Privacy Policy
Important Notice
This Privacy Policy covers steppcommercial.com and all related Stepp Commercial services. By using our website or submitting any form, you acknowledge this policy. California residents have additional rights under the CCPA/CPRA as described in Section 9.
CA DRE License No. 02325250 | 2850 Colorado Avenue, Santa Monica, CA 90404
1. Who We Are
Stepp Commercial ("we," "us," or "our") is a California-licensed commercial real estate brokerage specializing in multifamily investment properties across Los Angeles County and Southern California, operating under CA DRE License No. 02325250.
Our principal office is located at 2850 Colorado Avenue, Santa Monica, CA 90404. For privacy-related inquiries, contact us at [email protected].
2. Information We Collect
We collect information in the following categories when you visit our website, fill out a form, or interact with our services or advertising:
| Category | Examples | Source | Purpose |
|---|---|---|---|
| Contact & Identity | Full name, email address, phone number | Forms, direct contact | Respond to inquiries, lead follow-up |
| Property Information | Property address, unit count, estimated value, ownership status | Get My Property Value form | Provide property valuations, identify buyers |
| Investment Profile | Budget range, investment goals, 1031 exchange interest, timeline | Be The First To Know form, conversations | Match investors with suitable listings |
| Technical & Device | IP address, browser type, device type, pages visited, time on site | Automatically via cookies, pixels, analytics | Analytics, site improvement, ad targeting |
| Behavioral & Ad Data | Pages viewed, clicks, referral source, ad interactions | Google Analytics, Meta Pixel, LinkedIn Insight Tag | Remarketing, conversion tracking, campaign optimization |
| Communications | Emails sent/received, messages via contact forms | Direct interaction with our team | Service delivery, follow-up communications |
| Publicly Available | Property ownership records, publicly listed transaction data | Public real estate records | Market analysis, client matching |
Automatic Collection
When you visit steppcommercial.com, certain information is collected automatically through cookies, pixels, and tracking technologies. This includes:
- Google Analytics 4 — collects anonymized browsing data (pages visited, session duration, referral source) to help us understand site traffic
- Meta (Facebook) Pixel — collects behavioral data (page views, form submissions, conversions) for ad targeting, retargeting, and campaign measurement on Meta platforms
- LinkedIn Insight Tag — may be used to measure campaign performance and build matched audiences for LinkedIn advertising
- Google Ads Conversion Tracking — records conversions when users take actions after clicking a Google ad
- Rank Math SEO — used for on-site SEO optimization; may log basic technical data
3. How We Use Your Information
We use the personal information we collect for the following purposes:
| Purpose | Legal Basis (CCPA Context) | Third Parties Involved |
|---|---|---|
| Respond to property valuation requests | Performance of service / Legitimate interest | Internal agents only |
| Send off-market and pre-market opportunities (if opted in) | Consent (Join Early Access form) | Email platform |
| Show targeted ads on Google, Meta, LinkedIn | Legitimate interest / Consent via cookie banner | Google, Meta, LinkedIn |
| Retarget website visitors with relevant property ads | Legitimate interest / Consent via cookie banner | Google Ads, Meta Ads, LinkedIn Ads |
| Analyze website performance and user behavior | Legitimate interest | Google Analytics |
| Improve our website, content, and marketing strategy | Legitimate interest | Internal team |
| Comply with legal obligations (DRE regulations, CA law) | Legal obligation | CA DRE, regulatory bodies |
| Prevent fraud and ensure site security | Legitimate interest / Legal obligation | Hosting/security providers |
| Press releases and transaction announcements | Legitimate interest | Press wire services, media |
We will never sell your personal information to third parties for their own marketing purposes. We do not rent or trade email lists.
