Privacy & Data Policies
Bureau One is committed to protecting personal information and maintaining responsible data practices across our platform and services.
We apply structured governance, operational discipline, and modern technology to safeguard information and support trust in every interaction.
Our governance model is designed to support secure, compliant, and consistent real estate experiences at scale across every market we serve.
Our approach
Our approach
We believe privacy is not only a regulatory requirement, it is a foundation of trust.
Our approach focuses on transparency, responsible data use, and continuous oversight across the Bureau One ecosystem.
We aim to
- Provide clarity in how information is collected & used
- Maintain strong security & operational safeguards
- Support individual rights & access to information
- Align with evolving global privacy & consumer protection standards
Real estate involves significant financial and personal risk. Structured privacy and data governance are essential to protecting individuals, professionals, and transactions across the ecosystem. Privacy and security are embedded into our platform architecture, workflows, and operational controls rather than treated as separate functions.
Policy statements
Our published policies
The following policies provide detailed information about how we collect, use, and protect personal information across the Bureau One ecosystem.
01Privacy policy
This explains what personal information we collect, why we collect it, who receives it, how long we keep it, and what rights you have over it. If you read one document on this page, read this one.
Bureau One Inc. (referred to as “Bureau One™,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information. This policy covers Bureau One Inc. and bureau.one. Each Bureau One operating company publishes its own privacy notice on its own website. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you interact with our services.
Information We Collect
In the twelve months preceding the last updated date of this policy, Bureau One has collected the following categories of personal information:
Identifiers
- Examples: Name, email, phone number, mailing address, account credentials
- Purpose: Service delivery, account administration, communication
- Disclosed To: Service providers, affiliated operating entities
Transaction data
- Examples: Property inquiries, offers, transaction records, service usage
- Purpose: Transaction facilitation, recordkeeping, regulatory compliance
- Disclosed To: Service providers, transaction counterparties, legal authorities
Internet activity
- Examples: IP address, browsing behavior, cookie identifiers, device details
- Purpose: Site functionality, analytics, security, advertising
- Disclosed To: Analytics and advertising providers
Geolocation data
- Examples: Approximate location where location services are enabled
- Purpose: Property search relevance, service availability
- Disclosed To: Service providers
Financial information
- Examples: Payment details where applicable
- Purpose: Payment processing, fraud prevention
- Disclosed To: Payment processors
Commercial information
- Examples: Products or services considered or obtained
- Purpose: Service improvement, marketing with opt out
- Disclosed To: Service providers
Identity verification data
- Examples: Government-issued identification and verification results
- Purpose: Identity confirmation, fraud prevention, regulatory compliance
- Disclosed To: Identity verification providers
Professional or employment-related information
- Examples: Resume, work history, licensing status, references
- Purpose: Recruiting and hiring
- Disclosed To: Service providers
We do not collect sensitive personal information for the purpose of inferring characteristics about you.
How We Use Your Information
We use your information to:
- Provide and improve our services.
- Process transactions and respond to inquiries.
- Support security and prevent fraud.
- Conduct marketing and promotional activities (with opt-out options).
- Comply with legal and regulatory requirements.
Sale and Sharing of Personal Information
Bureau One does not sell personal information in exchange for monetary consideration.
Bureau One may share personal information with third party advertising, analytics, and platform functionality providers. Under the California Consumer Privacy Act and similar state laws, some of this activity may be treated as a sale or as sharing for cross context behavioral advertising. We disclose this activity rather than characterize it narrowly.
You may opt out of this sharing at any time by:
- Reviewing our Do Not Sell or Share section below
- Emailing dns@bureau.one with the subject line Do Not Sell or Share
- Enabling a Global Privacy Control signal in your browser, which we recognize and honor automatically
Categories of Recipients
We may also disclose personal information to:
- Service providers, including payment processors, analytics providers, hosting services, and transaction management vendors, acting under written contract and permitted to use the information only to perform services for us
- Legal authorities, where required by law, subpoena, or court order, or to protect our rights, safety, or property
- Parties to a business transfer, in the event of a merger, acquisition, financing, reorganization, or sale of assets
We do not disclose personal information to third parties for their own independent marketing purposes.
Data Retention
Bureau One retains personal information only as long as necessary to fulfill the purpose for which it was collected, or as required by law.
- Transaction records are retained for the period required by applicable real estate licensing and recordkeeping rules.
- Account and identifier information is retained for the duration of the account relationship and for seven years thereafter
- Marketing contact information is retained until you opt out or request deletion
- Internet activity and cookie data is retained for thirteen months
- Records subject to legal hold, audit, or regulatory inquiry are retained until the matter concludes
When a retention period ends, information is deleted or de-identified.
Children’s Information
Bureau One’s digital services are intended for adults. Our Terms of Use require users of our websites and platforms to be at least 18 years of age. Bureau Café locations and community programming are open to guests of all ages, and minors must be accompanied and supervised by a responsible adult.
We do not knowingly collect personal information from children under 13 through our websites or platforms. If we learn we have done so, we will delete it. We do not sell or share the personal information of any consumer we know to be under 16.
