Last updated: October 23, 2026
Toronto LOFTS Realty Corp., Brokerage (“Toronto LOFTS”, “we”) helps people buy, sell and rent lofts in Toronto. This policy explains what personal information we collect through torontolofts.ca, why, who we share it with, how long we keep it and what your rights are under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and, for visitors in Quebec, the Act respecting the protection of personal information in the private sector (Law 25).
Who is responsible
Privacy Officer
Toronto LOFTS Realty Corp., Brokerage
1179 King St. W., Suite 110, Toronto, ON M6K 3C5
Email: info@torontolofts.ca
Phone: 416.538.5638
Write to the Privacy Officer with any question, request or complaint about your personal information.
What we collect and why
When you book a visit, ask about buying, selling or renting, or contact us
We collect your name, email, phone, your message and the answers you choose to give (timing, whether you have an agent, etc.), the page you sent it from, your IP address and browser type.
To answer your request, arrange viewings, and have a Toronto LOFTS agent follow up with you. The IP address and browser type are used only to block spam and abuse.
When you create an account
We collect your name, email, phone, password (stored encrypted), the lofts you save, when you accepted our terms, your IP address at sign-up and your last sign-in.
To give you saved lofts and a personal account, and protect accounts against misuse.
When you sign up for loft alerts
We collect your name, email, your alert preferences, the page you signed up on, your IP address and the time you agreed.
To email you new listings that match, and keep proof of your consent as Canada’s anti-spam law requires.
When you apply for a job
We collect your name, email, phone, message and your CV.
To assess your application and contact you.
We do not ask for your social insurance number or government ID on this website. We collect only what these purposes need, and we never sell or rent your personal information.
Who sees your information
- Our agents and office staff. Each enquiry is assigned to a Toronto LOFTS agent, who contacts you and may record it in their own customer-relationship system. Our office staff can see enquiries to manage them.
- Brevo sends our emails and manages the loft-alerts list. Its servers are in the European Union.
- Our hosting provider runs the website and its database. The servers are outside Quebec.
- Only if you accept cookies (see below): Google Analytics, OpenStreetMap for maps and Walk Score for neighbourhood scores. These services receive your IP address when they load.
- Anyone the law requires us to disclose information to.
Our providers may only use your information to provide their service to us. Some of them process it outside Canada (in the United States or the European Union), where it is protected by contract but may be accessible to local authorities under local law.
Cookies
When you first visit, we ask before loading anything from an outside service. If you click Accept, the site loads Google Analytics (to measure how the site is used), the OpenStreetMap maps and the Walk Score scores. If you click Decline, none of them load, and you can still show a map or the scores one at a time with their own button. You can change your choice at any time with Cookie Settings at the bottom of every page.
The cookies the site sets:
- toronto-lofts-session and XSRF-TOKEN (essential): keep you signed in and protect forms against forgery. Kept for 2 hours.
- remember_web_* (essential, only if you tick “Remember me” when signing in): about 400 days, or until you sign out.
- tl_consent (essential): remembers your cookie choice for 1 year.
- _ga and _ga_* (Google Analytics, only after you accept): up to 2 years.
How long we keep it
- Enquiries and their follow-up history: 3 years after our last contact with you. The IP address and browser type stored with them are deleted after 90 days.
- Accounts: until you ask us to close yours. Accounts that are never signed into again are deleted after 2 years.
- Loft alerts: until you unsubscribe. Your address is then removed within 30 days, keeping only the proof of your consent and unsubscribe.
- Job applications and CVs: 12 months after we receive them.
- Server logs (IP address, page, date): about one month.
Records that real-estate law requires a brokerage to keep, such as those of an actual purchase, sale or lease, are kept as long as that law requires. At the end of these periods, information is deleted or anonymized.
How we protect it
The website is served only over HTTPS. Passwords are stored encrypted. CVs are kept in a private area of the server that is not reachable from the web. Only staff who need it can sign in to see enquiries.
Your rights
You can ask to see the personal information we hold about you, have it corrected, withdraw your consent, unsubscribe from alerts, or ask us to delete it, subject to any legal duty to keep it. Write to the Privacy Officer; we reply within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
Privacy breaches
If a breach creates a real risk of significant harm, we notify the people affected and the Privacy Commissioner, and we keep a record of every breach.
Changes
We may update this policy. The date at the top shows the latest version.