Privacy Policy
Last Updated: May 26, 2026
Introduction
This website (the “Site”) offers information, products, and services related to real estate (the “Services”) that The Nicolas Group provides. We operate this website and may use third-party contractors to support the delivery of the Services and the Site (“Service Providers”).
If you are a visitor to this Site, this Privacy Policy applies to you and describes the policies and practices regarding the collection, use, and disclosure of your personal information in connection with your use of the Site. We act as the controller of your personal data, and our Service Providers assist us in providing the Services solely in their capacities as service providers and data processors.
This Privacy Policy does not apply to any websites, applications, or other online services that do not link to this Policy. If you have questions about our use of your personal information, please contact us using the information in Section 11 below.
1. Personal Information We Collect
We collect information from you in various ways when you access or use the Site or otherwise interact with the Services. This information may include:
Information You Provide to Us
Contact information that you provide, such as your first and last name, email address, home address, and phone number; feedback or correspondence, such as information you provide when you contact us with questions, feedback, or other correspondence; marketing information, such as your preferences and/or consents for receiving communications about our activities, events, and publications, and details about how you engage with such communications; and other information which you may provide voluntarily or that is necessary in connection with your interactions with us through the Site or Services.
Information We Obtain from Third Parties
Social media information:We may maintain pages on social media platforms, such as Instagram, LinkedIn, and other third-party platforms. When you visit or interact with these pages, the platform providers’ privacy policies will apply to your interactions and their collection, use, and processing of your personal information.
Data enrichment sources: We may obtain additional information about you from third-party data providers, including property records and public records databases, demographic and behavioral data providers, social media profile information (where publicly available), and other commercially available data sources. This information helps us provide more relevant services and communications.
Other sources: We may obtain your personal information from other third parties, such as third-party analytics services, marketing partners, publicly-available sources, and data providers.
CRM and Communication Data
If you communicate with us via email, text message, or other electronic means, or if we use customer relationship management (“CRM”) tools to manage our interactions with you, we may collect and process: email message content, headers, metadata, and attachments; text message content and metadata; communication timestamps, read receipts, and delivery status; contact information and communication history; and notes and records relating to our interactions with you.
Automatic Data Collection
We and our Service Providers may automatically log information about you, your computer or mobile device, and your interaction over time with our Services, including: device data (operating system, browser type, screen resolution, IP address, language settings, general location such as city or state); and online activity data (pages or screens you viewed, time spent on a page, browsing history, navigation paths, access times, and whether you opened our marketing emails).
We use the following tools for automatic data collection: cookies (text files that websites store on a visitor’s device to uniquely identify the visitor’s browser or to store information or settings); local storage technologies (like HTML5, which provide cookie-equivalent functionality but can store larger amounts of data); and web beacons (also known as pixel tags or clear GIFs).
2. How We (and Our Service Providers) May Use Your Personal Information
To provide and operate our Services and our Site: We use your information to provide, operate, and improve our Services and Site; communicate with you about our Services and business including by sending announcements, updates, security alerts, and support and administrative messages; and provide support and respond to requests, questions, and feedback.
To manage our relationship with you: We use CRM tools and services to maintain records of our communications, track your preferences and interests, and provide personalized service.
To send you follow-up communications: If you have opted into receiving follow-up communications, we may from time to time send you follow-up communications as permitted by law, including through phone and email. You may opt out of receiving such communications as set forth in Section 6 below.
To send you marketing and promotional communications: If you have opted in to receive marketing and promotional communications, we may from time to time send you direct marketing communications as permitted by law, including through phone and email. Your information will not be shared with third parties for marketing or promotional purposes. You may opt out as set forth in Section 6 below.
To comply with law: As we or our Service Providers believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.
For compliance, fraud prevention, and safety:To protect our, your, or others’ rights, privacy, safety, or property; enforce the terms and conditions that govern our Services; and protect, investigate, and deter against fraudulent, harmful, unauthorized, unethical, or illegal activity.
To create anonymous data: We may create anonymous data from your personal information by removing information that makes the data personally identifiable. We may use this anonymous data for our lawful business purposes, including to analyze and improve our Services.
3. Use of Artificial Intelligence
We use artificial intelligence (“AI”) and machine learning technologies to provide and improve our Services.
AI-Generated Content
We may use AI technologies to generate, assist with, or enhance content displayed on the Site, including property descriptions and listing information; blog posts, articles, and other written content; social media posts and marketing materials; email communications and newsletters; and advertising copy and promotional content.