Where a transaction involves a minor as a beneficiary, occupant, or family member, information about that minor is collected from and maintained through the adult client and is used only as necessary to complete the transaction.
Data Security & Incident Notification
Bureau One maintains administrative, technical, and physical safeguards designed to protect personal information. No system is completely secure.
In the event of a security incident affecting personal information, Bureau One will investigate, take steps to contain and remediate the incident, and provide notice to affected individuals and applicable regulators as required by applicable state breach notification laws. Notice will be provided in the most expedient time possible and without unreasonable delay.
Your Privacy Rights
Several states grant residents specific rights over their personal information. Bureau One extends the following rights to all users regardless of state of residence:
- The right to confirm whether we process your personal information and to access it
- The right to correct inaccurate personal information
- The right to delete personal information you provided to us
- The right to obtain a portable copy of your personal information
- The right to opt out of targeted advertising and of the sale or sharing of personal information
- The right not to be discriminated against for exercising these rights
To exercise these rights, contact privacy@bureau.one. We will respond within 45 days and may extend that period once where reasonably necessary, with notice to you. We may need to verify your identity before fulfilling a request. If we decline a request, you may appeal by contacting legal@bureau.one.
Cookies & Tracking Technologies
We use cookies and similar technologies to improve website functionality and user experience. You can manage your cookie preferences through your browser settings. For more details, refer to our Cookie Policy.
International Data Transfers
If you are accessing our services from outside the United States, your data may be transferred and processed in the U.S., where data protection laws may differ from your country.
Updates to This Policy
We may update this Privacy Policy to reflect changes in our practices. Any updates will be posted on this page with the revised “Last Updated” date.
Contact Us
For questions or concerns about this Privacy Policy, contact us at:
- Email: privacy@bureau.one
- Mailing Address: Bureau One Inc., P.O. Box 520375, Salt Lake City, UT 84152
By using our services, you agree to the terms of this Privacy Policy. For more details, refer to our Terms of Use and Legal Notices.
03Do not sell
California and several other states give residents the right to opt out of having their personal information sold or shared for advertising. This section explains how to exercise that right with Bureau One.
Bureau One Inc. (referred to as “Bureau One™” or “Company”) respects your privacy and is committed to providing transparency regarding your data rights. This page explains how you can opt out of the sale or sharing of your personal information, in alignment with the California Consumer Privacy Act and similar state privacy laws.
Your Right to Opt-Out
Under the CCPA, California residents have the right to opt out of the “sale” or “sharing” of their personal information with third parties for targeted advertising or marketing purposes.
How Bureau One Uses Personal Information
Bureau One does not sell personal information for monetary compensation. However, we may share certain data with third-party service providers for advertising, analytics, and functionality purposes. This may be considered “sharing” under the CCPA.
How to Exercise Your Opt-Out Rights
- You can opt out of the sale or sharing of your personal information by:
- Emailing Us: Send a request to dns@bureau.one with the subject line “Do Not Sell or Share.”
- Calling Us: Contact our privacy team at 435-731-4432 to opt out by phone.
- Using a Global Privacy Control (GPC) Browser Setting: We recognize and process opt-out signals from GPC-enabled browsers.
Global Privacy Control (GPC) Recognition
- Bureau One respects Global Privacy Control (GPC) signals as a valid opt-out request under applicable privacy laws, including the California Consumer Privacy Act (CCPA).
- If your browser or device has GPC enabled, our website will automatically process your request to opt out of the sale or sharing of your personal information, without requiring you to submit a separate request.
- You can learn more about Global Privacy Control (GPC) at https://globalprivacycontrol.org/ (opens in a new tab).
Opt-Out Confirmation & Processing Time
- We will process your request within 15 business days of receiving it.
- You will receive confirmation via email once your opt-out request has been completed.
Authorized Agents
You may designate an authorized agent to submit an opt-out request on your behalf. To do so, the agent must provide written authorization and verify their identity.
Non-Discrimination Policy
Bureau One does not discriminate against individuals who exercise their privacy rights under the CCPA or any other applicable law.
Updates to This Notice
We may update this page to reflect changes in regulations or business practices. Any updates will be posted here with a revised “Last Updated” date.
Contact Us
If you have any questions regarding this notice or your privacy rights, contact us at:
- Email: dns@bureau.one
- Mailing Address: Bureau One Inc., P.O. Box 520375, Salt Lake City, UT 84152
Bureau One does not sell personal information in exchange for monetary consideration. Some sharing with advertising and analytics providers may be treated as a sale or as sharing under applicable state privacy laws. This notice explains how to opt out.
By exercising your opt-out rights, you ensure that your personal information is not shared for targeted marketing or advertising purposes. For more details, refer to our Privacy Policy.
Regulatory monitoring
Bureau One continuously monitors evolving privacy, cybersecurity, and consumer protection standards to align with emerging regulatory and industry expectations.
This page is a published policy of Bureau One Inc. and governs over any descriptive summary of the same subject elsewhere on this site.