---

1. Introduction & Who We Are

CREHQ is a commercial real estate intelligence platform that provides data, analytics, and insights about retail and restaurant brands, tenant expansion requirements, and commercial properties. Our goal is to help commercial real estate professionals—including landlord representatives, tenant representatives, property owners, developers, and investors—make informed decisions.

Legal Entity: GroundRoof, LLC
Jurisdiction: Wisconsin, United States

When we refer to "CREHQ," "we," "us," or "our" in this policy, we mean the entity responsible for processing your personal information as described here.

2. Scope of This Policy

This Privacy Policy applies to:

• Website visitors who browse crehq.com
• Account holders who register for Free, Pro, or Team memberships
• Newsletter subscribers who sign up for our email updates
• Contacts who reach out via our contact forms or support channels

If you are an enterprise customer with a separate written agreement with CREHQ, that agreement may contain additional or different privacy terms that take precedence over this policy for matters covered therein.

3. Data We Collect

Information You Provide Directly

• Account Information: Name, email address, company name, job title or role, and password when you create an account
• Billing Details: Payment card information (processed securely through our payment processor), billing address, and transaction history
• Communications: Messages you send through contact forms, support requests, feedback submissions, and any content you voluntarily provide
• Profile Information: Optional details you add to your profile, such as phone number, markets of interest, or professional specializations

Information We Collect Automatically

• Device & Browser Data: IP address, browser type and version, device type, operating system, and screen resolution
• Log Data: Access times, pages visited, referring URLs, and actions taken on our site
• Usage Data: Search queries, filters applied, companies viewed, saved searches, export actions, and feature interactions
• Cookies & Similar Technologies: See our Cookie Policy for detailed information

Information from Third Parties

• Payment Processors: Transaction confirmations and fraud prevention data from our payment service providers
• Analytics Tools: Aggregated usage statistics from analytics platforms we use
• Email Service Providers: Delivery and engagement data (opens, clicks) for emails we send
• Public Sources: Publicly available business information that may relate to your company or role

4. How We Use Your Information

We use the information we collect for the following purposes:

Operating & Providing the Service

• Authenticating your account and managing your membership
• Processing payments and maintaining billing records
• Providing customer support and responding to inquiries
• Enabling core features like search, saved lists, and data exports

Improving & Protecting the Service

• Analyzing usage patterns to improve features and user experience
• Debugging technical issues and monitoring system performance
• Detecting and preventing fraud, abuse, and unauthorized access
• Conducting research and development for new features

Communicating with You

• Sending transactional emails (account confirmations, password resets, billing receipts)
• Notifying you of important service updates or changes
• Sending product announcements and feature updates
• Marketing communications (with your consent, where required)

Legal Compliance & Protection

• Complying with applicable laws, regulations, and legal processes
• Enforcing our Terms of Service and other agreements
• Protecting the rights, safety, and property of CREHQ and our users

5. Legal Bases for Processing (EU/UK Users)

If you are located in the European Union, European Economic Area, or United Kingdom, we process your personal data under the following legal bases:

• Contract Necessity: Processing necessary to perform our contract with you (e.g., providing the services you signed up for)
• Legitimate Interests: Processing for our legitimate business interests, such as improving the service, marketing, and fraud prevention, where these interests are not overridden by your rights
• Consent: Processing based on your explicit consent, such as for non-essential cookies or optional marketing emails (you can withdraw consent at any time)
• Legal Obligation: Processing necessary to comply with legal requirements

6. Cookies & Similar Technologies

We use cookies and similar technologies to operate and improve our platform. Cookies are small text files stored on your device that help us:

• Keep you logged in across sessions
• Remember your preferences and settings
• Understand how you use our site
• Improve performance and functionality

For complete details about the cookies we use, their purposes, and how to manage your cookie preferences, please see our Cookie Policy.

Note: Disabling certain cookies may affect the functionality of our platform and your user experience.

7. How We Share Information

We may share your information in the following circumstances:

Service Providers

We work with trusted third-party service providers who assist us in operating the platform, including:

• Cloud hosting and infrastructure providers
• Payment processors
• Email delivery services
• Analytics and monitoring tools
• Customer support platforms

These providers are contractually bound to use your information only for the services they provide to us and to maintain appropriate security measures.

Business Transfers

If CREHQ is involved in a merger, acquisition, sale of assets, or similar transaction, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid legal requests, such as subpoenas, court orders, or government inquiries.

What We Do NOT Do

We do not sell your personal information. We do not rent or trade your personal data to third parties for their direct marketing purposes without your explicit consent.

8. International Data Transfers

CREHQ is based in the United States, and our servers and service providers may be located in the United States or other countries. If you access our platform from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other jurisdictions.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses approved by relevant authorities.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, including:

• Account Data: Retained while your account is active and for a reasonable period afterward to allow for reactivation or to address any post-termination matters
• Billing Records: Retained as required for tax, accounting, and legal compliance purposes (typically 7 years)
• Usage Logs: Retained for security, debugging, and analytics purposes, typically for 12–24 months
• Backups: May be retained in secure backup systems for disaster recovery purposes

When data is no longer needed, we securely delete or anonymize it.

10. Your Rights

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information (subject to certain exceptions)
• Restriction: Request that we limit how we use your information
• Portability: Request a copy of your data in a structured, machine-readable format
• Objection: Object to certain types of processing, such as direct marketing
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time

The specific rights available to you depend on your jurisdiction (e.g., GDPR for EU/UK residents, CCPA/CPRA for California residents, and similar laws in other regions).

11. How to Exercise Your Rights

To exercise any of your privacy rights, please contact us using one of these methods:

• Email: [email protected]
• Contact Form: crehq.com/contact

When you submit a request, we may need to verify your identity before processing it. We aim to respond to all valid requests within 30 days (or sooner where required by law). In some cases, we may need additional time, and we will notify you if so.

If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

12. Security

We implement technical and organizational measures designed to protect your personal information, including:

• Encryption: Data is encrypted in transit using TLS/SSL
• Access Controls: Strict access controls limit who can access personal data
• Authentication: Secure password hashing and account protection measures
• Monitoring: Systems monitoring to detect and respond to potential security incidents
• Vendor Security: We evaluate the security practices of our service providers

While we strive to protect your information, no system is completely secure. If you believe your account has been compromised, please contact us immediately at [email protected].

13. Children's Privacy

CREHQ is designed for business professionals in the commercial real estate industry. Our platform is not directed at children under the age of 16, and we do not knowingly collect personal information from children.

If we become aware that we have inadvertently collected personal information from a child under 16, we will take steps to delete that information as soon as possible. If you believe a child has provided us with personal information, please contact us at [email protected].

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we may notify you via email or a prominent notice on our website
• Your continued use of CREHQ after changes take effect constitutes acceptance of the updated policy

We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: [email protected]
Website: crehq.com/contact

---