Effective: July 1, 2024
This Supplemental Privacy Notice applies to consumers and business-to-business (“B2B”) partners that are residents of California, to residents of Nevada, and to consumers that are residents of Texas as more described below.
Privacy Policy for Consumers of California and Texas and B2B Partners in California
Purpose and Intent
Invitation Homes Inc. and its operating groups, parent(s), subsidiaries and affiliates (collectively, “the Company”) are committed to protecting the privacy and security of your personal information. This California and Texas privacy policy describes how we collect, use, retain, secure and disclose personal information about you (our “Information Practices”). This privacy policy is in addition to our main Privacy Policy located at: https://www.invitationhomes.com/privacy and is intended to comply with the California Consumer Privacy Act, California Privacy Rights Act (together, the “CPRA”), the Texas Data Privacy and Security Act (“TDPSA”) and applicable regulations.
It is important that you understand this California and Texas privacy policy, together with any other privacy notices we may provide on specific occasions when we are collecting or processing personal information about you, so that you are aware of how and why we are using such information. If you have any questions about this privacy policy or our Information Practices, please contact us at: [email protected] .
If you wish to access this California and Texas privacy policy in an alternate format or require an accommodation to access this privacy policy, please contact us at: [email protected] .
Data Protection Principles
We collect, use, retain, and share your personal information in accordance with certain data privacy and data protection principles. Specifically, the personal information we collect about you is:
used lawfully, fairly and in a transparent way;
collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
reasonably necessary and proportionate to achieve these purposes;
accurate and kept up to date;
kept only as long as necessary for these purposes; and
kept securely.
If we intend to collect, use, retain, or share your personal information for any purpose that is incompatible with the purposes for which your personal information was collected, we will obtain your consent to do so.
For the purposes of this privacy policy, “personal information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household.
For California residents, “sensitive personal information” is a subcategory of personal information and is defined by the CPRA as personal information that reveals: (a) an individual’s social security, driver’s license, state identification card, or passport number; (b) an individual’s account log-in, financial account, debit card, or credit card number in combination with any required security or access code, password, or credentials allowing access to an account; (c) an individual’s precise geolocation; (d) an individual’s racial or ethnic origin, religious or philosophical beliefs, or union membership; (e) the contents of an individual’s mail, email, and text messages unless the Company is the intended recipient of the communication; (f) an individual’s genetic data; (g) an individual’s biometric information used to uniquely identify the individual; (h) personal information collected and analyzed regarding an individual’s health; and (i) personal information collected and analyzed regarding an individual’s sex life or sexual orientation.
For Texas residents, “sensitive personal information” is defined by the TDSPA as personal information that reveals: (a) racial or ethnic origin; (b) an individual’s religious beliefs; (c) mental or physical health diagnosis; (d) sexuality; (e) citizenship or immigration status; (f) genetic or biometric data that is processed for identification purposes; (g) precise geolocation data; and (h) information collected and analyzed regarding an individual’s health; and (i) personal data collected from a known child.
Personal Information We Collect and How We Collect It, Use It, and Retain It
We collect, receive, use and retain personal information for the following purposes. However, we do not:
sell your personal information;
share or disclose your personal information to third parties other than the entities or service providers listed below;
share or disclose your sensitive information to third parties for purposes other than those listed below or otherwise permitted by the CPRA;
sell or share the personal information of consumers under 16 years of age; or
permit third parties to collect your personal information on our behalf other than our service providers listed below.
The categories of Personal Information we have collected during the previous twelve months include:
1. Identifiers, such as name, alias or business dba, postal address, unique personal or online identifier, Internet Protocol ("IP") address, email address, account name, Social Security number, tax ID number, driver's license number, or other similar identifiers.
Sources of the Personal Information: You, third parties (who initially collected such data, such as demographic firms, social media sites, and advertising networks) to whom you have given your information, and cookies on your device.
Purpose for Collecting the Personal Information: Manage our consumer or business relationship, leasing, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
2. Protected categories, such as age, race, sex, disability, ancestry, sexual orientation, gender identity and expression, citizenship status, marital status, military or veteran status.
Sources of the Personal Information: You, third parties (who initially collected such data, such as demographic firms, social media sites, and advertising networks) to whom you have given your information, and cookies on your device.
Purpose for Collecting the Personal Information: Manage our consumer or business relationship, leasing, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
3. Sensitive Personal Information.
Sources of the Personal Information: You, supplier diversity reporting organizations, and our service providers.
Purpose for Collecting the Personal Information: Manage our consumer or business relationship, leasing, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
4. Financial Information, such as credit history, credit or debit card and other payment or financial account information.
Sources of the Personal Information: You, and our service providers.
