How ScotianAtlas handles personal information

• Who is accountable. Lloyd Liu, of Sutton Group Professional Realty, under broker Adam Hennigar. Questions about this page, or about anything we hold, come to us first.
• How to reach us. 3845 Joseph Howe Drive, Suite 100, Halifax, NS B3L 4H9 · 902-440-0477. You can withdraw a consent at any time — section 05 says how, and withdrawing costs you nothing.

ScotianAtlas is the product name of a website operated by Lloyd Liu, a licensed salesperson of Sutton Group Professional Realty, whose broker of record is Adam Hennigar. The brokerage’s licensed office is 3845 Joseph Howe Drive, Suite 100, Halifax, NS B3L 4H9, telephone 902-440-0477. Lloyd Liu is the person accountable for the personal information this site collects, and a message to that office reaches them.

It covers this website, the registered-user area behind the registration door, and the e-mail we send you. It does not cover NSAR’s MLS® System itself: the listing information shown here is licensed to us by the Nova Scotia Association of REALTORS® and the Association is responsible for its own records. It does not cover another company’s site you reach from a link here.

Nothing on this list is collected for its own sake, and most of the site works without any of it.

• Browsing. Every request to this site is served through Vercel, which records the request — your IP address, the browser string your device sends, the page asked for, the time and the response — in its server log. This is how the site is served and how it is defended.
• Mail that comes back. If a message we send you cannot be delivered — your mail server refuses it, or you mark it as spam — we record your address, the reason the message was refused and the report our mail provider sends us, and we stop mailing that address. This is how we avoid mailing an address that has told us to stop. You can ask us what is on that list for you, and ask us to remove it, at the address at the foot of this page.
• The map. The basemap under the parcels comes from Mapbox and your browser fetches its tiles directly, so your IP address reaches Mapbox whenever a map is on screen. The parcel boundaries drawn over it are ours, served from our own routes.
• The search box. What you type into the search box at the top of the site goes to our own route and to no one else: the text reaches our server, and like every request it appears in the server log described above. Your five most recent searches are kept in your browser and are never sent to us. One box on the site behaves differently, and we would rather name it than leave you to guess — the address box on the area, comparison and ranking pages sends what you type to Mapbox, which is what turns an address into a point.
• Listing photos. Photographs are served by this site, from our own route and our own private storage, so your browser asks nobody but us for them. Where a photograph is not archived yet, our server fetches it from the feed’s media host and re-serves it to you: that request is ours and carries nothing of yours. One leftover from when photographs did load from that host directly is still in the page’s head — every page opens a connection to it in advance, which tells that host your IP address although no photograph comes down it.
• Nearby. If you use the Nearby screen and grant your browser’s location permission, your device’s coordinates are sent to our own route to find what is for sale around you. We do not write them to our database; like every request, the URL that carried them appears in the server log.
• Registration. Creating an account collects your name and e-mail address through Clerk, our sign-in provider. When you accept the Terms of Use we record the acceptance — its version, its fingerprint, the time, the page you came from, your IP address and your browser string. That record is the evidence NSAR’s rules require us to keep, and it is why the two technical fields are there.
• Membership. If you buy a membership, the payment itself is taken by Stripe on Stripe’s own pages: we never see or hold your card. We keep the customer and subscription identifiers Stripe gives us, and your membership status.
• What you save. Saved listings and saved searches are stored against your account so they are there when you return.
• When you ask us for something. The two enquiry forms — a buyer’s ask on a listing and an owner’s ask for a written read — collect your name, the contact you give us, the property or address concerned, anything you write in the message, the exact consent wording you were shown, and your browser string. A form you do not send collects nothing.
• The record of that ask, kept together. However you reach us — an enquiry on a listing, a request to see a home, an owner’s ask for a written read, or an area you ask to be told about — we keep ONE record of it: which of those it was, what it was about, a reference to the exact consent wording you were shown, where you first arrived on this site from, and the dates it moved from asked to answered. It is held for the period section 09 gives for an enquiry, and it is never sold, rented or traded.
• What we never collect. We do not ask for, and have no field for, your date of birth, your income, your social insurance number or any government identifier. We do not buy information about you from anyone.

• To run the VOW. The Association’s rules let us show sold history and MLS® detail to registered users, and require us to know who they are. Registration exists for that reason.
• To keep the records the licence requires — the acceptance of the Terms of Use, and the record of each consent, which Canada’s anti-spam law puts on us to prove.
• To send you what you asked for — the alert about a home you saved, the answer to an enquiry, and the service messages about your own account.
• To defend the site. The VOW Program Rules oblige us to monitor for misuse of the listing data. Request logs and rate limits are how that is done.
• Never to sell. We do not sell, rent or trade your information or your enquiry to anyone — not to agents, not to lenders, not to advertisers. There is no advertising on this site.

