate. If you have any question about privacy, or want to make a request about your information, email edcanales@mbclegacy.com.

What we collect

We only collect what you choose to send us.

• When you contact us or request a showing: your name, email address, phone number if you provide one, your message, and which property you asked about. If the form asks about your buying situation — cash or financed, pre-approval status, proof of funds, timeline, whether you need to sell first, how you prefer to be contacted — we store the answers you give.
• Documents you upload: if you attach a proof-of-funds or pre-approval document, we store that file.
• When you ask us to buy or sell for you: your contact details plus what you tell us about the property, your budget, preferred areas, and timeline.
• When you join the mailing list: your email address and which page you signed up from.
• Automatically: we count how many times each listing page is viewed, without recording who viewed it. We use your IP address temporarily to limit how many messages any one visitor can send, so the forms can't be used for spam. We don't build advertising profiles and we don't sell anything about you.

Why we use it

To answer your enquiry, arrange showings, represent you in a purchase or sale, and — if you asked for it — send you new listings. That's all. We don't sell or rent your information to anyone, and we don't share it for anyone else's marketing.

The chat assistant

This site has a chat assistant. When you send it a message, the text of that message and our property catalogue are sent to Anthropic, which operates the AI model that writes the reply. Please don't put sensitive personal or financial details into the chat — use the contact form for anything private.

We also keep a copy of the questions people ask, so we can see what visitors want to know and improve the site and its listings. We store the question only, never the assistant's reply, and questions are not linked to your name or to anything else you send us.

Who else handles your information

We use a small number of service providers to run this site. They process information on our behalf and are not permitted to use it for their own purposes:

• Vercel — hosts the website and stores uploaded files.
• Neon — the database where enquiries and listings are stored.
• Resend — delivers our email notifications and listing announcements.
• Anthropic — powers the chat assistant described above.
• Mapbox — displays the map on listing pages.
• Cloudflare — manages the domain name.

We may also disclose information if the law requires it, or where it's necessary to establish or defend a legal claim.

Website statistics

We count visits so we know which properties and pages people are actually looking at. This is done on our own server — there is no Google Analytics, no advertising pixel, no third-party tracker, and no cookie is set for it.

For each page view we record the page address, the website that linked you to us (if any), and the date. To tell one visitor from another on a given day, we create a scrambled code from your IP address, your browser type, and a secret key held on our server. That code cannot be turned back into your IP address, and it is regenerated every day — so it can't be used to recognise you tomorrow, or to follow you between sessions.

We never store your IP address itself, and these statistics are never combined with your enquiry or mailing list details.

Cookies

We don't use advertising or tracking cookies, and no third-party analytics service follows you around this site or across the web. Our own visitor counting, described above, sets no cookie at all. The only cookie we set is the one that keeps the site administrator signed in — it is never set for ordinary visitors. Your browser also stores your saved and recently viewed properties locally on your own device; that information never reaches us.

How long we keep it

Enquiries and the documents attached to them are kept for as long as we may need them for the transaction and for our professional record-keeping obligations as a licensed real estate practice. Mailing list addresses are kept until you unsubscribe. You can ask us to delete your information sooner — see below.

Your choices and rights

Depending on where you live — including under the Maryland Online Data Privacy Act — you may have the right to:

• Ask what information we hold about you, and get a copy.
• Ask us to correct anything that's wrong.
• Ask us to delete it.
• Opt out of marketing email at any time.

To make any of these requests, email edcanales@mbclegacy.com. We don't charge for this and we won't treat you differently for asking. Every listing email also has an unsubscribe link at the bottom, which takes effect immediately.

Security

The site is served over an encrypted connection, the administrator account is protected by a password and two-factor authentication, and access to enquiries is limited to the practice. No system is perfectly secure, so please don't send anything highly sensitive — such as a full Social Security number or complete bank account details — through this website.

Children

This site is meant for adults and isn't directed at children under 13. We don't knowingly collect their information.

Changes to this policy

If we change how we handle information, we'll update this page and the date at the top. Please check back occasionally.