Privacy Policy
Last updated September 28, 2026
Plain-English version: I collect your name, email, phone, and what you tell me on a quiz or the contact form. I use it to write back to you, send you the newsletter if you ask for it, and remember the conversation if we end up working together. I don't sell your data. I share it only with the small list of services that run this site (named below). You can ask me to delete it any time.
Who this applies to
This policy covers khoffx.com and the email or phone conversations that come from it. "I" or "we" means Kyle Hoffman, a REALTOR® licensed in Indiana with Roots Realty Co., and Jarred Porter / Tuscan Agency, who builds and maintains the site.
What I collect
Three buckets:
- What you give me directly. Name, email, phone, your answers on the house hack quiz, your needs-and-wants responses, anything you write in the contact form, replies to email, and your email address if you sign up for the newsletter. Your Find Your Place in Indy answers stay in your browser unless you ask me to email you your results.
- What your browser tells the site. IP address, device and browser type, the page you came from, the pages you visit, and the rough region your IP suggests. Standard server-log data.
- What analytics tools record. Google Analytics 4 records anonymous usage: which pages get viewed, for how long, and what links and actions happen on the site. It follows your cookie choice (see the Cookie Policy) and doesn't have your name attached unless you've submitted a form that gives me your email.
What I don't collect
I don't ask for your social security number, bank account, or income on this site. If we work together on an actual home purchase, your lender (separate from me) will ask for that. I never ask you to send those over email.
Why I collect it
- So I can write back when you reach out.
- So I know where you are in the process if we keep talking.
- So you get the newsletter if you ask for it, and stop getting it if you ask me to stop.
- So I can see what's working on the site (anonymous traffic and usage patterns, not personal tracking).
Who I share it with
Only the small set of services ("processors") that run the site. Here's each one and what it handles:
- Google Analytics 4 (Google LLC): anonymous website analytics. Sets analytics cookies, subject to your consent choice and Google Consent Mode. Doesn't have your name.
- Make.com (Celonis / Make): moves your contact, quiz, needs-and-wants, Find Your Place in Indy and newsletter form submissions into my inbox and the right tools. Sees what you submitted.
- Gmail (Google LLC): sends the email you get after a quiz or the needs-and-wants form, and the notifications I receive, through Make. Sees your email address and what you submitted.
- Slack (Slack Technologies, LLC): when you submit a form, a short alert with your name, email, city and the form's details is posted to a private channel so I can reply quickly.
- Beehiiv (Beehiiv, Inc.): runs the newsletter. Sees your email if you opt in.
- Google Sheets (Google LLC): where I track quiz and needs-and-wants leads internally. Only Kyle and Jarred have access.
- Geoapify: if you draw a search area on the needs-and-wants form, that shape is used to draw a map image in my notification email. It gets the shape, not your name or contact details.
- Supabase / Tuscan CMS (Supabase, Inc.): stores the buyer stories, blog posts, and general site content. The site reads this content; it does not store your quiz or contact leads here.
- Vercel (Vercel, Inc.): hosts and serves the site, and keeps standard server and security logs plus aggregate, cookieless performance metrics.
- Instagram / Meta Graph API (Meta Platforms, Inc.): when the site shows my recent public Instagram posts, they come through Meta's Graph API. This shows my own posts; it doesn't collect information about you.
- Roots Realty Co. client-management system: every quiz, needs-and-wants, contact and newsletter submission (and a Find Your Place in Indy results email, when you also ask to hear from me) is also saved to the brokerage's CRM so I can follow up and keep track of our conversation. Access is limited to me and the brokerage team members who manage leads.
- Roots Realty Co.: the brokerage I'm licensed under. If we end up working together on an actual transaction, the brokerage handles the paperwork side and may receive your information for that purpose.
Each processor handles your data only to provide its service to me, under its own terms and privacy commitments. I don't sell your information. There are no advertising tools, ad networks or data brokers on this site. I may also disclose information if the law requires it, or to protect rights and safety.
Cookies and consent
Analytics on this site runs through a geo-aware cookie banner with Google Consent Mode v2: EU/UK/EEA/Switzerland visitors opt in before analytics runs, everyone else gets a notice and can opt out, and Global Privacy Control (GPC) signals are honored automatically as an opt-out. You can change it any time with the "Your Privacy Choices" link in the footer. The full list of cookies is in the Cookie Policy.
How long I keep it
- Quiz answers, needs-and-wants, and contact form messages: kept while we're in touch, then up to 24 months after the last contact, then deleted unless you've become a client (in which case brokerage record-keeping rules apply).
- Newsletter list: kept until you unsubscribe, then removed within 30 days.
- Analytics data: retained per Google Analytics 4 defaults.
How I protect it
The site runs over HTTPS, and I use reputable providers with their own security programs. That said, no method of transmission or storage is ever 100% secure, so I can't guarantee absolute security.
Where your data is processed
I'm based in the United States and these providers process data primarily in the US. If you contact me from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from those where you live.
Your rights
Depending on where you live, you have rights over your personal information. I honor these for everyone who asks.
If you're in California (CCPA/CPRA), you can:
- Know what personal information I collect and how I use it.
- Access a copy of your personal information.
- Delete your personal information.
- Correct inaccurate personal information.
- Opt out of the "sale" or "sharing" of personal information. I don't sell it or share it for advertising.
- Not be treated differently for exercising these rights.
If you're in the EU, UK, or a similar jurisdiction (GDPR-style), you can:
- Access, correct, or delete your personal data.
- Restrict or object to how I process it.
- Request data portability (get your data in a usable format).
- Withdraw consent at any time, where processing is based on consent.
- Lodge a complaint with your local data protection authority.
If you're a Colorado, Connecticut, Virginia, or other state-privacy-law resident, the rights granted by your state's law apply on top of these. To exercise any of these, email kyle@rootsrealty.co with the request and I'll handle it within the time the law allows (usually 30 days). I may need to verify your request before acting on it.
Your privacy choices
Here's how to control what happens on this site:
- Your Privacy Choices. Use the "Your Privacy Choices" link in the footer to reopen the banner and accept or decline analytics any time.
- Global Privacy Control (GPC). If your browser or extension sends a GPC signal, I treat it as a valid opt-out of analytics automatically. You don't have to do anything else.
- Unsubscribe. Every newsletter issue has an unsubscribe link. You can also reply to any email and ask me to take you off everything.
- Email me. Send any access, deletion, or correction request to kyle@rootsrealty.co.
Do Not Sell or Share My Personal Information. I do not sell your personal information or share it for advertising. You can still email me any request about your information.
Children
This site is not directed to children under 13, and I don't knowingly collect information from anyone under 13. If you think I have, email me and I'll delete it.
If something changes
If I update this policy in any meaningful way (new processor, new data type, new retention rule), I'll change the "Last updated" date at the top. If the change is material, I'll also send a one-time email to anyone on the newsletter list. Continued use of the site after a change means you accept the updated policy.
Contact
Privacy questions: kyle@rootsrealty.co
Site/build questions: jarred@tuscanagency.com
This policy was last updated on September 28, 2026 and is reviewed at least annually.