Last updated: July 16, 2026
Check-Check is operated by Scot Thom as a sole proprietorship. We provide automated website compliance scanning and monitoring services for real estate professionals through check-check.online. We serve customers in Canada and the United States.
For privacy inquiries: scot@check-check.online
This Privacy Policy applies to personal information we collect through our Website, our scanning and monitoring services, and our email communications. It covers users and contacts in all jurisdictions we operate in, including Canadian provinces (Ontario, Manitoba, British Columbia, Alberta) and U.S. states (Florida, California, and others as we expand).
| Category | What | How |
|---|---|---|
| Account information | Name, email address, business name, phone number, jurisdiction | You provide this when registering or requesting a scan |
| Payment information | Payment method details | Collected and processed by Stripe, Inc.; we do not store card numbers |
| Website scan data | URLs submitted for scanning, scan results, compliance scores, violation details | Generated by our scanning service from publicly accessible websites |
| Usage data | Pages visited, features used, browser type, approximate location (country/region) | Collected automatically via Umami analytics (privacy-focused, cookieless, no cross-site tracking) |
| Communication data | Emails you send us, support conversations | When you contact us |
| Publicly available professional data | Real estate licensee names, brokerage names, office addresses, business contact information as published by regulators | Collected from public regulatory registries including RECO (ON), WRREB (MB), BCFSA (BC), RECA (AB), Florida DBPR, California DRE |
We use your information to: provide the compliance scanning and monitoring services you requested; deliver compliance reports and regulatory change alerts; process payments; respond to your inquiries and provide support; improve the accuracy and coverage of our scanning service; contact real estate professionals about compliance issues identified on their publicly accessible websites; comply with legal obligations; and, with your consent, send marketing communications.
We process personal information on the following bases: performance of a contract (when you subscribe); legitimate interest (scanning publicly available websites, improving our services, contacting professionals about compliance issues on their public-facing websites); consent (for marketing emails); and legal obligation (tax, accounting, and regulatory requirements in both Canada and the United States).
We comply with Canada's Anti-Spam Legislation (CASL). We send commercial electronic messages only where we have express or implied consent as defined under CASL. For implied consent based on conspicuous publication in a public registry, we rely on CASL section 10(9)(b). You may withdraw consent at any time by clicking the unsubscribe link in any email or by contacting us. We process unsubscribe requests within 10 business days.
We comply with the CAN-SPAM Act. All commercial emails include: a clear identification that the message is an advertisement (where applicable); our valid physical postal address; a clear and conspicuous opt-out mechanism; and a truthful subject line and header. We honor opt-out requests within 10 business days. We do not use deceptive subject lines or false header information.
We maintain records of consent for all recipients, including the type of consent, the date obtained or inferred, and the source of the contact information.
We do not sell, rent, or trade your personal information. We share information only with:
Service providers: Stripe, Inc. (payment processing, USA); Hetzner (server hosting, USA); and our email delivery provider (transactional and marketing emails). These providers process data on our behalf under appropriate data processing agreements.
Legal requirements: We may disclose information if required by law, regulation, subpoena, court order, or governmental request in Canada or the United States.
We do not share your individual compliance scan results with third parties unless you instruct us to do so.
We retain your account information for as long as your account is active and for 24 months after cancellation. Compliance scan results are retained for the duration of your subscription plus 12 months. Payment records are retained for 7 years as required by applicable tax law. You may request earlier deletion of your personal information by contacting us, subject to our legal retention obligations.
We implement reasonable technical and organizational measures to protect your information, including encryption in transit (TLS/HTTPS), encrypted backups, firewall protection, access controls, and secure password storage. Our infrastructure uses hardened server configurations with key-only SSH access and intrusion detection. However, no method of electronic storage or transmission is completely secure.
Under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (including British Columbia's PIPA and Alberta's PIPA), you have the right to: access your personal information; request correction of inaccurate information; withdraw consent for non-essential processing; request deletion (subject to legal retention requirements); and know how your information has been used and disclosed.
To exercise these rights, contact scot@check-check.online. We respond within 30 days. If unsatisfied, you may file a complaint with the Office of the Privacy Commissioner of Canada.
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with the following rights:
Right to Know: You may request that we disclose what personal information we have collected, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
Right to Delete: You may request deletion of your personal information, subject to certain exceptions (such as completing a transaction, complying with legal obligations, or exercising free speech).
Right to Opt-Out of Sale: We do not sell your personal information. No opt-out is necessary.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
Right to Correct: You may request correction of inaccurate personal information.
To exercise any of these rights, contact scot@check-check.online with the subject line "CCPA Request." We will verify your identity and respond within 45 days.
If you reside in a U.S. state with comprehensive privacy legislation (such as Florida, Virginia, Colorado, Connecticut, or others), you may have similar rights to access, delete, and correct your personal information. Contact us at scot@check-check.online to exercise any applicable rights. We honor privacy requests from all U.S. residents regardless of whether a specific state law applies.
We use Umami, a privacy-focused, open-source analytics platform. Umami does not use cookies, does not track users across websites, does not collect personally identifiable information, and is fully compliant with GDPR, CCPA, and PIPEDA without requiring consent banners. Our Umami instance is self-hosted on infrastructure we control.
Our Website uses only essential cookies required for service functionality (such as session management for logged-in users). We do not use advertising cookies, tracking cookies, or third-party analytics cookies. No cookie consent banner is required because we do not use non-essential cookies.
Our primary infrastructure is hosted in the United States (Hetzner Cloud, Ashburn, Virginia). For Canadian users, this means your information is transferred to and processed in the United States. We ensure appropriate safeguards are in place through our service provider agreements. The United States is not subject to an adequacy finding under Canadian privacy law, but the transfer is necessary for the performance of the contract between you and Check-Check.
Our Services are designed for business use by real estate professionals and are not directed at individuals under 18 (or under 16 in California). We do not knowingly collect personal information from children. If we learn that we have collected information from a child, we will delete it promptly.
Our Website responds to "Do Not Track" (DNT) browser signals. Because we use cookieless, privacy-focused analytics (Umami), your browsing is not tracked regardless of your DNT setting.
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email at least 14 days before they take effect. The "Last updated" date at the top indicates the most recent revision.
For privacy questions, access requests, correction requests, deletion requests, or complaints:
Scot Thom
Check-Check
Email: scot@check-check.online
Canadian residents: You may also contact the Office of the Privacy Commissioner of Canada.
California residents: You may also contact the California Attorney General's Office.