Registering is one consent; being e-mailed about a market is another, and we keep them apart. Where we ask for an e-mail consent, the exact wording you agree to is shown at that moment and stored with your consent, word for word, with its date — so what you agreed to can always be read back. We do not restate that wording here, because the record’s copy is the one that counts: the consents recorded against your account can be read there, each with its version and its dates, on your account page.

One of them is not held against an account at all, and the account page cannot show you what it does not hold: the consent on an enquiry form is recorded against that enquiry. It keeps the wording you were shown and the date you gave it, in the same way — ask us at the address in §11 and we will read it back to you. The area watch, which was recorded against an e-mail address rather than an account, was retired on 21 September 2026: no address remained under it on that day, its table is emptied by rule, and no new subscription can be written.

You can withdraw an e-mail consent at any time: on that page, through the unsubscribe link the mail carries, or by writing to us at the address in §11 — whichever you have to hand, at no cost and with no sign-in. Withdrawing stops that mail and keeps your saves; it does not delete the consent record itself, which is the proof of what we were permitted to send. Service messages about your own account are not consent-based and end when the account closes; the account page says so on that row rather than drawing a control that would do nothing.

Each of these is a company or body we use today, named with what it does. We remain accountable for the information they handle for us.

• Clerk — sign-in and account identity: your name, e-mail address and password.
• Supabase — the database and the private file storage behind this site, running in Canada Central (ca-central-1). Everything we hold about you that is not held by one of the others below is here.
• Vercel — hosting: it serves every page and route, holds the server logs, and stores the pre-built map tiles.
• Resend — e-mail delivery: it is handed the address and the message we send you.
• Stripe — membership payments, taken on Stripe’s own pages under Stripe’s privacy policy.
• Mapbox — the basemap, fetched by your browser, and the address lookup on the area, comparison and ranking pages.
• The nightly backup. No nightly copy of the database has been taken yet. When the first one is, it will be run on GitHub’s machines in the United States and kept, encrypted, by Amazon Web Services in its Canadian region, and both will be named in the table below.
• The Nova Scotia Association of REALTORS® and The Canadian Real Estate Association — under the agreement that lets us display listings, they and their authorized representatives may access this website, including the registered-user area, to verify that we are complying with the MLS® Rules and the VOW Program Rules.

The tour and video players. A listing may carry a virtual tour or a video hosted by one of four companies — YouTube (Google), Vimeo, Matterport (CoStar) or Planitar, which makes iGUIDE. Where one is shown, the player is not loaded when the page opens: it loads only when you tap it, and until you do, no request goes from this site to any of them. Once you tap, that company serves the player to your browser directly — it receives your IP address and browser string, may set its own cookies and browser storage, and records the playback under its own terms and privacy policy. Google’s applies to a YouTube player: our use of YouTube API Services is governed by it, and you can read it at http://www.google.com/policies/privacy. Viewing an iGUIDE tour puts you under iGUIDE’s own terms of use, which say so themselves; an iGUIDE tour comes off a record once the property is sold or leased.

Our database runs in Canada Central (ca-central-1). The other companies named above process information outside Nova Scotia, and some of them outside Canada. While it is in another country, it is subject to that country’s laws, and its courts, law enforcement and national-security authorities may be able to obtain access to it. We remain accountable for it wherever it is, and we use contractual means to require a comparable level of protection.

We set no advertising cookies and no cross-site tracking cookies, and the only analytics on this site is our host’s own: Vercel Web Analytics counts page views and Vercel Speed Insights measures how fast pages load. Neither sets a cookie or keeps an identifier for you from one day to the next; they receive the page address, the page you came from, your browser, device type and country, and the load timings, and nothing from your account. What is set is this:

• Clerk’s session cookies — set when you sign in, so the site knows the session is yours. Signing out clears them.
• __Host-sa_admin — an operator’s session for our own administrative pages. It holds a random identifier that expires after 8 hours, and it is never set for a reader.
• vp-recent-searches — your last five searches, kept in your browser so the search box can offer them again.
• tw_area_seen — the date you last opened each area page, kept in your browser so the page can work out what has changed since. The date stays on your device.
• tw.compare — the listings in your compare tray, kept in your browser so the tray survives a reload.
• sa.tab: — where you are in each tab of the site, written as you move so that Back goes where you came from rather than to the top. It is kept for the length of the browser session only, and it is gone when you close the tab.

