6 Gentle BreezeNewport Coast

Privacy Policy

Effective October 23, 2026 — Version 4.2

This Privacy Policy describes how Bearstone Properties (“we,” “us,” or the “House”) may collect, use, disclose, and protect the personal information of individuals (“you,” “applicant,” or “resident”) who visit this website, submit a rental application, or reside at and use the Resident Portal for the property located at 6 Gentle Breeze, Newport Coast, California 92657 (the “Site”). By accessing or using this Site, you acknowledge that you have read and understand this Policy and consent to the collection and processing of your information as described herein. This Policy does not create rights or remedies in any third party.

1. Scope, and How to Read This Policy

This Policy applies to personal information collected through the rental application on this Site (belcara.com, 6gentle.netlify.app, and any successor domain), to any documents uploaded or emailed in connection with that application, to the Resident Portal at belcara.com/resident and the information residents and occupants provide through it or by text message or email to the House, and to information collected automatically when you visit any page on this Site. Part II of this Policy (Sections 26 through 34) applies specifically to residents and occupants of the property and to the Resident Portal; where Part II and Part I address the same subject for a resident, Part II controls.

How to read this Policy. This Policy is written in two layers, and the distinction matters. Sections 2 through 9 (and, for residents, Sections 27 through 29) describe the categories of information we may collect and the purposes and recipients for which we may process it — the full permitted envelope. Sections 10 and 33 state our current operating practices as of the effective date above, which are narrower than that envelope. Practices may change at any time within the envelope described here, at our discretion; where a change would materially expand processing beyond this Policy, we will update this Policy and, where required by law, obtain consent before the change takes effect (Section 18). Except where applicable law provides otherwise, nothing in this Policy is a covenant, warranty, or guarantee that any particular practice will or will not be adopted in the future. If you do not accept this Policy, do not use the Site.

2. Categories of Information We May Collect

The following categories correspond to California Civil Code Section 1798.140(v) and include both information you provide and information we may collect automatically:

(a) Identifiers — full legal name, date of birth, telephone number, email address, mailing address, driver license number and state, IP address, application reference number, electronic signature.
(b) Financial information — employer name, position, supervisor contact information, gross monthly income, bank name, account type, and uploaded documents that may include federal tax returns, pay stubs, bank or investment account statements, and government-issued photo identification. Uploaded documents may incidentally contain Social Security numbers, bank account numbers, and routing numbers; we do not extract, index, or store any such identifiers separately from the uploaded documents themselves.
(c) Characteristics of protected classifications — only to the extent voluntarily disclosed or required by law for fair housing compliance.
(d) Internet or other electronic network activity information — browser user-agent string, pages viewed, referring page, scroll depth, session duration, clicks and interactions, and information regarding your interaction with the Site.
(e) Geolocation data — approximate location derived from IP address.
(f) Professional or employment-related information — employer, position, income, and employment history as you provide on the application.
(g) Education information — only if voluntarily disclosed.
(h) Inferences — profiles or scores reflecting preferences, characteristics, behavior, or aptitudes, including those generated by automated screening or AI-assisted review tools.
(i) Sensitive personal information — Social Security number, driver license or state identification card number, account log-in credentials, precise geolocation, and contents of communications, solely to the extent incidentally contained in uploaded documents or generated by the application process. We invoke Cal. Civ. Code Section 1798.121(a) only for the limited purposes of performing services you requested.

3. Sources of Information

We may collect personal information from: (a) you, directly through the application form, uploads, email, telephone, or text message; (b) RentSpree, TransUnion or other consumer reporting agencies, solely as authorized by you; (c) landlords, employers, and personal references you identified; (d) your browser and device, automatically when you visit the Site; and (e) publicly available government records where relevant to tenancy verification.

4. Cookies, Pixels, Session Recording, and Similar Technologies

This Site may now or in the future use cookies, web beacons, tracking pixels, session replay tools, heatmaps, form analytics, chat or messaging widgets, embedded media players, A/B testing scripts, server and edge logs, device fingerprinting signals, analytics SDKs, and similar technologies (collectively, “Tracking Technologies”). By using this Site, you acknowledge that Tracking Technologies may be deployed as described in this Policy. The Global Privacy Control (GPC) signal is recognized as a valid opt-out of sale or sharing of personal information as required by California law.

