Privacy Policy

Overview

Spotlight Real Estate Marketing ("we," "us," "our") provides real estate photography, video, and marketing services in the Okanagan Valley, BC. This page explains what information we collect through spotlightrem.ca, why we collect it, and how it's handled.

Information We Collect

• Contact & booking details — name, email, phone, brokerage, and property address when you submit a contact form, book a shoot, or place an order.
• Account information — if you create a Client Portal account, we store your name, email, and a securely hashed password. We never store your password in plain text and cannot see it.
• Order & invoice details — service package, pricing, and payment status for orders you place with us.
• Payment information — payments are processed directly by Square. We do not collect or store your card number; Square's own privacy policy governs how they handle payment data.
• Location data for address lookup — when you type a property address into our booking form, that text is sent to Google's Places API to suggest matching addresses. Google's privacy policy governs that data.
• Media you're delivered — photos, videos, floor plans, and related files tied to your order, stored securely and made available only to you via a private link or your Client Portal account.

How We Use Information

• To schedule, deliver, and invoice your shoot
• To send booking confirmations, invoices, and delivery notifications by email
• To provide access to your listings, galleries, and invoices through the Client Portal
• To respond to inquiries submitted through our contact form

We do not sell your personal information to third parties.

Who We Share Information With

We use a small number of service providers to run our business, each of whom only receives what they need to do their job:

• Square — payment processing
• Postmark — transactional email delivery (confirmations, invoices, login links)
• Cloudflare — secure file storage for your delivered media
• Railway — application hosting
• Google — address autocomplete via the Places API

Cookies & Sessions

If you sign in to the Client Portal, we set a single secure, encrypted session cookie so you stay signed in. We don't use advertising or tracking cookies.

Data Retention

We keep order, invoice, and delivered media records for as long as reasonably needed for business, tax, and legal purposes. You can request deletion of your account or personal information at any time by contacting us below.

Your Rights

You can request access to, correction of, or deletion of your personal information at any time. To make a request, email us at matt@spotlightrem.ca.

Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision.