1. Operator and scope
KevinJBRealEstate.com (the “Website”) is operated personally by Kevin John Barakat, a real estate agent serving properties and clients in Lebanon (“Kevin,” “we,” “us,” or “our”). No registered company or company currently operates the Website, and there is no public business office.
This Privacy Policy applies to information processed through the Website and to related communications concerning a Website inquiry or property. It also explains the roles of the technology providers used to host the Website and its records. It does not govern a third party’s independent handling of information after you choose to contact or visit that third party.
Privacy questions and requests may be sent to kevinjbrealestate@gmail.com.
2. Information we collect
2.1 Information you provide
When you request a viewing, the Website collects your name, telephone number, optional email address, preferred date and time, the relevant property, and any notes you choose to provide.
When you create a client account, the Website collects your full name and email address. Supabase Authentication securely processes your password, confirmation status, recovery requests, and authentication session. Kevin and the Website administrator cannot view your password, password hash, authentication token, or recovery code.
When you submit a property for review, the Website collects your name, telephone number, optional email address, preferred contact method, sale or rental intention, property type and location, approximate area, expected price, bedroom and bathroom information, description, and up to the permitted number of property photographs. It also records your confirmation that you own the property or are authorized to represent it and that the submitted information is accurate.
If you communicate by telephone, email, WhatsApp, Facebook, Instagram, LinkedIn, Gmail, or another platform, we may receive the identifiers, message content, and attachments you choose to provide through that platform. The platform separately processes information under its own terms and privacy practices.
2.2 Property and listing information
Owners, landlords, developers, tenants, representatives, photographers, or other authorized parties may provide property descriptions, prices, specifications, approximate or exact locations, photographs, videos, plans, features, availability, and marketing instructions. Public listings display only information selected for publication.
2.3 Technical and usage information
Firebase App Hosting, Google Cloud infrastructure, Supabase, internet service providers, and security systems may process technical request information such as IP address, request time, requested URL, browser or device characteristics, operating system information, referral information, error records, and approximate location inferred from an IP address. These records may be necessary to deliver, secure, diagnose, and maintain the Website.
The Website records limited first-party events such as a property view or a click on a contact, WhatsApp, or Marketplace link. An event may include the property reference or title and the part of the Website used. The analytics endpoint is designed not to collect a visitor’s name, email address, telephone number, message content, or a persistent advertising identifier.
Google Analytics and public newsletter subscriptions are not active as of the last-updated date.
2.4 Client accounts and private administration
Clients may create an optional account to access account features. Account profiles are private and may be accessed by the relevant authenticated client and the authorized Website administrator. The separate administrator area uses stronger authorization and records administrator activity relating to listings, media, content, settings, and security.
3. How we use information
Information is used only as reasonably necessary to:
- respond to inquiries and communicate about relevant properties;
- evaluate and arrange requested property viewings;
- review an owner or representative’s proposed property submission;
- prepare, publish, update, promote, remove, or archive an authorized listing;
- provide related real-estate services requested by the relevant person;
- create, authenticate, maintain, recover, and secure optional client accounts;
- understand aggregate Website engagement and improve listings and contact paths;
- authenticate the administrator, record authorized changes, prevent abuse, and investigate errors or security incidents;
- maintain contractual, administrative, tax, accounting, dispute, and legal records where applicable; and
- comply with lawful requests and applicable legal obligations.
We do not sell personal information or property information, and we do not use submitted property information for Kevin’s unrelated personal purposes.
4. Property information and authorized publication
Property information is processed solely for the listing, marketing, communication, administration, and real-estate purposes authorized by the owner, landlord, developer, tenant, representative, or other person with authority to provide it. Authorization may cover preparing and publishing a listing on this Website; displaying approved descriptions, prices, locations, specifications, photographs, videos, plans, and features; maintaining the listing; promoting it on authorized channels such as Facebook Marketplace and Instagram; responding to genuine inquiries; and arranging viewings.
Private owner, occupant, tenant, contractual, access, or identification information is not knowingly published without permission or another valid legal basis. People submitting photographs should not include identification documents, access codes, private correspondence, visible personal records, or identifiable individuals who have not agreed to publication. Owner-submission photographs are collected for private review and are not automatically turned into public listings.
Information may be shared with technology providers that need it to operate the authorized service. Public listing information may be distributed through other advertising channels only when the property authorization permits that distribution. It is not supplied to unrelated parties for their independent use.
While authorization remains active, a listing may remain published without a fixed expiry date. When authorization is withdrawn or ends, the public listing should be removed or archived within three business days, subject to practical confirmation of the request. Limited non-public records may remain for the retention periods below where reasonably necessary for administration, evidence of authorization, disputes, legal obligations, security, and temporary backup cycles.
5. Legal bases
Depending on the circumstances and subject to confirmation under applicable Lebanese law, processing may be based on your request or consent, steps taken at your request before entering an agreement, performance of an agreement, compliance with a legal obligation, or legitimate interests such as responding to inquiries, operating and securing the Website, preventing fraud, and maintaining appropriate business records. We consider the nature of the information and the rights of affected individuals before relying on a legitimate interest.
Submitting an inquiry does not require you to provide optional information. Where processing depends on consent, you may withdraw that consent, although withdrawal does not make earlier lawful processing invalid and may not require deletion of records that must be retained for another valid reason.
6. Service providers and disclosures
The Website uses Firebase App Hosting and underlying Google Cloud services for application hosting and delivery. Supabase provides authentication, database services, internal analytics storage, property information storage, and property-media storage. These providers process information to supply infrastructure, security, reliability, support, and related services under their own contractual and privacy terms.
Information may also be disclosed to professional advisers, insurers, accountants, technical support providers, competent authorities, courts, or other parties when reasonably necessary to obtain advice, protect rights and safety, investigate abuse, comply with law, respond to valid legal process, or manage a transaction requested by the relevant parties. In a genuine business reorganization, relevant records may be transferred subject to appropriate confidentiality and legal safeguards.
We do not disclose private inquiry, owner, tenant, occupant, or administrator records as public Website content.
7. International processing
The Website serves properties in Lebanon but may be viewed worldwide. Firebase, Google Cloud, Supabase, communications platforms, and their subcontractors may process or store information outside Lebanon. Laws and government-access rules in those locations may differ from Lebanese law. Where required, appropriate contractual, organizational, or other lawful safeguards should be used. The precise legal requirements for cross-border transfers under Lebanese law should be confirmed by qualified counsel.
8. How long information is kept
Records are kept only for their stated purpose, legitimate administration, security, disputes, and applicable legal requirements. The current operating periods are:
- Viewing requests and customer inquiries: two years after the last related communication.
- Rejected or abandoned owner submissions and their photographs: one year after rejection or abandonment.
- Accepted, expired, and archived property or listing records: five years after the listing relationship ends.
- First-party Website analytics: two years from collection.
- Administrator activity records: three years from the recorded activity.
- Client account profiles: while the account remains active and thereafter only as reasonably required to complete a verified deletion request, resolve security issues, or satisfy applicable legal obligations.
A record may be kept longer if reasonably required by a dispute, legal hold, fraud or security investigation, tax or accounting obligation, or another applicable legal requirement. Deletion from active systems may not immediately remove a copy from short-lived, access-controlled backups; backup copies are allowed to expire through normal cycles and are not restored for ordinary use.
9. Security
Reasonable technical and organizational safeguards are used to reduce unauthorized access, alteration, disclosure, and loss. These include restricted administration, authentication, access policies, input and upload validation, rate controls, encrypted network transport, and service-provider security features. No internet service or storage system can be guaranteed completely secure. If you believe information has been mishandled, contact us promptly without sending passwords or sensitive identification documents by ordinary email.
10. Your choices and privacy rights
Subject to applicable law and relevant exceptions, you may ask whether we hold personal information about you and request access, correction, updating, restriction, objection, or deletion. You may also withdraw consent where consent is the applicable basis. We may request proportionate information to verify your identity and authority before acting, and we may preserve information that must lawfully or reasonably be retained.
Send requests to kevinjbrealestate@gmail.com with enough detail to identify the relevant inquiry or property. We will respond within the period required by applicable law. Rights, response procedures, and any declaration, notification, or authorization requirements under Lebanese Law No. 81/2018 require confirmation by qualified Lebanese counsel.
11. Marketing communications
The Website does not currently offer a newsletter or automated property-alert subscription. Information submitted for an inquiry or property review is not automatically enrolled in marketing. If newsletters or alerts are introduced later, the Website and this policy should be updated before activation, and any consent and unsubscribe mechanism required by law should be implemented.
You may ask at any time not to receive direct promotional communications. Service communications needed to answer your request or manage an authorized listing are not promotional messages.
12. Cookies and similar technologies
Ordinary public browsing does not currently use advertising cookies or Google Analytics cookies. Client and administrator accounts use essential Supabase authentication cookies to maintain secure signed-in sessions. Password-recovery interfaces may also use limited browser storage needed to complete or protect a recovery attempt. These essential technologies are not used to build advertising profiles.
Hosting, browser, and security infrastructure may use technically necessary request handling, caching, or security mechanisms. If non-essential public tracking or marketing technologies are added later, the Website must first assess whether notice or consent controls are legally required and update this policy accordingly.
13. Children’s privacy
The Website concerns property transactions and is not directed to children. Children should not submit personal information or property materials. If you believe a child has submitted information without appropriate authority, contact us so the circumstances can be reviewed and appropriate action taken.
14. External applications and links
The Website links to services such as WhatsApp, Facebook, Instagram, LinkedIn, Gmail, telephone applications, property portals, video platforms, and other third-party destinations. Opening or using one of these services causes that provider to process information independently. Their terms, privacy policies, security, and availability are outside our control. A link does not mean that we receive all information the third party collects.
15. Changes and contact
This policy may be updated when the Website, service providers, processing practices, or legal requirements change. The revised version will state a new last-updated date. Material changes should be communicated in a manner appropriate to their significance and applicable law.
For privacy questions or requests, contact Kevin John Barakat at kevinjbrealestate@gmail.com. Kevin operates without a public business office, so email is the contact procedure for these matters.