Utah Privacy Rights Statement

Effective:  July 1, 2024

(Defined terms used but not otherwise defined herein shall have that meaning as ascribed in the eXp World Holdings, Inc. Privacy Policy and Data Processing Policy, or Attendee Terms (as defined below)).

If you are a Utah resident, you have additional rights with regards to your Personal Information. Please note this Statement only applies to Utah residents.

Utah Consumer Privacy Act Disclosures: The Utah Consumer Privacy Act (“UCPA”) (Utah Code Ann. §13-61-101 et seq.) requires that we inform you of your rights and that we disclose, among other things, the categories of Personal Information we have collected, sold, and/or disclosed for a business purpose.

I. Personal Information Collection

We process the Personal Information set forth in the table below:  

Categories	Collected	Purpose for Processing
Identifiers (Examples: name, address, email address, IP address, account username)	Yes	Market, improve, test, manage, and provide Services; Administer accounts, issue invoices, process transactions; Communicate with you, respond to your comments or inquiries, and promote our Services and the products and services of our Affiliates and Independent Third Parties; Detect and address security incidents; Identify and repair errors; Send advertisements; and Internal research.
Financial Information (Examples: bank account number or other financial information)	Yes	Provide the products or services you requested; Administer accounts, issue invoices, process transactions; Detect and address security incidents; and Internal research.
Sensitive Data (Examples: Racial or ethnic origin, religious beliefs, sexual orientation, citizenship or citizenship status, health condition, genetic data, biometric data, or specific geolocation data)	No	We do not process Sensitive Data.
Commercial Information (Examples: records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies)	Yes	Market, improve, test, manage, and provide Services; Administer accounts, issue invoices, process transactions; Detect and address security incidents; Internal research; Displaying advertisements; and Promote our Services and the products and services of our Affiliates.
Internet Information (Examples: browsing history, search history, limited geolocation data derived from your IP address, or other information about a consumer’s interaction with eXp Site or Services)	Yes	Market, improve, test, manage, and provide Services; Displaying advertisements; Detect and address security incidents; Identify and repair errors; and Remember your preferences, tailor the Services to you.
Audio, Electrical, or Visual Information (Example: information collected from limited session recording technology)	Yes	Market, improve, test, manage, and provide Services; Displaying advertisements; Detect and address security incidents; and Identify and repair errors.

II.  Personal Information Disclosure

We have disclosed the following categories of Personal Information, as defined in the table above, to third parties:

• • Identifiers;
  • Financial Information;
  • Commercial Information; and
  • Internet Information.

Such information was disclosed to:

• • Our Affiliates (joint ventures and service providers that eXp has an ownership stake);
  • Independent Third Parties (third-party service providers that are not Affiliates) such as loan providers, service providers that provide services to you on OUR behalf, such as service providers that help us with fulfilling orders, sending postal mail and email, analyzing data, providing marketing assistance, providing search results and links, tracking website analytics, processing credit card payments, organizing events, and providing customer service; and 
  • Our Agents (independent contractor real estate agents and brokers) when you request information about the Services.

If you sign up to attend any eXp World Holdings, Inc. virtual event or in-person event, the collection, use, and disclosure of your Personal Information may also be governed by the applicable event’s terms and conditions (the “Attendee Terms”). To the extent that the Attendee Terms and this Utah Privacy Rights Statement conflict, the Attendee Terms shall govern. 

III.  Sale of Personal Information

We allow certain third-party advertising networks to collect limited Personal Information through cookies or other tracking technologies on our Sites. Additionally, we may obtain your consent to sell your personal information to Independent Third Parties, such as loan providers, to enable such Independent Third Parties to market their services to you. We have sold the following categories of Personal Information, as defined in the table above, to third parties:

• • Identifiers;
  • Internet Information; and
  • Commercial Information.

Personal Information was sold for the following purposes:

• • Marketing of our Services to you based on your interaction with our Sites; and
  • Marketing the services of Independent Third Parties.

Personal Information was sold to the following categories of third parties:

• • Third party advertising networks; and
  • Loan providers.

Please see Section 2 of our Privacy Policy (Usage Information) for more information on tracking technologies used on the Sites.

IV . Your Rights

1. Right to Access

Pursuant to the UCPA, Utah residents have the right to know whether or not we are processing your Personal Information and to access the Personal Information we hold about you.

2. Right to Delete

You have the right to request that we delete any Personal Information we have collected from you. Once we verify your request, we will delete any Personal Information from our records. Please note, however, that we may not be able to delete all Personal Information about you in certain circumstances, such as to provide a product or service you requested, fulfill a contractual obligation, or due to record retention requirements under applicable law.

3. Right to Opt-Out

You have the right to opt-out of (i) the processing of your Personal Information for targeted advertising, and (ii) the sale of your Personal Information. You may opt-out of targeted advertising by adjusting your cookie preferences on our Sites, visiting the opt-out request pages of industry groups providing broad opt-out options like the Network Advertising Initiative, Digital Advertising Alliance, AdChoices Canada, or European Interactive Digital Advertising Alliance, or by visiting the specific ad networks like Google, LinkedIn, Twitter, and Meta. Please note that opting out with industry groups or advertising networks will only apply to the specific browser or device from which you opt-out. On your mobile device you may also go to your device settings and select “Limit Ad Tracking” (iOS devices) or “Opt-out of interest-based ads” (Android devices), which will allow you to limit our use of information collected from or about your mobile device for the purposes of displaying online targeted advertising to you. You can opt out of the sale of your Personal Information described in Section III of this Utah Privacy Rights Statement here: Your Utah Privacy Choices.

4. Right to Data Portability 

You have the right to obtain a copy of your Personal Information you have provided to us in a portable and readily usable format, to the extent technically feasible. 

V.  How to Make a Request

1. Where to Send Your Request

If you are a Utah resident and you wish to make any of the above requests, you, or your authorized agent, may send a request to us by completing the webform or emailing us at the email address below:

Webform: Please click here

Email: send your request to [email protected] with “Utah Privacy Information Request” in the subject line.

2. Authenticating Your Request

When you contact us, you will need to provide us with enough information to authenticate your request. The specific information we request to authenticate your request will depend on how you make the request, what right you are exercising, and our relationship to you. You must also provide a description of what right you want to exercise and the information to which your request relates. If we are unable to reasonably authenticate your request, we may deny your request. If you are using an authorized agent to submit a request on your behalf, we must authenticate your identity and authenticate the authorized agent’s authority to act on your behalf. The method of authentication will be determined by the data rights you request to exercise, the type, sensitivity, value, and volume of Personal Information involved, the level of possible harm that improper access or use could cause to you, and the cost of such authentication to us.

3. Responding to your Request

We will respond to authenticated requests within forty-five (45) days of receipt.

We are not required to: (1) maintain data in identifiable form, or collect, obtain, retain, or access any data or technology in order to associate your request with your Personal Information; or (2) reidentify de-identified data or pseudonymous data.

We will comply with authenticated requests free of charge at least once every twelve (12) months, unless your requests are manifestly unfounded, excessive, or repetitive, in which case we may charge a reasonable fee to cover the administrative costs of complying with your request.

Copyright © 2024 eXp World Holdings, Inc. | All Rights Reserved.