5. Analytics and Advertising

We may use analytics platforms (such as Google Analytics, Google Tag Manager, or comparable services) and advertising technologies (such as Meta Pixel, LinkedIn Insight Tag, Microsoft Clarity, or comparable services) to understand how visitors interact with this Site and to measure the effectiveness of advertisements. If we implement any such platform, we will disclose the specific platforms in use in Section 10 below. Your continued use of this Site after we post notice of any such change constitutes your acceptance of the updated practices.

6. Artificial Intelligence and Automated Processing

Rental applications submitted through this Site are evaluated with the assistance of artificial intelligence, machine learning, and other automated decision-making technology (“ADMT”). This is a standard part of our screening process and may include AI-assisted document review, scoring, risk assessment, or qualification analysis performed by our own systems or by third-party processors acting on our behalf. As of the effective date of this Policy, your personal information is not used to train third-party generative AI models; this is a statement of current practice subject to the change mechanism in Section 18.

Under California law (CCPA ADMT regulations, effective January 1, 2026), where ADMT is used to make or substantially assist a significant decision about housing, you have the right to: (a) receive information about how the ADMT is used in the evaluation; (b) request that a qualified human reviewer evaluate your application; and (c) appeal any adverse decision generated in whole or in part by ADMT. To exercise these rights, contact us using the information in Section 24.

7. Purposes of Processing

We may use your personal information for any of the following purposes: (a) evaluating your rental application for tenancy at 6 Gentle Breeze; (b) verifying employment, income, residence history, and references as authorized by you; (c) communicating with you regarding the status of your application, lease, or tenancy; (d) operating, maintaining, and improving this Site; (e) detecting, preventing, and responding to fraud, security incidents, and illegal activity; (f) complying with applicable legal obligations including fair housing, consumer reporting, data breach notification, and tax or reporting requirements; (g) establishing, exercising, or defending legal claims; and (h) any other purpose disclosed at or before the time of collection.

8. Disclosure of Information

We may disclose your personal information to the following categories of recipients: (a) service providers — a property management company, screening vendor, email or SMS delivery provider, cloud hosting provider, or other entity acting on our behalf under a written contract that restricts the use of your data to the services performed; (b) consumer reporting agencies — solely as authorized by you (note: you provide your information to TransUnion directly through their secure portal; we do not transmit it on your behalf); (c) professional advisors — attorneys, accountants, and consultants who need the information to advise us; (d) parties to a corporate transaction — if the property or business is sold, merged, or transferred, your information may be among the assets transferred, subject to the protections of this Policy; (e) government and law enforcement — to comply with a valid subpoena, court order, or other legal process, or to respond to a lawful request from a government agency; (f) at your direction — to any third party you authorize us to share information with; and (g) de-identified or aggregated data — information that can no longer reasonably identify you may be shared for any purpose.

9. Credit and Background Screening

Credit reports, criminal background checks, and eviction history are obtained from TransUnion through RentSpree, a third-party screening service. You will receive a screening invitation directly from RentSpree, where you authorize the screening and pay the screening fee. That fee is paid by you directly to RentSpree and is not collected, handled, or processed by Bearstone Properties. If you complete our secure online file, we also ask for your Social Security number (or a government photo ID if you do not have one), birth date and driver license number to confirm your identity. These are encrypted with 256-bit AES and stored separately from the rest of your file; after you save them, only the last four digits show on screen. Only the administrator can open the full number when it is needed for your screening, and each time is logged. They are used only to confirm your identity for your application and screening, and they are deleted on the same schedule as the rest of your application.

If we take adverse action based in whole or in part on information contained in a consumer report, we will provide you with the name and contact information of the consumer reporting agency, a statement that the agency did not make the adverse decision, and notice of your right to dispute the accuracy of the report.

10. How the Site Is Currently Configured

This section describes how the Site is configured as of the effective date above. It is a statement of present configuration, not a promise, warranty, or representation about future practice. We may change any of it at any time within the envelope described in Sections 2 through 9, subject to the notice and consent commitments in Sections 4, 5, 6, and 18. Nothing in this section limits the rights reserved to us elsewhere in this Policy.