Purpose for Collecting the Personal Information: Manage our consumer or business relationship, and leasing.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
5. Internet or other electronic network activity information, such as information regarding your interaction with an internet website, application, or advertisement, search history, social media site or application.
Sources of the Personal Information: You, and cookies on your device.
Purpose for Collecting the Personal Information: Manage our business relationship, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, anonymize and aggregate to use to improve our marketing, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
6. Audio, electronic, visual, thermal, or similar information.
Sources of the Personal Information: You, and our recording device.
Purpose for Collecting the Personal Information: Manage our business relationship, leasing, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
7. Professional or employment-related information, such as job assignments, training and development information, workplace safety information.
Sources of the Personal Information: You.
Purpose for Collecting the Personal Information: Manage our business relationship, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
8. Commercial information, including records of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.
Sources of the Personal Information: You, analytics tools, social networks, advertising networks, and third party sources, such as resellers, distributors, banks, credit agencies, risk management service providers, couriers, identify verification, and other third parties that sell, service or support our products and services.
Purpose for Collecting the Personal Information: Manage our consumer or business relationship, leasing, maintain and service our properties, improve, upgrade and enhance our products and services, billing reconciliation and other internal business functions, anonymize and aggregate to use to improve our marketing, detect security incidents and protect against malicious, deceptive, fraudulent, or illegal activity, comply with applicable laws, exercise and defend our legal rights, and other short-term transient use.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
9. Inferences drawn from the personal information collected.
Sources of the Personal Information: Personal information collected.
Purpose for Collecting the Personal Information: To comply with legal and contractual requirements, and to establish, exercise legal and contractual rights.
Retention Period for the Personal Information: As long as necessary to fulfill the purposes for the collection. Generally, personal information is retained for the duration of our relationship with you, plus any legally required record or data retention period and/or any period of time necessary to exercise our legal rights.
How We Share Personal Information
We may disclose your personal information to the following categories of recipients, including for the business purposes described above:
our affiliate companies;
our trusted third-party services providers and partners, such as but not limited to lenders, agents, advertising partners, contractors, or subcontractors, who assist us in providing our products and services and operating our business;
competent law enforcement agencies, courts, and government agencies to comply with our legal obligations and exercise our legal rights;
appropriate entities in connection with any proposed purchase, merger, or acquisition; and
other persons and entities with your consent to the disclosure.
Your Privacy Rights
As a California or Texas resident, you have the following privacy rights regarding your personal information:
the right to know and right to access the personal information we have collected about you, including the categories of personal information, the categories of sources from which the personal information is collected, the business or commercial purpose for collecting, selling, or sharing personal information, the categories of third parties to whom the business discloses personal information, and the specific pieces of personal information the business has collected about the consumer;
the right to delete personal information that we have collected from you, subject to certain exceptions;
the right to correct inaccurate personal information that we maintain about you;
the right of portability, or right to have us transfer your personal information to other persons or entities upon your request;
the right to limit the use of your sensitive information;
the right to opt-out of the sale or sharing of your personal information to third parties for purposes of, but not limited to, targeted advertising; and
the right not to be discriminated against for exercising your privacy rights.
You can exercise your right to know, delete, or correct your Personal Information by submitting a request to us by sending us a request online by completing this form , or by calling us at: 888.914-9661 PIN: 506 862. To protect the security of your personal information, we will require you to verify your identity by providing us with identifying information such as your personal email address, personal telephone number, home address, and/or other information that we can match with the personal information we haves already collected about you to verify your identity.
You may use an authorized agent to exercise your right to know, delete, or correct your Personal Information. We will require your authorized agent to provide us with either (1) a power of attorney authorizing the authorized agent to act on your behalf or (2) your written authorization permitting the authorized agent to request access to your personal information on your behalf. Further, we will require you or your authorized agent to provide us with identifying information to verify your identity. We may also require you to either verify your own identity directly with us or directly confirm with us that you provided the authorized agent permission to submit the request.
You can exercise your right to opt-out of the sale or sharing of your information by clicking the “Do Not Sell or Share My Personal Information” link here or on our website’s homepage and completing the interactive online form, or by sending us a request online by completing this form , or by calling us at: 888.914-9661 PIN: 506 862, or by asking us to provide you with a hardcopy “Consumer Access Request” form at any of our physical locations that you visit, or by using an opt-out preference signal that meets the following requirements.
The signal is in a format commonly used and recognized by businesses. An example would be an HTTP header field or JavaScript object.
The platform, technology, or mechanism that sends the opt-out preference signal makes it clear to the consumer, whether in its configuration or in disclosures to the public, that the use of the signal is meant to have the effect of opting the consumer out of the sale and sharing of their personal information.
