Privacy notice.

Who controls your information

The operator of BC Private Office is the controller of personal information handled through this platform. Because the office is intentionally private, correspondence begins through our introduction route. Use that route for privacy questions or requests and mark your message as a privacy matter.

Information we receive

We may receive your name, email address, telephone number, company or representative role, introduction and inquiry messages, invited account profile, saved residences, and communications with the office. We also create security information such as sign-in events, authorization records, device and network details, invitation history, and an audit trail of important actions. We do not ask for payment details or financial evidence through the public introduction form.

Purposes and lawful bases

We review introduction requests and respond to communications with your consent and in our legitimate interest in operating a considered private office. We create and administer invited accounts, deliver requested dossiers, and respond to member inquiries as necessary to provide the service you request. We protect owners, members, mandates, and the platform on the basis of our legitimate interests in confidentiality, fraud prevention, and network security. We keep records when needed to comply with legal, regulatory, tax, accounting, or dispute obligations. Where we rely on consent, you may withdraw it at any time without affecting earlier processing.

Private property information

Exact locations, commercial terms, private media, documents, and office notes are restricted to authorized members. Access depends on account role and, for some residences, named permission. Important actions may be logged for security, owner confidentiality, and accountability.

Service providers and transfers

Google's Firebase and Cloud services provide identity, database, and file storage infrastructure. Vercel provides application hosting and delivery. We may also use carefully selected security and operational providers when needed. These providers act under our instructions and may process information in countries other than your own. Where information is transferred internationally, we use contractual and technical safeguards appropriate to the transfer and limit access to what the provider needs to perform its service. We do not sell personal information or share private-profile data for third-party advertising.

Retention

Introduction requests are normally retained for up to 12 months. Account profiles, saves, and ordinary inquiries are maintained while an account is active and are reviewed after closure or a valid deletion request. Security and audit records are kept only for as long as they remain necessary to protect the platform, investigate access, meet a legal duty, or resolve a dispute. Records connected to a transaction, legal duty, complaint, or dispute may be retained for the period required by applicable law. Backups expire on their managed rotation.

Your rights and complaints

Subject to applicable law, you may ask for access to, correction of, deletion of, restriction of, or a portable copy of your personal information. You may object to processing based on legitimate interests and withdraw consent-based permission. We may need to verify your identity before acting, and some records may be retained where law or an overriding confidentiality or legal interest requires it. Contact us through the introduction route. You may also raise a complaint with the competent privacy authority or court where you live or where the processing occurred.

Cookies and local storage

We use essential browser storage and similar technologies to keep invited members signed in, protect sessions, remember security state, and operate the service. We do not use advertising cookies. If optional analytics are introduced, they will not be activated where consent is required until that consent has been obtained.

Security and changes

We use role-based access, authenticated sessions, restricted storage, network encryption, and audit records. No online service can promise absolute security, so members must keep credentials private and report suspicious access promptly. We may update this notice as the service or law changes. Material changes will be identified here and, where appropriate, communicated to active members.