As of the effective date: the Site does not use advertising or analytics cookies, web beacons, tracking pixels, session replay tools, or behavioral analytics. The Site does not deploy Google Analytics, Meta Pixel, or any similar third-party tracking technology. The Site does not use pen registers, trap-and-trace devices, or any technology that captures the content or metadata of your communications beyond the form submission or message itself.

As of the effective date, the external services loaded by pages of this Site are: Google Fonts (typography rendering); Google Firebase (encrypted data storage, document storage, and sign-in for authorized personnel), which operates as our data sub-processor under Google Cloud’s Data Processing Addendum; Cloudflare Turnstile, a security check on the rental application, holding deposit, and Resident Portal sign-in forms that evaluates browser and device signals to distinguish people from automated programs; and publicly hosted code libraries used to display pages and generate documents. When you sign a rental application on the home page, your IP address is obtained through a third-party lookup service and recorded with your electronic signature. None of these services is used by us to track, profile, or advertise to you.

As of the effective date, the Site operates on servers hosted by Netlify, sends text messages and sign-in codes through Twilio, and sends email through Twilio SendGrid. Certain review, drafting, and summarizing tasks described in Sections 6 and 30 are performed with the assistance of a third-party artificial-intelligence service provider acting on our behalf. Weather, tide, and similar local information shown in the Resident Portal is obtained from United States government sources, including the National Weather Service and the National Oceanic and Atmospheric Administration; no personal information is sent to those sources. Each provider acts as our service provider or processor and is restricted to performing services for us.

As of the effective date, the Site stores a small number of items in your browser’s local storage, session storage, or IndexedDB solely to operate features you use — for example, to remember that you accepted these terms, to keep an authorized sign-in active during a session, and to remember which Resident Portal notices you have already seen. These items are not used to track you across websites and can be cleared through your browser settings at any time.

As of the effective date: we have not sold your personal information. We have not shared your personal information for cross-context behavioral advertising. We have not disclosed your personal information to data brokers, advertisers, marketing platforms, or any third party for commercial purposes. In the twelve months preceding the effective date of this Policy, we have not sold or shared personal information as those terms are defined under Cal. Civ. Code Sections 1798.140(ad) and (ah). This is a statement of historical fact about the twelve-month period described. We expressly reserve the right to sell or share personal information in the future, subject to providing you with advance notice, an opportunity to opt out, and all rights required by applicable law before any such sale or sharing begins.

As of the effective date: rental applications are evaluated with the assistance of AI-based screening tools as described in Section 6. The rights described in Section 6 are available to all applicants.

11. Data Retention

We retain personal information only for so long as reasonably necessary to fulfill the purposes for which it was collected. Upon completion of our review, authorized personnel will download a copy of your application for evaluation purposes and will then permanently delete all application data, including all uploaded documents, from the online database. If your application is denied, all data is permanently deleted within ninety (90) days of the denial. If your application is approved and a lease is executed, the application, including the documents uploaded with it, becomes part of the resident file and is retained with it as described in Section 32.

12. Your California Privacy Rights

California residents may exercise the following rights at any time by contacting us at css@bearstonedc.com:

Right to Know and Access: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collecting it, and the categories of third parties to whom it has been disclosed. We will provide a copy in a portable, readily usable format within forty-five (45) days of receiving your verified request.

Right to Correction: You may request that we correct inaccurate personal information.

Right to Deletion: You may request that we delete all personal information we have collected from you, subject to exceptions permitted by law.

Right to Opt Out of Sale or Sharing: You may opt out of any future sale or sharing of your personal information by contacting us or by transmitting a Global Privacy Control signal from your browser.

Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use and disclosure of your sensitive personal information to what is necessary to perform the services you requested.

Automated Decision-Making: Your rights regarding ADMT used in the evaluation of your application are described in Section 6.

Right to Non-Discrimination: We will not deny you housing, charge you different rent, or provide a different level of service because you exercised any privacy right described in this Policy.

