US Regional Privacy Rights Statement

Effective: October 4, 2024

(Defined terms used but not otherwise defined herein shall have the same meaning as used in the eXp World Holdings, Inc. Privacy Policy and Data Processing Policy, or Attendee Terms (as defined below)).

If you are a resident of the United States, you may have additional rights with regards to your Personal Information. Please note this Statement only applies to United States’ residents. This Statement explains how we collect, use, and disclose your Personal Information. It also describes how to exercise your rights under various U.S. privacy laws, collectively the “U.S. Privacy Laws.”

A. Shine the Light Disclosures: Under California Civil Code Section 1798.83 (the “Shine the Light” law), California residents who provide certain personal information in connection with obtaining products or services for personal, family, or household use are entitled to request and obtain the following from us: (i) a list of the categories of personal information (such as name, address, email address, and the type of services provided to the user) that we have disclosed to third parties during the immediately preceding calendar year for the third parties’ direct marketing purposes, and (b) the names and addresses of all such third parties. To request the above information, please contact us using the contact information in Section III (Where to Send Requests), below. We will respond to such written requests within thirty (30) days following receipt at the email or mailing address stated below. Please note that we are only required to respond to each user once per calendar year. Please be aware that not all information sharing is covered by the “Shine the Light” requirements, and only information on covered sharing will be included in our response.

B.California Consumer Privacy Act (CCPA) Disclosures: The California Consumer Privacy Act (“CCPA”) (Cal. Civ. Code §1798.100 et seq.), as amended by the California Privacy Rights Act, requires that we inform you of your rights and that we disclose, among other things, the categories of Personal Information we have collected, sold, and/or disclosed for a business purpose from California residents in the previous twelve (12) month period and the source of such collection.

C. U.S. Privacy Law Disclosures: Other U.S. Privacy Laws, require that we inform you of your rights as well as how we collect, use, and disclose of Personal Information. To provide the Services offered by eXp, we process information about you, including Personal Information, whether or not you have an account or are logged in to the Services. You should review our Privacy Policy along with this Statement to learn more.

I. Personal Information Collection

In the previous twelve (12) month period, we have collected the Personal Information set forth in the table below:

