Privacy

How we handle your information.

A small family brokerage. We collect almost nothing. What you send us by phone, email, or the contact form goes to Barry and Jodie. That is the whole system.

Effective May 27, 2026 · Last updated May 27, 2026

Who this applies to

This privacy notice covers bandonbythedunesrealtee.com and the underlying real estate services offered by Bandon By The Dunes Realtee, a sole proprietorship operating out of 1095 Alabama Ave SE, Ste A, Bandon, OR 97411. It does not cover phone calls, text messages, or in-person conversations with Barry Winters, Jodie VanLeuven, or other agents associated with the brokerage. Those are governed by professional rules under the Oregon Real Estate Agency and by your representation agreement, if you have one.

If you live in Oregon, California, or another U.S. state with a state consumer privacy law, parts of this notice apply specifically to you. The Your rights section below explains how to exercise those rights.

What we collect

This is most of it:

  • Contact information you give us. When you fill in the contact form on /contact, when you email Barry at barrykwinters@outlook.com or Jodie at jodiemvanleuven@outlook.com, or when you call 541-297-9575, you give us your name, phone number, email address, and whatever you choose to write in the message. We do not require any of this beyond what you choose to share.
  • Anti-spam signals. The contact form runs Cloudflare Turnstile, which checks whether your submission is from a real person. Turnstile receives a one-time signal from your browser. It does not set tracking cookies and does not retain personal data tied to you.
  • Aggregate site analytics. Cloudflare Web Analytics counts page views and tells us roughly which pages are popular and roughly where visitors are coming from at a country or region level. It does not use cookies, does not assemble a profile about you, and does not collect data that identifies you personally.

This is what we do not collect:

  • We do not run any third-party advertising trackers, retargeting pixels, social media trackers, or behavioral profiling tools.
  • We do not buy or sell mailing lists.
  • We do not require you to create an account or save searches to use this site.
  • We do not collect precise geolocation, biometric data, or financial account numbers through this website. If you choose to share any of that during a real estate transaction, it is handled outside the website (escrow, lender, transaction coordinator).

How we use it

Strictly to respond to you.

  • If you send a message through the contact form, the form runs as a Cloudflare Worker that forwards the contents to Barry and Jodie by email. There is no database storing the submission on the website side. The email arrives in Barry's and Jodie's Outlook inboxes and lives there for as long as we keep correspondence with you.
  • If you call or email directly, we reply through the same channel.
  • We may follow up about properties you asked about, send you listings that match what you described, or invite you to come by the office. If you ask us to stop, we stop.

We do not use your information to target advertising, build a profile of you, or share it with any party that does either of those things.

Third parties we work with

The website depends on a small number of outside services to function. Each one has its own privacy policy that governs how it handles data it receives directly from your browser. None of them receive your contact form submission or your direct correspondence with Barry and Jodie.

RMLS™ (Regional Multiple Listing Service of Portland, Oregon)

The active listings on /listings and individual property pages are pulled from the RMLS™ IDX (Internet Data Exchange) feed under a participant agreement signed by Barry. The feed contains property data (price, address, photos, description, listing broker). It does not contain anything about you as a visitor. When you view a listing, RMLS™ does not learn that you specifically visited.

Google (Places API)

The Google reviews shown on the home page are pulled from the Google Places API using the brokerage's Google Business Profile. The reviews and the names of the reviewers are public information published by Google. Google may set its own cookies if you click through to Google Maps from this site. See Google's Privacy Policy for how Google handles its own data.

Cloudflare

The site is hosted on Cloudflare Pages and routes contact form submissions through Cloudflare Workers. Cloudflare automatically processes a small amount of network metadata (IP address, browser user agent, request timing) to deliver the site and block abuse. Cloudflare's privacy policy covers this. Cloudflare Web Analytics is configured to be cookieless and to not collect personal data.

Cal.com (if used)

If Barry and Jodie enable online scheduling and you book a meeting through it, Cal.com will collect the booking details (your name, email, the time you chose) under its own privacy policy.

Phone, email, and SMS providers

When you call or text, your phone carrier handles the call. When you email, your email provider and ours (Outlook) handle the message. Those are governed by the agreements between you and those providers.