Shine the Light (Cal. Civ. Code Section 1798.83): California residents may request a list of categories of personal information disclosed to third parties for their direct marketing purposes, and the names and addresses of those third parties, once per calendar year.

Do Not Track / Global Privacy Control: The Global Privacy Control (GPC) signal is recognized as a valid opt-out of sale and sharing as required by California law.

Authorized Agents: You may designate an authorized agent to submit privacy requests on your behalf. We may require proof of the agent's authority and may verify your identity directly.

Verification: To protect your personal information, we will verify your identity before fulfilling any request. Verification may require you to confirm your name, the email address associated with your application, and your application reference number. We will not require you to create an account to exercise your rights. We may decline requests that are manifestly unfounded, excessive, or repetitive, or that would require disproportionate effort, as permitted by applicable law.

13. Other State Privacy Rights

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, and other states with comprehensive privacy laws may have additional rights, including the right to access, correct, delete, and obtain a copy of their personal information, as well as the right to opt out of targeted advertising, profiling, and the sale of personal information. If you are a resident of any such state and wish to exercise your rights, contact us using the information in Section 24. If we decline a request, you may appeal the decision by contacting us with the subject line “Privacy Appeal.” If you are dissatisfied with the outcome of your appeal, you may contact the attorney general of your state.

14. No Smart-Home Surveillance

As of the effective date of this Policy, this property is not equipped with smart-home devices, IoT sensors, digital locks, environmental monitors, or any technology that collects data about tenant movements, habits, or home conditions. If any such technology is introduced in the future, we will disclose it in this Policy and provide notice before activation.

15. Data Security

Your application data is transmitted over TLS-encrypted connections and stored in an encrypted database hosted by Google Firebase (Google Cloud Platform). Uploaded documents are stored in encrypted cloud storage with access restricted to authenticated Bearstone Properties personnel. We implement and maintain reasonable security procedures and practices appropriate to the nature of the personal information collected, including access controls, encryption at rest and in transit, and periodic security review. Additional safeguards that apply to the Resident Portal are described in Section 31.

16. Data Breach Notification

In the event of a security breach involving your personal information, we will notify you within thirty (30) calendar days of discovering the breach, in accordance with California Civil Code Section 1798.82, SB 446, and any other applicable notification requirements. Notification will be provided in the most expedient time possible and without unreasonable delay.

17. Children

This application is not directed to individuals under the age of eighteen. We do not knowingly collect personal information from minors. If we learn that we have collected personal information from a child under sixteen, we will delete it promptly.

18. Changes to This Policy

We may update this Policy at any time. An updated Policy takes effect when it is posted on this page with a revised effective date, unless a later effective date is stated. We may, but are not required to, also notify you of a change by email, text message, or a notice on the Site. Your continued use of the Site after the updated Policy takes effect constitutes your acceptance of the changes. Where applicable law requires your consent before we use personal information collected under a prior version of this Policy for a materially different purpose, we will obtain that consent before doing so. The most recent version of this Policy posted on this Site supersedes all prior versions; any cached, archived, or third-party-hosted copy of a prior version is not binding. The effective date at the top of this Policy governs.

19. Fair Housing Compliance

Bearstone Properties complies with the federal Fair Housing Act (42 U.S.C. Section 3601 et seq.), the California Fair Employment and Housing Act (Cal. Gov. Code Section 12955 et seq.), and the Unruh Civil Rights Act (Cal. Civ. Code Section 51 et seq.). All applicants are evaluated without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, marital status, national origin, ancestry, familial status, source of income, disability, veteran or military status, genetic information, or any other characteristic protected by law. Reasonable accommodations and modifications are available upon request.

20. Application and Screening Fees

As of the effective date, Bearstone Properties does not charge an application fee. Credit and background screening is conducted by TransUnion through RentSpree, for a fee set by RentSpree and paid by the applicant directly to RentSpree. Screening payments are not collected, handled, or processed by Bearstone Properties.

21. Text Messaging

If you opt in to receive text messages, property management staff may send you SMS notifications related to your rental application. Mobile information and messaging consent are not shared with third parties or affiliates for marketing or promotional purposes. Message frequency varies. Message and data rates may apply. Reply STOP to cancel, HELP for help. Carriers are not liable for delayed or undelivered messages. Text messaging with residents and occupants is described in Section 30.