AI-generated content is created using large language models and other machine learning systems. While we review AI-generated content for accuracy and appropriateness, such content may contain errors, omissions, or inaccuracies. You should not rely solely on AI-generated content for important decisions, including real estate transactions, without independent verification.
AI-Assisted Communications
We may use AI to assist with drafting responses to inquiries, analyzing communication patterns to improve service, providing automated responses to common questions, and prioritizing and categorizing incoming communications. When AI assists with communications, a human may review and approve messages before they are sent, though some automated responses may be sent without individual human review.
AI-Based Analysis and Recommendations
We may use AI to identify potential opportunities based on your stated preferences and behavior, suggest properties that may match your criteria, analyze market trends, and optimize the timing and content of communications. These AI-based analyses are provided for informational purposes and should not be considered professional advice. Important decisions should be made in consultation with qualified professionals.
Your Rights Regarding AI
You have the right to request information about whether AI was used to generate specific content; request human review of significant decisions made with AI assistance; opt out of certain AI-powered features where technically feasible; and provide feedback on AI-generated content or recommendations. To exercise these rights, contact us using the information in Section 11.
4. How We Share Your Personal Information
We do not “sell” any personal information (as defined under applicable laws), but we may share your personal information with:
Internal Team, Partners, and Affiliates: Our employees and contractors, partners, and affiliates, including to facilitate your interactions with us.
Our Service Providers: Companies and individuals that provide services on our behalf or to help us provide the Services, the Site, or our business (see Section 8 for the current list).
Professional advisors: Such as lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services they render to us.
For compliance, fraud prevention, and safety: As described in Section 2 above.
Business transfers: We may sell, transfer, or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction such as a merger, consolidation, acquisition, reorganization, or sale of assets. In such a case, we will make reasonable efforts to require the recipient to honor this Privacy Policy.
Other than as set forth herein, data will not be shared with third parties for marketing or promotional purposes. We will never disclose any personal information such as phone numbers with any third parties for marketing purposes.
5. Analytics and Performance Monitoring
We use a small number of analytics and operational tools to understand how the Site is used and to keep it running reliably. We do not run third-party advertising platforms (Meta Pixel, Google Ads, etc.) on this Site and do not engage in interest-based or cross-context behavioral advertising.
Google Analytics 4
We use Google Analytics 4 to understand aggregate Site usage — pages viewed, traffic sources, approximate location (city or state), device type, and how long visitors spend on each page. Google Analytics uses first-party cookies and similar technologies. The data is processed by Google in accordance with Google’s Privacy Policy. You can opt out via the Google Analytics Opt-Out Browser Add-on.
Vercel Analytics
We use Vercel Analytics (our hosting provider’s built-in tool) to monitor Site performance — page load times, Core Web Vitals, and aggregate visitor counts. Vercel Analytics is privacy-friendly by design and does not use cookies or persistent identifiers to track individual visitors across sessions.
Sentry
We use Sentry to capture JavaScript errors and performance issues so we can fix bugs that visitors encounter. Sentry may collect technical information about the browser session at the moment an error occurs (browser version, URL, error stack trace). Sentry does not capture personally identifiable form input or sensitive content.
Cloudflare Turnstile
We use Cloudflare Turnstile on our contact and valuation forms to verify that submissions come from real people, not bots. Turnstile runs in invisible mode — no visible challenge is shown — and may set short-lived first-party cookies and analyze browser signals (mouse movement, page interaction, browser fingerprint) to assess whether a submission is automated. It is a privacy-preserving alternative to traditional CAPTCHA and does not track users across sites for advertising purposes. Cloudflare's collection and use of this data is governed by its Turnstile Privacy Addendum and Privacy Policy.
Do Not Track
Some Internet browsers may be configured to send “Do Not Track” signals. We currently do not respond to such signals. We do, however, honor Global Privacy Control (GPC) signals as valid opt-out requests under the California Consumer Privacy Act (see Section 13).
6. Privacy Choices and Opt-Outs
You have the following choices regarding our collection and use of your personal information:
Online Tracking Opt-Out
You can opt out of having your online activity and device data collected through our Services by blocking cookies in your browser (most browsers let you remove or reject cookies; for more information, visit allaboutcookies.org), blocking advertising ID use in your mobile settings, or using privacy plug-ins or browsers (Brave, Privacy Badger, DuckDuckGo, Ghostery, uBlock Origin).
Email Communications Opt-Out
You may unsubscribe from email updates sent by us at any time by following the unsubscribe link in the email.