Everything on that list except the sign-in cookies and the operator’s cookie is kept by your browser and never sent to us; clearing your browser’s storage for this site removes all of it, and costs you nothing but those conveniences.

• A closed account — the sign-in link, your saved listings, your saved searches, your watches and the log of what you did here — 30 days from the day you ask us to close it. Until that day runs out you can change your mind and nothing has been removed.
• The technical record kept with a consent — the IP address and browser string captured when you granted or withdrew it — 3 years from the withdrawal or the expiry. The consent record itself stays; this is the evidence inside it.
• The consent record — what you agreed to, in the wording you were shown, and when — 3 years from the day the account closes. Canada’s anti-spam law puts the burden of proving a consent on us, and a withdrawal is recorded rather than erased.
• Your acceptance of the Terms of Use — the version, its fingerprint and the time — 7 years from the day the account closes. It is the brokerage’s record that the MLS® licence requires.
• Every other disclosure we made to you in writing — 3 years from the day the account closes.
• The log of actions taken on your account — 13 months from each action.
• The count of listing records you read each day — 13 months from each day counted.
• The record that a listing was opened — 90 days from the view.
• A message we queued and sent you — 90 days from the send.
• The record of an operator session on our own administrative pages — 13 months from the sign-in.
• The record that your mail server refused a message, or that you marked one as spam — For ever — it has to outlive everything else, or we would mail an address that told us to stop.

Your consent records and the Terms version you accepted stay on the clocks in the table above — they are the proof of what you permitted and of the registration the licence requires. The record of an enquiry you sent us and of what we answered stays as the record of that exchange. If your mail server ever refused a message from us, that fact stays for ever, because it is what stops us writing to you again.

Two things on this page have no period of ours to give. Our hosting provider keeps its own request logs for its own period, which is its to state, not ours. And our copy of the listing data tracks what NSAR serves us and is refreshed against the feed; it is not a separate archive of your activity.

Everything travels over an encrypted connection. The keys that can read the database are held on the server and never sent to a browser; the database itself enforces row-level access so one account’s rows cannot be read by another; stored photographs sit in a private bucket and are served only through our own route. Access to the administrative tools is restricted to the operator.

A listing agent’s personal e-mail address and cell phone number are never displayed on this site, never served by our routes, and never written to our database. The listing agent’s name, the listing brokerage’s name and the brokerage’s office phone are attribution, and those we do display.

No safeguard is perfect. If a breach of our security creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify you, as PIPEDA requires, and we will tell you what we know and what to do about it.

Sign in and open your account: it prints your name and e-mail as we hold them, every consent record with its wording version and its dates, the Terms of Use version you accepted and when, and your membership standing. Your sign-in details are edited through the same room. Two things we hold are not printed there and the page says so: the technical record kept with each consent — the IP address and browser string captured when you granted or withdrew it — and the log of actions taken on your account. Ask us and we will give you both.

To correct something, write to us at 3845 Joseph Howe Drive, Suite 100, Halifax, NS B3L 4H9, or telephone 902-440-0477. Write to info@scotianatlas.com. We answer within a reasonable time and at little or no cost to you. For a copy of everything we hold, you do not have to ask anyone: your account gives you the whole file, read from every table in our database that holds a record against your account, your sign-in or the address you gave us — and where something about you cannot be reached from any key of yours, the file names it rather than leaving it out.

Closing your account is done from your account. You ask, and a 30-day recovery window starts: nothing is removed during it and you can change your mind at any point. When it runs out, your saved listings, saved searches and the log of what you did here are removed, the identity on your record is cleared, and every consent you hold is withdrawn. What stays behind, and for how long, is section 09 — and it is the proof of what you permitted and of the registration the licence requires, not a copy of you. Deleting your sign-in through Clerk’s own room ends the mail and removes the account they hold; it is a different act from this one, and either can be taken first.

Bring it to us first: 3845 Joseph Howe Drive, Suite 100, Halifax, NS B3L 4H9 · 902-440-0477. We will tell you what we did and why. If you are not satisfied, you can take it to the Office of the Privacy Commissioner of Canada, at 30 Victoria Street, Gatineau, Quebec, K1A 1H3, whose site is priv.gc.ca and whose complaint form is open to anyone. Complaining to us first is not a condition of complaining to them.

When what we do changes, this page changes with it, and the date below changes too. A change that affects how we may contact you is not made retroactively: a consent you gave stands on the wording you were shown, which is what the record holds.