22. Third-Party Sites, Links, and Embedded Content

This Site may contain links to third-party websites (such as RentSpree, TransUnion, Google, or directory listing services). This Policy does not apply to those sites. We encourage you to review the privacy policies of any third-party site before providing personal information.

23. International Transfers

This Site is operated from the United States. If you access this Site from outside the United States, your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your jurisdiction.

24. Contact

For privacy inquiries, requests to exercise your rights, or complaints:

Bearstone Properties
6 Gentle Breeze, Newport Coast, CA 92657
Email: css@bearstonedc.com
Phone: (714) 599-1166

You also have the right to file a complaint with the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov.

25. Governing Law

This Policy is governed by the laws of the State of California. Any dispute arising under this Policy shall be resolved in the courts of Orange County, California.

Part II — Residents and the Resident Portal

26. Scope of Part II

This Part II applies to personal information of persons named as tenants on an executed lease for the property and of authorized occupants (each, a “resident”), including information collected through the Resident Portal at belcara.com/resident (the “Portal”), through text messages and email exchanged with the House, and in the course of administering the tenancy. Sections 1 through 25 continue to apply to residents except where this Part II addresses the same subject, in which case this Part II controls. Nothing in this Policy modifies, limits, or supersedes the lease or any right or obligation of a resident or of the House under California landlord-tenant law.

27. Information We May Collect from Residents

In addition to the categories described in Section 2, we may collect the following from or about residents:

(a) Sign-in information — the mobile telephone number and email address on file for the lease, one-time sign-in codes (a code sent by email is stored only in transformed form, a code sent by text message is issued and checked by our messaging provider, and every code expires after ten minutes), and records of each sign-in and attempted sign-in, including date, time, IP address, and browser type.
(b) Tenancy and rent records — lease dates and terms, rent and other amounts due and paid, payment dates, payment method and reference information you or the House record, late fees assessed under the lease, holding deposit and security deposit records, and notices delivered.
(c) Maintenance requests — the description, location within the home, urgency, and preferred times you provide; whether you authorize entry; photographs or video you upload; status updates and notes; and the identity of any vendor assigned and the work performed.
(d) Documents you upload — for example, renter’s insurance declarations, vehicle or pet information required by the lease, and other documents you choose to provide, together with any details you enter about them.
(e) Renter’s insurance information — carrier name, policy number, coverage amounts, effective and expiration dates, additional-interest or additional-insured designations, and the name, telephone number, and email address of your insurance agent.
(f) Communications — the content, date, and time of text messages, email, and Portal notes exchanged with the House, including messages handled with the assistance of the House’s automated assistant, and delivery and read records for notices.
(g) Technical information — the information described in Section 2(d) and 2(e) as it relates to your use of the Portal.
(h) Information from others — information provided by co-residents, the House’s licensed real estate agent, vendors performing work at the property, your insurance agent or carrier, and utility or service providers, in each case in connection with the tenancy.

28. Purposes for Which Resident Information May Be Used

We may use resident information to: (a) administer the lease and the tenancy, including rent accounting, deposit accounting under Cal. Civ. Code Section 1950.5, and the delivery of notices; (b) receive, evaluate, schedule, and complete maintenance and repairs, and arrange entry in accordance with Cal. Civ. Code Section 1954; (c) confirm that renter’s insurance required by the lease is in force and current; (d) verify your identity when you sign in and protect the Portal and the property against fraud and unauthorized access, including payment-redirection fraud; (e) communicate with you about the tenancy, the property, and the neighborhood; (f) comply with legal obligations and respond to emergencies; (g) establish, exercise, or defend legal claims; and (h) the purposes described in Section 7, to the extent they apply.

