Privacy Policy

Effective August 3, 2026 — Last revised August 3, 2026

This Privacy Policy describes how Bearstone Property (“we,” “us,” or “our”) collects, uses, retains, and protects the personal information of individuals (“you” or “applicant”) who submit a rental application through this website for the property located at 6 Gentle Breeze, Newport Coast, California 92657. By submitting an application, you acknowledge that you have read and understand this Policy.

1. Scope

This Policy applies to personal information collected through the rental application form on this website (6gentle.netlify.app, belcara.com, and any successor domain) and to any documents uploaded or emailed in connection with that application.

2. Information We Collect

We collect the information you provide through the application form: full legal name, date of birth, telephone number, email address, driver license number and state, current and prior residence addresses, landlord names and monthly rent amounts, employment information including employer name, position, supervisor contact information and gross monthly income, bank name and account type, personal references, and your electronic signature.

We also collect any documents you choose to upload, which may include federal tax returns, pay stubs, bank or investment account statements, and government-issued photo identification. These documents may contain sensitive identifiers including Social Security numbers, bank account numbers, and routing numbers. We do not extract, index, or store any such identifiers separately from the uploaded documents themselves.

We collect technical metadata at the time of submission: the date and time of submission, your browser user-agent string, and your IP address. Your IP address is captured to identify the geographic origin of your electronic signature and to verify the authenticity of your authorization under the Electronic Signatures in Global and National Commerce Act (ESIGN Act) and the Uniform Electronic Transactions Act (UETA). Your IP address is not used for marketing, advertising, behavioral profiling, or any purpose beyond signature verification and fraud prevention.

3. Information We Do Not Collect Directly

This application form does not contain fields for and we do not directly request: Social Security numbers, payment card numbers, bank account numbers, routing numbers, passwords or login credentials to any financial institution, or biometric data of any kind. As noted above, uploaded documents may incidentally contain some of these identifiers; those documents are handled in accordance with Sections 6 and 7 below.

4. No Tracking, No Cookies, No Analytics

This website does not use cookies, web beacons, tracking pixels, session replay tools, or any form of behavioral analytics. We do not deploy Google Analytics, Meta Pixel, or any similar third-party tracking technology. We do not use pen registers, trap-and-trace devices, or any technology that captures the content or metadata of your communications on this site beyond the form submission itself. We do not collect device identifiers or browsing history. The only external services loaded by this website are Google Fonts (for typography rendering) and Google Firebase (for encrypted data storage and document storage), neither of which is used by us to track, profile, or identify you. Google Firebase operates as our data sub-processor under Google Cloud's Data Processing Addendum.

This section addresses obligations under the California Invasion of Privacy Act (Cal. Penal Code Sections 631, 632, 638.51) and the California Consumer Privacy Act as interpreted in Allison v. PHH Mortgage Corp. (N.D. Cal. 2026).

5. Credit and Background Screening

Credit reports, criminal background checks, and eviction history are obtained through TransUnion SmartMove, a third-party screening service operated by TransUnion. Bearstone Property does not collect, handle, or store your Social Security number at any point in the application or screening process. After initial review of your application, you will receive a separate screening invitation directly from TransUnion SmartMove. You will provide your Social Security number and authorize the screening directly through TransUnion's secure portal. The screening fee is paid by you directly to TransUnion and is not collected, handled, or processed by Bearstone Property. For questions about how TransUnion handles your data, refer to TransUnion's privacy policy at transunion.com/privacy.

6. How We Use Your Information

Your information is used solely for the following purposes: (a) evaluating your rental application for tenancy at 6 Gentle Breeze; (b) verifying employment, income, residence history, and references as authorized by you; (c) communicating with you regarding the status of your application; and (d) complying with applicable legal obligations. We do not use your information for marketing, advertising, profiling, automated decision-making, or any purpose unrelated to the evaluation of your specific application.

7. Data Retention and Deletion

Upon completion of our review, authorized Bearstone Property personnel will download a copy of your application for evaluation purposes and will then permanently delete all application data, including all uploaded documents, from the online database. Once deleted, the data cannot be recovered. If your application is denied, all data is permanently deleted within ninety (90) days of the denial. If your application is approved and a lease is executed, only the information necessary for the lease agreement is retained; uploaded financial documents are permanently deleted from the application database.

8. No Sale or Sharing of Personal Information

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising. We do not disclose your personal information to data brokers, advertisers, marketing platforms, or any third party for commercial purposes. We do not engage in any activity that would constitute a “sale” or “sharing” of personal information as those terms are defined under the California Consumer Privacy Act (Cal. Civ. Code Section 1798.140(ad) and (ah)).

