Privacy Policy
How Estate Sale Connect collects, uses and protects your information.
Estate Sale Connect ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website estatesaleconnect.com and use our services.
1. INFORMATION WE COLLECT
1.1 Information You Provide Directly
Consumer Information
When you submit a request for estate sale services, we collect:
- Contact Information: First name, last name, email address, phone number
- Property Information: City, state, ZIP code and property type. We do not ask for the street address of the property; you give that directly to the company you choose to work with
- Estate Details: Timeline, reason for sale (optional), special requirements
- Photos: Optional property and item photos you choose to upload
- Sensitive Information: You may voluntarily provide information about death, divorce, or health situations
Professional Account Information
If you're an estate sale company using our platform, we also collect:
- Business Information: Business name, EIN, contact information, service areas
- Credentials: Business licenses, insurance information, certifications
- Profile Information: Specializations, years in business, company description
- Performance Data: Response rates, customer interactions, lead conversion data
Taking a Number or Signing Up for a Spot at a Sale
Some sales hand out line numbers digitally, at the door or in advance from the sale page. When you take a number we store your first name, how many people are with you, and a hashed token your phone keeps so it can find your number again; we also keep a one-way hash of your connection address to trace abuse, which is never shown to anyone. If you give an email address, we use it to send you your number and, for a sign-up made in advance, a reminder the evening before your day and a notice if the sale is cancelled; we delete the address the day after your sale day and the rest of the entry after 30 days. The company or family running the sale sees your first name and party size, and nothing else. Joining a block's waitlist stores your first name, party size and email address until a place is offered or the sale day passes.
Messages to a Company or Seller
When you use the contact form on a sale page to ask about a sale, we collect your name, your email address and the message you write, and we keep the conversation so that both of you can see it. If you have a shopper account, the conversation also appears in your messages there.
1.2 Information Collected Automatically
When you visit our website, we automatically collect:
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, search queries
- Location Data: Approximate location based on IP address
- Referral Data: Website or advertisement that directed you to us
1.3 Cookies and Tracking Technologies
We use the following types of cookies and tracking:
Essential Cookies
- Session Cookies: Keep you logged in and maintain form data
- Security Cookies: Prevent cross-site request forgery and other attacks
Analytics Cookies
- Google Analytics: Track site usage and user behavior
- Hotjar: Record user sessions for usability improvement (anonymized)
Marketing Cookies
- Facebook Pixel: Measure ad effectiveness and retargeting
- Google Ads: Track conversions and optimize ad campaigns
You can control cookies through our cookie banner or your browser settings.
1.4 Information from Third Parties
We may receive information about you from:
- Google Sign-In: If you choose to sign in or sign up with Google, Google sends us your name, your email address and an identifier for your Google account, and confirms that the email address is yours. We do not receive your Google password, contacts, calendar or anything else, and we cannot post or read anything on your behalf
- Social Media: If you interact with our social media pages
- Marketing Partners: Lead generation and referral partners
2. HOW WE USE YOUR INFORMATION
2.1 Primary Uses
We use your information for the following purposes and legal bases:
| Purpose | Legal Basis (GDPR) | Legitimate Interest Details |
|---|---|---|
| Connect you with professionals | Contract/Consent | Providing our core service |
| Send service-related communications | Contract | Necessary for service delivery |
| Improve our services | Legitimate Interest | Enhancing user experience |
| Marketing communications | Consent | Only with explicit opt-in |
| Legal compliance | Legal Obligation | Required by law |
| Fraud prevention | Legitimate Interest | Protecting all users |
| Customer support | Contract/Legitimate Interest | Helping users effectively |
2.2 Automated Decision-Making
We use automated systems to:
- Match consumers with professionals based on location and service needs
- Distribute leads based on each professional's service areas and travel radius
- Flag potentially fraudulent submissions for manual review
You have the right to request human review of automated decisions.