29. Disclosure of Resident Information

In addition to the recipients described in Section 8, we may disclose resident information to: (a) vendors and contractors performing maintenance, repair, inspection, or other work at the property, limited to what is reasonably needed to perform the work, such as your name, telephone number, the description and photographs of the issue, the location within the home, and entry arrangements; (b) your insurance agent or carrier, when you ask us to send information to the agent you identify, or when we request confirmation of the coverage the lease requires from the agent you identified; (c) the House’s licensed real estate agent, in connection with the leasing transaction, lease documents, and lease renewal; (d) co-residents on the same lease, with respect to information concerning the shared tenancy, such as rent status, notices, and maintenance requests for the home; (e) utility and service providers, to the extent necessary to establish or transfer service for the property; and (f) emergency responders, when we reasonably believe disclosure is necessary to protect the health or safety of any person or the property.

The owners of the property and the House’s licensed real estate agent may view the Portal as it appears to residents, on a view-only basis, to confirm that it is working correctly and to assist residents. In that view, personal details are masked where practicable, no change can be made on a resident’s behalf, and each such sign-in is logged.

30. Text Messages and Email with Residents

Residents may receive text messages and email from the House concerning the tenancy, including one-time sign-in codes, rent and payment notices, maintenance updates, renter’s insurance reminders, property notices, and information about the home and neighborhood. One-time sign-in codes are sent only when you request them. Message frequency varies. Message and data rates may apply. Reply STOP to stop text messages and HELP for help, or contact us using the information in Section 24. If you opt out of text messages, we will continue to communicate with you by email, mail, or other means permitted by the lease and applicable law, and notices required by law will be delivered as the law requires. Mobile information and messaging consent are not shared with or sold to third parties or affiliates for marketing or promotional purposes.

The House uses an automated assistant to help organize incoming messages and maintenance requests, suggest an appropriate vendor, and prepare draft replies and notices. As of the effective date: when you text or email the House, the assistant may send an immediate reply limited to information already on file, such as next steps or confirmation that your message was received and passed on; questions that call for judgment are referred to the House; and rent receipts, late notices, property notices, and maintenance status updates are sent only after the House approves them. Sign-in codes and confirmations of what you have submitted are sent automatically. The assistant does not make decisions about your tenancy.

31. Resident Portal Security

Access to the Portal requires a one-time code sent to the mobile number or email address on file for the lease. Codes expire after a short period and work only once, and repeated requests and attempts are limited. To avoid disclosing whether a particular person is a resident, the Portal gives the same response to every sign-in request. Links to lease documents and request photographs are issued for a limited time. Changes to the bank details shown for rent payment take effect only after a twenty-four (24) hour hold, and a notice is posted in the Portal when such a change takes effect. Owner and agent access to Portal records is limited to authorized persons and is logged.

Payment fraud. The House will never change rent payment instructions by email, text message, or telephone call alone. Payment instructions are valid only as displayed in the Portal. If you receive a request to send rent to a different account, do not send funds; call (714) 599-1166 to confirm. You are responsible for keeping your mobile device and email account secure and for not sharing sign-in codes with anyone.

32. Resident Data Retention and Portal Closing

Portal access ends thirty (30) days after the lease ends, unless the House sets a different date. We retain resident information, including the rental application and the documents uploaded with it, for the term of the tenancy and for a minimum of four (4) years after the tenancy ends. Thereafter, resident information is deleted, de-identified, or archived with access restricted to authorized personnel, and archived information is retained for as long as reasonably necessary to comply with law or to establish, exercise, or defend legal claims, including claims not subject to a limitations period. Sign-in codes cannot be used after they expire.

33. How the Resident Portal Is Currently Configured

As of the effective date, and subject to the same qualifications stated in Section 10: the Portal does not process payments, and no bank or card number of yours is collected through it; the Portal displays the House’s payment instructions only. The Portal does not use advertising or analytics cookies or tracking technology. The property is not equipped with the technologies described in Section 14. The Portal is not used to make automated decisions about any resident’s tenancy.

34. Resident Privacy Rights

Residents have the rights described in Sections 12 and 13 and may exercise them using the information in Section 24. Some requests, such as a request to delete rent, deposit, or lease records, may be limited where we must keep the information to perform the lease, comply with law, or establish, exercise, or defend legal claims; if so, we will tell you which information we kept and why. The House will not retaliate against any resident for exercising a privacy right or any right under the lease or California law, consistent with Cal. Civ. Code Section 1942.5.