Categories	Source	Business/Commercial Purpose for Collecting	Categories of third parties to whom Personal Information is disclosed	Length of Data Retention (or criteria for determining period of retention)
Identifiers (Examples: name, address, email address, IP address, account username)	Consumer; Agent; Employee, Service providers; computer-monitoring software; public records	Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; Consider and engage applicants for Consultant roles; Market, improve, test, manage, and provide Services; Administer accounts, issue invoices, process transactions; Communicate with you, respond to your comments or inquiries, and promote our Services and the products and services of our Affiliates and Independent Third Parties, including networking between our Agents; Detect and address security incidents; Identify and repair errors; Delivering advertisements; and Internal research	our Affiliates; Independent Third Parties, such as loan providers; our virtual events and in-person events sponsors, attendees, and vendors; other Users, if you are an Agent or you direct us to put you in contact with an Agent; and third party providers that provide services to you on our behalf, such as advertising networks, providers that help us with fulfilling orders, fulfilling payroll or other employment benefits, sending postal mail and email, analyzing data, providing marketing assistance, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service.	The retention period for identifiers is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Customer Records Information (Examples: education, employment history, bank account number, or other financial information)	Consumer; Employee; Agent	Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; Consider and engage applicants for Consultant roles; Administer accounts, issue invoices, process transactions; Detect and address security incidents; Internal research	our Affiliates; Independent Third Parties; our virtual events and in-person events sponsors, and vendors; other Users, if you are an Agent or you direct us to put you in contact with an Agent; third party providers that provide services to you on our behalf, such as providers that help us with fulfilling orders, fulfilling payroll or other employment benefits, sending postal mail and email, analyzing data, providing marketing assistance, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service.	The retention period for Customer Records Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Protected Information (Examples: race, color, religion, gender, national origin, disability, familial status, sexual orientation)	Employee; Agent	Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; Conduct demographic analysis on event attendees in order to improve planned and future events; and Consider and engage applicants for Consultant roles.	We do not disclose or sell this information.	The retention period for Protected Information is based on our contractual obligations to you, legal retention periods for the information, and whether you are a prospective, current, or former employee of ours.
Commercial Information (Examples: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)	Consumer; Agent; Service providers	Market, improve, test, manage, and provide Services; Delivering advertisements; Administer accounts, issue invoices, process transactions; Detect and address security incidents; Internal research; and Promote our Services and the products and services of our Affiliates.	our Affiliates; Independent Third Parties, such as loan providers and advertising networks; Our virtual events and in-person events sponsors, and vendors; Other Users, if you are an Agent or you direct us to put you in contact with an Agent; third party providers that provide services to you on our behalf, such as providers that help us with fulfilling orders, fulfilling payroll or other employment benefits, sending postal mail and email, analyzing data, providing marketing assistance, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service.	The retention period for Commercial Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Sensitive Personal information (examples: social security number, driver’s license, state identification card, passport number, account login, debit/credit card number in combination with any required security or access code)	Agent, Employee, Consultants	Maintain employee and Consultant files and provide applicable benefits; Maintain Agent files and provide benefits; Administer accounts, issue invoices, process transactions; Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; Market, improve, test, manage, and provide Services, including providing information about properties in specific geographic location; Consider and engage applicants for Consultant roles; and Detect and address security incidents.	We only disclose Sensitive Personal Information to our third party providers to the extent necessary to assist us in fulfilling our obligations to Agents, Consultants, and employees, such as providing employee benefits, processing payment, and tax reporting.	The retention period for Sensitive Personal Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Biometric Data (Examples: fingerprints, DNA, etc.)	We do not collect this information.	N/A	N/A	We do not collect biometric data.
Internet Information (Examples: browsing history, search history, or other information about a consumer’s interaction with eXp Site or Services)	Consumer; Agent; Analytics and website service providers; computer monitoring software	Market, improve, test, manage, and provide Services, including providing information about properties in a specific geographic location; Delivering advertisements; Detect and address security incidents; Identify and repair errors; and Remember your preferences, tailor the Services to you.	our Affiliates; Independent Third Parties, including advertising networks; Our virtual events and in-person events sponsors, and vendors; Other Users, if you are an Agent or you direct us to put you in contact with an Agent; Third party providers that provide services to you on our behalf, such as providers that help us with fulfilling orders, fulfilling payroll or other employment benefits, sending postal mail and email, analyzing data, providing marketing assistance, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service.	The retention period for Internet Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Geolocation Data (Geolocation Data collected when using the Services is not considered precise geolocation data as defined under U.S. Privacy Law)	Derived from IP address or cookies; Agent	Market, improve, test, manage, and provide Services, including providing information about properties in a specific geographic location; and Detect and address security incidents.	We do not disclose or sell this information.	The retention period for Geolocation Data is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Audio, Electrical, or Visual Information	Consumer; Employee; Agent	Market, improve, test, manage, and provide Services; Detect and address security incidents; and Identify and repair errors.	We do not disclose or sell this information.	The retention period for Audio, Electrical, or Visual Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Professional Information (Examples: employment-related information and history)	Consumer; Employee; Agent; cookies	Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; and Consider and engage applicants for Consultant roles.	We do not disclose or sell this information.	The retention period for Professional Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Education Information	Consumer; Employee; Agent; cookies	Consider applicants for employment, extend offers of employment, maintain employee files, and provide benefits; and Consider and engage applicants for Consultant roles.	We do not disclose or sell this information.	The retention period for Education Information is based on our contractual obligations to you, legal retention periods for the information, your continued interest in a business relationship with us, whether such information is valuable for us to detect and prevent fraud and information security attacks, and whether you are a prospective, current, or former employee of ours.
Inferences (Examples: inferences that can be drawn from any of the foregoing information, such as preferences, psychological trends, behavior, attitude, intelligence, or abilities)	We do not collect this information.	N/A	N/A	We do not compile composite profiles of individuals in order to make inferences from such profiles.

II. Personal Information Disclosure

If you sign up to attend any eXp World Holdings, Inc. virtual event or in-person event, the collection, use, and disclosure of your Personal Information may also be governed by the applicable event’s terms and conditions (the “Attendee Terms”). To the extent that the Attendee Terms and this California Privacy Rights Statement conflict, the Attendee Terms shall govern.

