Privacy policy
How this site handles personal information, under PIPEDA and CASL.
Last updated: 3 November 2026.
Not yet reviewed by a lawyer. This is written to be substantively correct under PIPEDA and CASL, and it describes what the site actually does. It has not had legal review, and it does not yet reference the brokerage’s own privacy policy.
Who is responsible
Ivaylo Stoyanov, Sales Representative, REAL BROKER ONTARIO LTD BROKERAGE, (647) 559-5141, ivaylo@robbionicolle.com. Real estate brokerages in Ontario are also subject to TRESA and to the record-keeping obligations it imposes, which can require information to be retained even after a request to delete it.
What this site collects
- How the site is used. Browsing does not create an account, but pages and sessions are measured by the two analytics services described under Cookies and tracking, and Clarity records sessions. You can turn Clarity off there.
- What you type into a form: a property address, your name, email, phone and any message. This is used to answer you and, if you asked for one, to prepare a valuation or a comparative market analysis.
- Whether you consented to email updates, and when.
Third parties
This site is hosted on Cloudflare, which processes requests in order to serve pages and maintains standard server logs.
Two analytics services run on this site, described in full below: Microsoft Clarity (session analytics and recording) and Cloudflare Web Analytics (aggregate page statistics). Ivaylo also keeps his own visit record, described below.
Forms on this site are protected from spam by Cloudflare Turnstile, which checks in the background that a person, not a bot, is sending them. To do that it processes technical information about your device and browser. Cloudflare's handling of that information is set out in the Turnstile Privacy Addendum (www.cloudflare.com/turnstile-privacy-policy/).
Cookies and tracking
Advertising pixels run on one page only, the home value page, described below. Two analytics services run across the site, and this section says exactly what they do.
Microsoft Clarity: session analytics and recording
This site uses Microsoft Clarity to understand how pages are used, so that confusing or broken parts can be fixed. Clarity records sessions: it captures how you move through a page (clicks, taps, scrolling, mouse movement and the pages you visit) so that a visit can be replayed, and it combines visits into heatmaps. It also records your browser, device, screen size and approximate location derived from your IP address.
What it does not capture. Everything you type into a form on this site (addresses, names, email addresses, phone numbers, messages) is masked before it leaves your browser, and street addresses are removed from page addresses before Clarity loads. Your name, email address and street address are never sent to Microsoft.
Linking a visit to an enquiry. If you submit a form that creates a record with Ivaylo (a valuation request, a message or a neighbourhood-tracker signup), your Clarity session is labelled with that record’s internal ID number, so a visit can be looked at alongside your enquiry. Links in the monthly neighbourhood email carry a coded token that does the same when you arrive from one. The ID is a number with no meaning outside Ivaylo’s own records; it identifies nothing on its own to Microsoft or anyone else.
Cookies and storage. Clarity sets first-party cookies
(_clck, kept for up to a year, and _clsk, kept for a
day) and Microsoft may set cookies on its own domains, such as
clarity.ms and bing.com. This site also keeps the
record ID described above in your browser’s local storage.
Where it goes. Clarity data is processed and stored by Microsoft, which may be outside Canada, including in the United States, where it can be subject to that country’s laws. Microsoft’s own terms apply: see the Microsoft Privacy Statement. Recordings are kept by Clarity for a limited period (typically 30 days) and aggregate statistics for longer.
Cloudflare Web Analytics
Cloudflare, which hosts this site, counts page views without cookies and without identifying you: the page, the referring site, your browser and device type, your country and how fast the page loaded. It does not record sessions and is not linked to any enquiry.
Ivaylo’s own visit record
To know which of his advertising actually brings enquiries, Ivaylo keeps his own record of visits to this site: the page, the buttons and links clicked (by their label, never what you type), how long the page was open, your device type, the site or ad link that brought you (including the ad campaign named in the link) and a random visitor number kept in your browser’s local storage. It holds no name, email address, phone number or street address, and it is not shared with anyone. If you later send an enquiry, that visitor number is linked to your record with Ivaylo so he can see which ad or page brought you. The detailed record is kept for 13 months; daily totals are kept longer. It is stored with Cloudflare, which hosts this site.
Listings: REALTOR.ca view counts
When you open a listing under /listings/, the site tells REALTOR.ca Canada Inc.
(part of The Canadian Real Estate Association) that the listing was viewed, as CREA’s
rules for these listings require. That report carries the listing number, your IP address
(used by them only to place the view in a region) and a random identifier kept in a cookie
named ddf_uid, so repeat views are not double-counted. It carries no name, email
or anything you type. A second cookie, ddf_terms, remembers that you accepted or
closed the terms notice. Both last a year; neither is used for anything else.
Home value page: advertising pixels
The home value page (/oakville-home-values/) loads two advertising measurement
pixels: the Meta Pixel (Facebook and Instagram) and
OpenAI’s advertising measurement pixel (ChatGPT). They are
used to measure whether an advertisement led to a visit and a completed valuation
request, so that advertising spend can be judged against results. Each records
that the page was viewed and, when the form is submitted successfully, that a
request was made. The Meta Pixel also records two steps along the way: that you
started (began typing an address) and that you reached the contact form. These
two events carry nothing you typed or chose. Separately, this site keeps its own
anonymous record of which steps of the page each visit reached, so we can see where
people stop: a random visit number, the steps, the time, whether it was a phone or a
computer, and which advertisement link (if any) brought the visit. It holds no name,
email address, phone number, property address or IP address, and is not shared.