4. How We Share Your Information
We do not sell personal information. We may share data with the following categories of recipients only as described below:
| Recipient / Category | Information Shared | Why |
|---|---|---|
| Meta Platforms, Inc. | Hashed email, device ID, browser events, page views, IP (via Pixel/CAPI) | Ad targeting, retargeting, conversion measurement |
| Google LLC | Browsing behavior, device data, IP, conversion events | Google Analytics, Google Ads, conversion tracking |
| LinkedIn Corporation | Profile matching data (via Insight Tag) | B2B ad targeting to real estate investors |
| Email Marketing Platform | Name, email, phone (if opted in) | Send property alerts and market updates |
| CRM Software | Contact details, property inquiry data | Lead management, agent follow-up |
| Affiliated Brokers / Partner Agents | Contact info and investment criteria (with consent) | Facilitate out-of-state 1031 exchange transactions |
| Press / Newswire Services | Anonymized deal data (sold price, units, neighborhood) | Press releases and market reports |
| Legal / Regulatory Authorities | Data required by subpoena, court order, or regulatory request | Legal compliance (CA DRE, law enforcement) |
| Successor Business | All data held at time of transaction | Business continuity (in case of sale/merger) |
All third-party service providers are contractually required to protect your data and use it only for the purposes we specify.
5. Advertising, Pixels & Retargeting
We use digital advertising to reach potential clients, including property owners who may wish to sell and investors seeking multifamily opportunities in Los Angeles and Southern California.
Platforms We Advertise On
- Google Search Ads & Display Network
- Meta Ads (Facebook & Instagram)
- LinkedIn Sponsored Content
- YouTube Ads (via Google Ads)
Tracking Technologies Used
- Meta Pixel / Meta Conversions API (CAPI) — tracks page visits, form fills, and conversions. Data is sent to Meta to build lookalike audiences and retarget visitors who did not complete a contact form.
- Google Ads Conversion Tag — fires when a user completes a form submission, used to measure lead generation campaign effectiveness.
- Google Tag Manager — used to deploy and manage all tracking scripts from a single platform.
- LinkedIn Insight Tag — measures performance of LinkedIn ad campaigns and enables retargeting of visitors who engaged with our site.
Retargeting
If you visit steppcommercial.com, we may show you advertisements on other websites and platforms (such as Facebook, Instagram, and Google Display Network) based on your visit. You can opt out of retargeting at any time:
- Google Ads Opt-Out: adssettings.google.com
- Meta Ad Preferences: facebook.com/ads/preferences
- LinkedIn Ad Opt-Out: linkedin.com/psettings/guest-controls
- NAI Opt-Out Tool: optout.networkadvertising.org
Do Not Sell or Share (CCPA)
Sharing data with advertising platforms like Meta and Google for cross-context behavioral advertising may be considered "sharing" under the CCPA/CPRA. California residents have the right to opt out. See Section 9 for instructions.
6. Cookies & Tracking Technologies
We use cookies and similar technologies on our website. Here is a summary of what we use and why:
| Cookie Type | Examples | Purpose | Duration |
|---|---|---|---|
| Strictly Necessary | WordPress session, CSRF token, login state | Website functionality | Session |
| Analytics | Google Analytics (_ga, _gid, _gat) | Understand site usage and traffic sources | Up to 2 years |
| Marketing / Advertising | Meta Pixel (_fbp, _fbc), Google Ads (IDE, _gcl_au) | Retargeting, conversion tracking, ad measurement | Up to 2 years |
| Functional | Language preferences, form data | Remember your preferences | Up to 1 year |
| Third-Party Social | LinkedIn (li_gc, bcookie), LinkedIn Insight | Social sharing, professional ad targeting | Up to 2 years |
How to Manage Cookies
- Browser Settings: Most browsers allow you to block or delete cookies. Visit your browser's help documentation for instructions.
- Cookie Consent Banner: When you first visit our site, you will be presented with a cookie consent banner where you can accept, reject, or customize cookie categories.