III. Sale of Personal Information

In the preceding twelve (12) months, we have sold the following categories of Personal Information, as defined in the table above, to our Affiliates, Independent Third Parties, and event sponsors and vendors:

Identifiers;

Internet Information; and

Commercial Information.

Personal Information was sold for the following purposes:

Marketing of our Services to you based on your interaction with our Sites;

Displaying advertisements; and

Marketing the services of Independent Third Parties.

eXp does not knowingly collect, process, disclose or sell the Personal Information of minors.

IV. Your Rights

Depending on where you live and subject to certain exceptions, you may have some or all of the following rights:

Right to Know: The right to request that we disclose to you the Personal Information we collect, use, or disclose, and information about our data practices.

Right to Request Correction: The right to request that we correct inaccurate Personal Information that we maintain about you.

Right to Request Deletion: The right to request that we delete your Personal Information that we have collected from or about you.

Right to Opt out of Targeted Advertising: The right to opt-out of the processing of your Personal Information for the purposes that may be considered “targeted advertising” under the U.S. Privacy Laws, including information obtained from your activities on nonaffiliated websites or online applications.

Right to Non-Discrimination: The right not to receive discriminatory treatment for exercising your privacy rights.

Right to Limit Sensitive Data Processing: The right to limit processing of certain categories of Personal Information based on the applicable state definition of Sensitive Personal Information. eXp does not process Sensitive Personal Information beyond what is expressly allowed under U.S. Privacy Laws.

Right to Data Portability: You can request a transfer of Personal Information to you or a third party where we process the data based on your consent or a contract with you, and in a commonly used and machine-readable format

V. How to Make a Request

Where to Send Your Request

If you are a U.S. resident and you wish to make any of the above requests, please send a request to:

Webform: Request Form

Email: send request to [email protected] with “U.S. Privacy Information Request” in the subject line

Verifying Your Request

When you contact us, you will need to provide us with enough information to verify your identity using Personal Information you have previously provided to us. The specific information we use to verify your identity will depend on how you make a request, what you are requesting, and our relationship with you. You must also provide a description of what right you want to exercise and the information to which your request relates. Your authorized agent may be able to make a request for you, if you provide us with written permission authorizing the agent to act on your behalf. Please note that we will still need to verify your identity.

We are not obligated to comply with a rights request if we cannot verify that the person making the request is the person about whom we collected information or is someone authorized to act on such person’s behalf. Any Personal Information we collect from you to verify your identity in connection with your request will be used solely for the purposes of verification.

Opting out of Targeted Advertising

You may opt-out of targeted advertising by adjusting your cookie preferences on our Sites, visiting the opt-out request pages of industry groups providing broad opt-out options like the Network Advertising Initiative, Digital Advertising Alliance, AdChoices Canada, or European Interactive Digital Advertising Alliance, or by visiting the specific ad networks like Google, LinkedIn, Twitter (X), and Meta. Please note that opting out with industry groups or advertising networks will only apply to the specific browser or device from which you opt-out. On your mobile device you may also go to your device settings and select “Limit Ad Tracking” (iOS devices) or “Opt-out of interest-based ads” (Android devices), which will allow you to limit our use of information collected from or about your mobile device for the purposes of displaying online targeted advertising to you.

Responding to Your Request

We will confirm receipt of right to know and deletion requests within the timeframe specified under applicable U.S. Privacy Laws and will provide information as to how we will process such requests. We will respond to verified requests within the timeframes allowed by applicable U.S. Privacy Laws. Please note that we may only be required to respond to a verifiable request for access or portability twice per twelve (12) month period.

We are not required to: (1) retain any Personal Information about you that was collected for a single, one-time transaction if, in the ordinary course of business, that information about you is not retained; or (2) reidentify or otherwise link any data that, in the ordinary course of business, is not maintained in a manner that would be considered Personal Information.

We will comply with your requests free of charge. Please note, however, that we are permitted to charge a reasonable fee if requests are manifestly unfounded or excessive.

US Regional Privacy Rights Statement

Get Investor Email Alerts

eXp Businesses

Report Suspicious Activity

eXp Realty Policy Highlights