This page uses measurement pixels from Meta (Facebook) and OpenAI so we can see which ads lead to enquiries.
When you submit the form, those pixels send a one-way scrambled (hashed) version of your name, email address and phone number to Meta and OpenAI, along with your IP address and browser type. Your details are never sent in plain text, but the scrambled values are designed to be matched against accounts those companies already hold, so this is not anonymous.
The property address you enter is not sent to Meta or OpenAI, and your answers about the home are not sent to OpenAI. Meta’s pixel does record which buttons you tap on this page, so the options you choose (for example your neighbourhood, the type of home and when you might sell) reach Meta as the labels of those buttons.
You can opt out of this matching at any time by emailing us, and we will remove your record.
Both set first-party cookies on this site so a visit that arrived from an
advertisement can be connected to a request made later (Meta: _fbp
and, after an ad click, _fbc; OpenAI: __oppref), and send
data to facebook.com and openai.com respectively, where
Meta’s
Privacy Policy and
OpenAI’s
Privacy Policy apply. Blocking third-party scripts or using an ad blocker
prevents them from loading; the page works normally without them. This page is
not part of the Facebook website or Facebook Inc., and is not endorsed by Facebook
in any way. FACEBOOK is a trademark of FACEBOOK, Inc.
Personal home value pages
When you open a personal home value page we sent you, we record each visit, which parts of the page you view and for how long, and what you tap or click, and add that to your file so Ivaylo knows when to follow up; these pages run no advertising pixels or third-party analytics.
How to opt out
You can turn off Clarity for this site in this browser. Nothing on the site depends on it and every page works normally without it.
Session analytics status appears here with JavaScript on.
If your browser sends a Global Privacy Control signal, Clarity never loads here at all. Blocking third-party scripts or using a content blocker also stops both services. To ask for recordings linked to you to be deleted, use the contact details at the top of this page; the request is passed to Microsoft through Clarity’s deletion tools.
Chat with Mia
Mia, the chat on this site, is an AI assistant, not a person. Nothing is sent anywhere until you type a message. What you type is sent to Anthropic, the company that makes the AI model, to write the reply, and the conversation is kept on this site for 90 days so it can continue as you move between pages, then deleted. Please do not share sensitive details such as your SIN, income or account numbers in the chat.
If you ask Mia to pass something to Ivaylo and give your name and email, the conversation goes to him by email and into Follow Up Boss, the CRM he uses, so he can reply. The optional box for the monthly market update is express consent under CASL and is recorded the same way as on every other form here. Mia’s answers can be wrong; they are not advice.
Email and CASL
Market updates are only sent if you tick the consent box. That is express consent under CASL, and it is never a condition of getting a valuation or a reply. Every email includes a working unsubscribe link, and unsubscribing is honoured without delay. Replying to an enquiry you sent is implied consent and does not require the box.
Market alerts and the monthly update
If you set up market alerts, what is stored is your name, email address and phone number, the places and home types you chose, what you asked to be told about, and a record of the consent itself: the exact wording you agreed to, when, and the page you agreed on. That consent record exists because CASL puts the burden of proving consent on the sender; it is evidence, not marketing data. Your details also go to Follow Up Boss, the CRM Ivaylo uses, so he can follow up with you personally.
Alerts are checked once a month, when TRREB publishes its figures, and you get an email only if something you asked about changed (or every month, if you asked for the numbers). Every email carries a one-click unsubscribe that needs no login, stops every alert at once and takes effect immediately. Unsubscribing does not delete your record: the record is how the request is honoured and proven, and keeping it is what stops you being re-added by a later import. You can ask for it to be deleted outright. See your rights below.
Your rights under PIPEDA
- Ask what personal information is held about you, and get a copy.
- Ask for corrections.
- Withdraw consent, subject to the record-keeping obligations above.
- Complain to the Office of the Privacy Commissioner of Canada if you are not satisfied with the response.
Requests go to (647) 559-5141.
YouTube
Ivaylo publishes videos to his own YouTube channel with an internal tool, Stoyanov Group Publisher, that uses YouTube API Services. By watching or interacting with these videos on YouTube you are using YouTube, and the YouTube Terms of Service apply. Google's handling of your data is covered by the Google Privacy Policy.
The tool is used only by Ivaylo, for his own channel. It uploads his videos and reads back their status (for example, processed or scheduled). It does not collect, store or share any information about viewers or other YouTube users, and it uses no cookies on this site.
Access can be removed at any time on the Google security settings page (myaccount.google.com/connections). When access is removed, the stored access token is deleted within 7 days, and the video IDs and upload status kept for his own records are deleted within 30 days on request.
Retention and security
Enquiry records are kept while they are needed to serve you and for as long as brokerage record-keeping rules require. Data is held on Canadian and United States infrastructure operated by the service providers named above.
Changes
Material changes will be reflected in the “last updated” date at the top of this page.