- Google Analytics Opt-Out: Install the browser add-on at tools.google.com/dlpage/gaoptout
- Global Privacy Control (GPC): Our website honors browser-level GPC signals. If your browser is configured to send a GPC signal, we will treat it as an opt-out of the sale/sharing of your personal information, as required under CCPA 2026 regulations.
7. Data Retention
We retain personal information only as long as necessary to fulfill the purposes described in this policy, unless a longer period is required by law:
| Data Category | Retention Period | Reason |
|---|---|---|
| Contact form submissions (leads) | 3 years from last interaction | Business follow-up, legal compliance |
| Email subscriber data | Until unsubscribed + 1 year | Communication compliance |
| Google Analytics data | 14 months (configured in GA4) | Industry standard analytics window |
| Meta Pixel event data | Up to 180 days (Meta platform) | Retargeting window |
| Transaction records | 7 years | CA DRE record-keeping requirements |
| Legal/compliance records | As required by law | Regulatory compliance |
| Security logs | 90 days | Fraud prevention |
8. Data Security
We take reasonable technical and organizational measures to protect your personal information, including:
- SSL/TLS encryption for all data transmitted between your browser and our website
- Secure, password-protected access to our CRM and backend systems
- Limited access to personal data — only staff who need it for their role can access it
- Regular software updates and security patches applied to our website platform
- Reputable third-party hosting with built-in security protections
No method of transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify affected individuals as required by applicable law.
9. Your Privacy Rights (California Residents — CCPA/CPRA)
If you are a California resident, you have the following rights under the CCPA as amended by the CPRA and the 2026 regulations:
| Your Right | What It Means | How to Exercise |
|---|---|---|
| Right to Know | Request disclosure of what personal information we have collected about you, where it came from, and how it has been used or shared | Email [email protected] |
| Right to Delete | Request deletion of your personal information we have collected and retained, subject to certain exceptions | Email [email protected] |
| Right to Correct | Request correction of inaccurate personal information we hold about you | Email [email protected] |
| Right to Opt Out of Sale/Sharing | Opt out of the sharing of your personal information for cross-context behavioral advertising (e.g., Meta Pixel, Google Ads retargeting) | Click "Do Not Sell or Share My Personal Information" in the footer, or email us |
| Right to Limit Sensitive PI | Request that we limit how we use or disclose sensitive personal information beyond what is necessary to provide services | Email [email protected] |
| Right to Non-Discrimination | We will not discriminate against you for exercising any of your privacy rights | Automatic — no action required |
How to Submit a Request
- Email: [email protected]
We will respond to verified requests within 45 days. We may need to verify your identity before processing your request.
Global Privacy Control (GPC)
Our website is configured to honor browser-level Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will automatically treat it as a request to opt out of the sale and sharing of your personal information for targeted advertising, in compliance with CCPA 2026 regulations.
10. Children's Privacy
Our website and services are intended solely for adults and are not directed at children under the age of 16. We do not knowingly collect personal information from anyone under 16 years of age. Under CCPA 2026 amendments, any data collected from individuals under 16 is automatically classified as sensitive personal information and triggers additional protections.
If you believe we may have collected data from a minor, please contact us immediately at [email protected].
11. Third-Party Links & Embedded Content
Our website may contain links to third-party websites, embedded content, or integrations with external platforms. These third parties have their own privacy policies, and we have no control over their data practices. Key third-party platforms integrated with our site include:
- Google (Analytics, Ads, Maps) — policies.google.com/privacy
- Meta (Facebook Pixel, Instagram) — facebook.com/privacy/policy
- LinkedIn — linkedin.com/legal/privacy-policy
- WordPress / hosting platform
12. Automated Decision-Making
We do not use fully automated systems to make significant decisions about individuals without human review. When we use algorithmic tools or AI-assisted platforms for ad targeting or CRM scoring, these support our team's decisions, they do not replace them.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top of this page. Your continued use of our website after changes take effect constitutes your acceptance of the updated policy.
14. Contact Us
For any questions or requests regarding this Privacy Policy, email us at [email protected]