9. Permitted Disclosures

We may disclose your personal information only in the following limited circumstances: (a) to a property management company or screening vendor acting as our service provider under a written contract that restricts the use of your data to the services performed on our behalf; (b) to comply with a valid subpoena, court order, or other legal process; (c) to respond to a lawful request from a government agency or law enforcement authority; or (d) as otherwise required by applicable federal or state law. For clarity, Bearstone Property does not transmit your personal information to TransUnion or any consumer reporting agency; you provide your information to TransUnion directly through their secure portal.

10. Consumer Reporting and Investigative Reports

If you authorize a consumer credit report or investigative consumer report through TransUnion SmartMove, you have the following rights under California law: (a) the right to request the nature and scope of any investigation conducted (Cal. Civ. Code Section 1786.22); (b) the right to request and receive a copy of any investigative consumer report obtained; and (c) the right to request the name, address, and telephone number of the screening company that prepared the report. If we take adverse action based in whole or in part on information contained in a consumer report, we will provide you with the name and contact information of the consumer reporting agency, a statement that the agency did not make the adverse decision, and notice of your right to dispute the accuracy of the report.

Required by the California Investigative Consumer Reporting Agencies Act (Cal. Civ. Code Sections 1786-1786.60) and the federal Fair Credit Reporting Act (15 U.S.C. Section 1681 et seq.).

11. Data Security

Your application data is transmitted over TLS-encrypted connections and stored in an encrypted database hosted by Google Firebase (Google Cloud Platform). Uploaded documents are stored in encrypted cloud storage with access restricted to authenticated Bearstone Property personnel. We implement and maintain reasonable security procedures and practices appropriate to the nature of the personal information collected, including access controls, encryption at rest and in transit, and periodic security review.

Security practices are maintained consistent with the obligations set forth in Cal. Civ. Code Section 1798.150(a)(1) and the standards referenced in In re Eureka Casino Breach Litigation (D. Nev. 2024).

12. Data Breach Notification

In the event of a security breach involving your personal information, we will notify you in accordance with California Civil Code Section 1798.82 and any other applicable notification requirements. Notification will be provided in the most expedient time possible and without unreasonable delay, consistent with the legitimate needs of law enforcement and any measures necessary to determine the scope of the breach and restore the integrity of the data system.

13. Your Rights

You may exercise the following rights at any time by contacting us at css@bearstonedc.com:

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting it, and the categories of third parties to whom it has been disclosed.

Right to Access: You may request a copy of the personal information we hold about you, which we will provide in a portable, readily usable format within forty-five (45) days of receiving your verified request.

Right to Correction: You may request that we correct inaccurate personal information.

Right to Deletion: You may request that we delete all personal information we have collected from you, subject to exceptions permitted by law.

Right to Non-Discrimination: We will not deny you housing, charge you different rent, or provide a different level of service because you exercised any privacy right described in this Policy.

These rights are provided consistent with the California Consumer Privacy Act (Cal. Civ. Code Sections 1798.100-1798.199.100), the California Privacy Rights Act, and federal Fair Housing requirements.

14. Verification of Requests

To protect your personal information, we will verify your identity before fulfilling any request to know, access, correct, or delete your data. Verification may require you to confirm your name, the email address associated with your application, and your application reference number. We will not require you to create an account to exercise your rights.

15. No Smart-Home Surveillance

Bearstone Property does not install, require, or use smart-home devices, IoT sensors, digital locks, environmental monitors, or any technology that collects data about tenant movements, habits, or home conditions.

This section addresses the category of claims raised in ACLU of Northern California v. Equity Residential (S.F. Super. Ct. 2025).

16. Children

This application is not directed to individuals under the age of eighteen. We do not knowingly collect personal information from minors.

17. Fair Housing Compliance

Bearstone Property complies with the federal Fair Housing Act (42 U.S.C. Section 3601 et seq.), the California Fair Employment and Housing Act (Cal. Gov. Code Section 12955 et seq.), and the Unruh Civil Rights Act (Cal. Civ. Code Section 51 et seq.). All applicants are evaluated without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, marital status, national origin, ancestry, familial status, source of income, disability, veteran or military status, genetic information, or any other characteristic protected by law. Reasonable accommodations and modifications are available upon request.

18. Application and Screening Fees

Bearstone Property does not charge an application fee. Credit and background screening is conducted through TransUnion SmartMove at a fee of approximately $40 per applicant, paid by the applicant directly to TransUnion. Bearstone Property does not collect, handle, or process any screening payment.

19. Changes to This Policy

We may update this Policy from time to time. Any material changes will be posted on this page with a revised effective date. We will not retroactively reduce the protections afforded to personal information collected before the change without your express consent.

20. Contact

For privacy inquiries, requests to exercise your rights, or complaints:

Bearstone Property
6 Gentle Breeze, Newport Coast, CA 92657
Email: css@bearstonedc.com

You also have the right to file a complaint with the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General at oag.ca.gov.

21. Governing Law

This Policy is governed by the laws of the State of California. Any dispute arising under this Policy shall be resolved in the courts of Orange County, California.