2.3 Special Considerations for Sensitive Information
When you voluntarily provide sensitive information (death of loved one, health issues, divorce), we:
- Limit access to essential personnel only
- Use enhanced security measures
- Share only what's necessary for professionals to provide appropriate service
- Allow you to exclude sensitive details from professional communications
3. HOW WE SHARE YOUR INFORMATION
3.1 Sharing with Estate Sale Professionals
This is the primary purpose of our service. When you submit a request:
- We share your information with estate sale professionals serving your area who hold an active account with us. We email it directly to the five nearest; others serving your ZIP code can see it in their portal. You can close your request at any time, from the link in your confirmation email, and every professional stops seeing it immediately
- Professionals must agree to our privacy standards before receiving leads
- You can request to limit distribution to fewer professionals
- We track which professionals receive your information
Information Shared with Professionals:
- Name and contact information
- The property's city, state and ZIP code, and the details you write (never a street address, which we do not collect)
- Timeline and requirements
- Photos (if provided)
- General situation (if you choose to share)
Information NOT Shared with Professionals:
- Financial information
- Social Security numbers
- Medical records
- Information you mark as "private"
3.2 Messages You Send Through a Sale Page
A message sent through the contact form on a sale page goes to whoever is running that sale: an estate sale company, or a private seller listing their own sale. We give them:
- Your name and your email address, so they can answer you directly. If they reply from their own email, it goes to your inbox and they see your address in it
- Your message, and the item you asked about if you chose one
When a company answers you from its account on our site, we email you the reply. Pressing "Reply" on that email goes to the address the company has chosen to show on its public profile, if it shows one. A company that does not show an email address cannot be reached that way, and our email tells you to write back through the sale page instead. A private seller is never named on the site; if they answer you by email, you will see the address they reply from.
3.3 Service Providers
We share information with the service providers that run the site:
| Provider | Purpose | Data Shared |
|---|---|---|
| Cloudflare R2 | Photo and document storage | Photos, logos and documents you upload |
| Netlify | Website hosting | Technical data only |
| Resend or SendGrid | Email delivery | Email addresses and message content |
| Supabase | Database hosting | All data (encrypted) |
All service providers are contractually required to protect your information.
3.4 Legal and Safety Disclosures
We may disclose information when:
- Required by law: Subpoenas, court orders, legal process
- Protecting rights: Our rights, property, or safety, or that of others
- Emergency situations: Imminent harm to individuals
- Business transfers: Merger, acquisition, or sale of assets
3.5 Aggregate and De-identified Data
We may share aggregate or de-identified data that cannot identify you for:
- Industry reports and research
- Marketing and promotional materials
- Service improvement initiatives
4. YOUR PRIVACY RIGHTS
4.1 Universal Rights
Regardless of location, you have the right to:
- Access: Request a copy of your personal information
- Correction: Fix inaccurate or incomplete information
- Deletion: Request removal of your personal information
- Portability: Receive your data in a portable format
- Opt-Out: Stop receiving marketing communications
- Limit Sharing: Restrict which professionals receive your information
- Revoke Consent: Withdraw previously given consent
4.2 How to Exercise Your Rights
Email info@estatesaleconnect.com with "Privacy request" in the subject line. We will respond within 30 days (or as required by applicable law).
4.3 California Residents (CCPA/CPRA)
Additional rights under California law:
- Right to know categories and specific pieces of personal information collected
- Right to know purposes for collection and third parties with whom we share
- Right to delete (with exceptions)
- Right to opt-out of "sale" (we do not sell personal information)
- Right to limit use of sensitive personal information
- Right to correct inaccurate information
- Right to non-discrimination
Shine the Light: California residents can request information about sharing with third parties for direct marketing.
4.4 European Residents (GDPR)
Additional rights for EEA/UK residents:
- Right to object to processing based on legitimate interests
- Right to lodge a complaint with supervisory authorities
- Right to withdraw consent at any time
- Right to object to automated decision-making
4.5 South Carolina Residents
Under South Carolina law:
- Right to be notified of data breaches affecting your personal information
- Right to sue for damages resulting from violations of data protection
4.6 Other State Rights
Residents of Virginia, Colorado, Connecticut, and Utah have similar rights. Contact us for state-specific information.