If we already have information about you when we receive your opt-out preference signal, we will honor your request to opt-out of the sale or sharing of your personal information for all of the personal information we have collected about you both online and offline. If we do not already have information about you when we receive your opt-out preference signal, we will honor your request to opt-out of the sale or sharing of your personal information for all of the personal information we have collected about you from the platform or device that sent the opt-out preference signal. Further, we may ask you for additional information necessary to complete your request. Further information regarding opt-out preference signals and how you can use opt-out preference signals can be found at: https://globalprivacycontrols.org.
You can exercise your right to limit the use and disclosure of your sensitive personal information by clicking the “Limit the Use of My Sensitive Personal Information” link here or on our website’s homepage and completing the interactive online form, or by sending us a request online by completing this form , or by calling us at: 888.914-9661 PIN: 506 862, or by asking us to provide you with a hardcopy Consumer Access Request form at any of our physical locations that you visit.
In addition to the privacy rights above, individual California residents have the right under the California Online Privacy Protection Act (CalOPPA) to request information about our disclosures of certain categories of personal information to our affiliates or third parties for their direct marketing purposes. We will provide a list of the categories of personal information disclosed to third parties or our affiliates for their direct marketing purposes during the immediately preceding calendar year, along with the names and addresses of these third parties or affiliates. This request may be made no more than once per calendar year. Individual California Users must submit their requests to us online by completing this form , or write us at the mailing address in the Changes and Contact section below.
Responding to Requests
Generally, we will respond to a request within 45 days of receipt. If we need more time to respond, we will provide the Requestor with notice and an explanation of the reason we need more time to respond. We may deny the request if we cannot verify the Requestor’s identity using commercially reasonable means or if we are legally permitted to deny the request. We reserve our right not to respond to requests submitted other than to the email or mailing addresses specified in this section.
If we deny the request we will, within 45 days of receipt of the request, explain the basis for our denial. To the extent permitted by applicable law, we may decline or charge a reasonable fee to comply with a request if the request is manifestly unfounded, excessive, or repetitive. If we decline to take action in response to a Texas or California resident’s request to exercise their privacy rights, they may appeal our denial by completing this form , or by calling us at: 888.914-9661 PIN: 506 862.
Data Security
While no data security system can fully protect personal information from unauthorized data breaches, we have implemented reasonable safeguards and controls, consistent with its legal obligations under California, Texas, and other local, state and federal laws. The Company is committed to: (i) seeking to safeguard all personal information that you provide to us; (ii) seeking to ensure that it remains confidential and secure; and (iii) taking all reasonable steps to ensure that personal privacy is respected. All our data is stored in written or electronic form on our servers and computers and in various physical locations. We maintain physical, electronic and procedural safeguards to protect your personal information from misuse, unauthorized access or disclosure and loss or corruption by computer viruses and other sources of harm. We restrict access to personal information to those staff members of the Company and our services providers who need to know that information for the purposes identified in our privacy policy and privacy notices.
We have put in place procedures to deal with any suspected data security breach and will notify you and any applicable regulator of a suspected breach where we are legally required to do so.
Personal Information of Minors
The Company does not collect, sell or share personal information for individuals under the age of 16.
Changes to This Privacy Policy
As we strive to improve our practices, we may revise the Company’s privacy policy from time to time. This privacy policy is not a contract, and we reserve the right to change this policy at any time and to notify you of those changes by posting an updated version of this policy. It is your responsibility to check this policy from time to time for any changes.
Privacy Rights of Residents of the State of Nevada
We adopt this Supplemental Privacy Notice to comply with the Nevada Privacy Law and any terms defined in the Nevada Privacy Law have the same meaning when used in this Notice. The Nevada Privacy Law provides residents of the state of Nevada with specific rights regarding their personal information. This section describes your rights and explains how to exercise those rights.
You have the right to direct us to not sell your personal information we have collected or will collect at any time (the “right to opt-out”). The categories of covered information we collect are as follows:
your first and last name;
your home or other physical address which includes the name of a street and the name of a city or town;
your electronic mail address;
your telephone number;
your social security number;
an identifier that allows you to be contacted either physically or online; and
any other information concerning you collected from your through the Website or an online service in combination with an identifier in a form that makes the information personally identifiable.
To exercise the right to opt-out, you (or your authorized representative) may submit a request online or contact us at 888.914-9661 PIN: 506 862.
We endeavor to respond to an opt-out request by Nevada residents within sixty (60) days of its receipt. If we reasonably believe we require more time (up to 30 days), we will inform you of the extension period in writing.
Questions and Further Information
If you have any questions or would like further information regarding this Supplemental Privacy Notice, privacy policies contained herein or our privacy practices, please contact us at: [email protected].