Privacy Rights
You have the right to submit requests about your personal information, including: information about how we have collected and used your personal information; access to a copy of the personal information that we have collected about you; correction of personal information that is inaccurate or out of date; deletion of personal information that we no longer need; and additional rights, such as to object to and request that we restrict our use of your personal information, and where applicable, you may withdraw your consent.
If you wish to exercise your rights, please contact us using the information in Section 11.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements, and to provide you with the Services.
The retention period for personal information depends on the context and our relationship with you: contact information and communication records are generally retained for the duration of our relationship with you and for a reasonable period thereafter; CRM data is retained for as long as you maintain an active relationship with us, unless longer retention is required by law; transactional records may be retained to comply with legal and regulatory requirements; and marketing preferences are retained until you update them or opt out.
When personal information is no longer necessary for the purposes for which it was collected, we will securely delete or anonymize it. In some cases, we may retain certain information in anonymized or aggregated form for analytical purposes.
8. Service Providers
The following are the principal third-party Service Providers we use to operate this Site and our business. This list may be updated as our stack evolves; please check this Policy periodically for changes.
- Vercel — website hosting, edge delivery, and performance analytics.
- Cloudflare — DNS, content delivery, and Turnstile bot protection on forms.
- Supabase — database for content, listings, and contact records.
- Payload CMS — content management for editorial pages, listings, and press.
- Resend — transactional email delivery for lead notifications.
- Sentry — error monitoring and performance tracking for site reliability.
- Google Analytics 4 and Google Search Console — aggregate site usage analytics and search-performance reporting.
- Mapbox — interactive map rendering on the neighborhoods pages.
- Behold.so — embedded Instagram feed widget on the homepage.
The Site and Services may contain links to websites and other online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.
9. Security
We employ a number of technical, organizational, and physical safeguards designed to protect the personal information we collect. We take appropriate technical and organizational measures that provide a level of security appropriate to the risk of processing your personal data. We follow generally accepted industry standards to protect the personal data and information submitted to us, both during transmission and in storage. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, while we strive to use commercially acceptable means to protect personal data, we cannot guarantee its absolute security.
10. Children
Our Services are not intended for use by children under 18 years of age. If we learn that we have collected personal information through the Services from a child under 18 without the consent of the child’s parent or guardian as required by law, we will delete it.
11. How to Contact Us
You can reach us by email at emily@thenicolasgroup.com or at the following mailing address:
The Nicolas Group
2550 South Bayshore Drive
Suite 106
Miami, FL 33133
12. Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date at the top of this Policy and posting the revised version on this website.
13. Notice of Collection and Additional Rights for California Residents
If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”) permits you to request information, no more than once per calendar year, regarding the disclosure of your Personal Data by us to third parties, including for the third parties’ direct marketing purposes.
Categories of Personal Information Collected
In the preceding 12 months, we may have collected the following categories of personal information: identifiers (such as name, email address, phone number, and IP address); commercial information (such as property preferences and inquiry history); internet or electronic network activity (such as browsing history and interactions with our Site); geolocation data (such as city and state derived from IP address); professional or employment-related information (if provided); and inferences drawn from the above (such as preferences and characteristics).
Requests to Know, Delete, or Correct
You have the right to request that we disclose to you the categories and specific pieces of Personal Data we have collected about you, the sources, the business or commercial purposes for collecting it, and the categories of third parties to whom we have disclosed it. You also have the right to request that we delete or correct Personal Data about you that we have collected. You may submit a request via email at emily@thenicolasgroup.com or at the mailing address in Section 11.
Authorized Agents
You may designate an authorized agent to make requests on your behalf. You must provide an authorized agent written permission to submit a request on your behalf, and we may require that you verify your identity directly with us.
Our Response to Requests
Upon receipt of a request, we may ask you for additional information to verify your identity. Any additional information you provide will be used only to verify your identity. We will acknowledge the receipt of your request within ten (10) business days. Subject to our ability to verify your identity, we will respond to your request within 45 calendar days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will cover the 12-month period preceding the verifiable consumer request’s receipt.
Right to Non-Discrimination
You have the right not to be discriminated against for the exercise of your California privacy rights described above.
Selling and Sharing of Personal Data
We do not “sell” Personal Data as that term is defined under the CCPA. We do not engage in cross-context behavioral advertising on this Site.
Sensitive Personal Data
We do not request sensitive personal information in connection with the use of the Site.
Do Not Track and Global Privacy Control
We do not respond to “do not track” signals. However, we do honor Global Privacy Control (GPC) signals as valid opt-out requests under the CCPA.