5. DATA SECURITY
5.1 Security Measures
We implement industry-standard security measures:
- Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
- Access Controls: Role-based access, multi-factor authentication
- Monitoring: 24/7 security monitoring and intrusion detection
- Testing: Regular penetration testing and vulnerability assessments
- Training: Annual security training for all employees
- Physical Security: Secure data centers with restricted access
5.2 Data Breach Response
In case of a data breach:
- We will investigate immediately
- Notify affected users within 72 hours (or as required by law)
- Notify relevant authorities as required
- Provide information about steps you can take to protect yourself
- Document and improve our security based on lessons learned
5.3 Your Security Responsibilities
You can help protect your information by:
- Using strong, unique passwords
- Not sharing your account credentials
- Reporting suspicious activity immediately
- Keeping your contact information updated
6. DATA RETENTION
We retain personal information for the following periods:
| Data Type | Retention Period | Reason |
|---|---|---|
| Consumer requests | 12 months after last interaction | Service delivery and support |
| Professional accounts | Account duration + 3 years | Tax and legal compliance |
| Photos | 90 days after upload | Temporary service delivery |
| Line numbers and sign-ups at a sale | Email address: the day after the sale day. First name and party size: 30 days | Reminders, cancellation notices and the waitlist; letting the organiser run the door |
| Email communications | 3 years | Quality assurance and disputes |
| Marketing interactions | Until opt-out + 3 months | Marketing suppression |
| Security logs | 1 year | Security and fraud prevention |
| Cookies | Varies (see Cookie Policy) | Various purposes |
After retention periods, data is securely deleted or anonymized.
7. CHILDREN'S PRIVACY
- Our services are not directed to anyone under 18
- We do not knowingly collect information from anyone under 18
- If we discover we have collected information from someone under 18, we will delete it immediately
- If you believe we have information from someone under 18, contact us immediately at info@estatesaleconnect.com
8. INTERNATIONAL DATA TRANSFERS
Your information may be transferred to and processed in:
- United States (primary processing)
- Countries where our service providers operate
We ensure appropriate safeguards through:
- Standard Contractual Clauses (for EU data)
- Privacy Shield principles (where applicable)
- Contractual obligations for data protection
By using our services, you consent to these transfers.
9. COOKIE POLICY
9.1 What Are Cookies?
Cookies are small text files stored on your device that help us provide and improve our services.
9.2 How We Use Cookies
| Cookie Type | Purpose | Duration | Can You Disable? |
|---|---|---|---|
| Essential | Site functionality | Session | No (site won't work) |
| Analytics | Understand usage | 2 years | Yes |
| Marketing | Ad targeting | 1 year | Yes |
| Preferences | Remember settings | 1 year | Yes |
9.3 Managing Cookies
- Cookie Banner: Use our consent tool when you first visit
- Browser Settings: Block or delete cookies (may limit functionality)
- Opt-Out Tools:
10. THIRD-PARTY LINKS AND SERVICES
Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies before providing information.
Estate sale professionals are independent businesses with their own privacy practices. While we require them to protect your information, we recommend reviewing their individual privacy policies.
11. DO NOT TRACK SIGNALS
We do not currently respond to Do Not Track browser signals. However, you can control tracking through:
- Our cookie consent tool
- Browser privacy settings
- Ad blocker extensions
12. CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy periodically. We will notify you of material changes by:
- Posting the updated policy with a new "Last Updated" date
- Displaying a prominent notice on our website
- Sending email notification to registered users
- Requiring renewed consent where legally required
13. DATA PROTECTION OFFICER
While not legally required to have a DPO, we have designated a privacy contact:
Privacy Contact
Estate Sale Connect
Email: info@estatesaleconnect.com
14. SPECIAL CONSIDERATIONS FOR SENSITIVE SITUATIONS
We understand that estate sales often occur during difficult times involving:
- Death of loved ones
- Health challenges
- Divorce or separation
- Financial hardship
We handle such information with extra care:
- Limited access on need-to-know basis
- Option to communicate without sharing sensitive details
- Training for staff and professionals on respectful communication
- Enhanced security for sensitive data categories
- Right to request complete deletion at any time
15. CONTACT INFORMATION
For privacy-related questions, concerns, or requests:
Email: info@estatesaleconnect.com
Put "Privacy request" in the subject line and we will respond within 30 days.
Your privacy is important to us. If you have any concerns about how we handle your information, please don't hesitate to contact us.