Cookies and tracking

This site does not set advertising cookies, social media cookies, or cross-site tracking cookies. Cloudflare's bot management and Turnstile may briefly use storage to verify a single request, then discard it.

We do not respond to "Do Not Track" browser headers because there is no industry consensus on what they mean and we do not do the kind of tracking they were designed to opt out of. If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out of any sale or share of personal data, as required by California law and as best practice generally. We do not currently sell or share personal data, so this is effectively a no-op.

How long we keep your information

  • Contact form messages live in Barry's and Jodie's Outlook inboxes for as long as the correspondence is active and a reasonable period after, typically until they prune old folders. We do not store these on the website side.
  • Phone and text records are kept by Barry's and Jodie's phone carriers under those carriers' policies.
  • Transaction records, if you become a client, are kept per the requirements of the Oregon Real Estate Agency (ORS 696.280 and OAR 863-015-0260) and the Oregon Revised Statutes governing real estate. These are separate from anything this website collects.
  • Aggregate analytics are retained by Cloudflare under their data retention policy. They are not tied to you personally.

Your rights under state privacy laws

Oregon residents (Oregon Consumer Privacy Act, ORS 646A.570 to 646A.589)

The Oregon Consumer Privacy Act applies to businesses that, in a calendar year, control or process the personal data of 100,000 or more Oregon residents, or 25,000 residents combined with 25 percent or more of annual revenue from selling personal data. Bandon By The Dunes Realtee is a small local brokerage and almost certainly does not meet these thresholds. We are providing OCPA-style rights anyway because that is the right thing to do.

You have the right to:

  • Confirm whether we process your personal data and access a copy of it
  • Correct inaccuracies in your personal data
  • Delete your personal data
  • Obtain a portable copy of your personal data in a usable format
  • Receive a list of the specific third parties to which we have disclosed your personal data
  • Opt out of the sale of your personal data, of targeted advertising, and of profiling that produces significant effects (we do not do any of these)

To exercise any of these rights, email Barry at barrykwinters@outlook.com or call 541-297-9575. We will respond within 45 days. If we deny a request, you have the right to appeal by replying to the denial; we will respond to the appeal within 45 days. If your appeal is denied, you may file a complaint with the Oregon Department of Justice at doj.state.or.us/consumer-protection.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we have collected about you, to delete it, to correct inaccuracies, and to opt out of sale or sharing (we do not sell or share). You also have the right not to be discriminated against for exercising your rights. To submit a request, use the same contact methods listed above for Oregon residents. We will verify your identity using the contact information you have on file with us. You may authorize an agent to submit a request on your behalf with written authorization.

Other states

If you live in a state with its own consumer privacy law (Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Tennessee, Texas, Utah, Virginia, and others as enacted), you generally have rights similar to those above. Use the same contact methods and we will respond.

Children's privacy

This site is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it. If you believe a child has provided us information, contact Barry at barrykwinters@outlook.com.

Under the Oregon Consumer Privacy Act, processing the personal data of a consumer under 16 years of age for targeted advertising, sale, or profiling is prohibited (effective January 1, 2026). The sale of any consumer's precise geolocation data is also prohibited as of that date. We do not do any of these things.

Security

The site is served over HTTPS with a Cloudflare-managed TLS certificate. The contact form is rate-limited and bot-filtered. Form submissions are sent over an encrypted channel to Barry's and Jodie's email. We do not run our own database, so there is no centralized store of visitor information that could be breached on the website side. Once your message is in Outlook, it is subject to Microsoft's security practices.

No system is perfectly secure. If you become aware of a vulnerability, please email Barry at barrykwinters@outlook.com so we can address it.

Changes to this notice

We may update this notice as the site changes, as the law changes, or as we add or remove third party services. The effective date at the top reflects the most recent update. Material changes will be flagged on the home page for a reasonable period after the change. Continued use of the site after a change means you accept the updated notice.

How to contact us about privacy

Privacy questions, requests, complaints, and corrections all go to Barry. He is the principal broker and the person who reads the email.

Email
barrykwinters@outlook.com
Phone
541-297-9575
Mail
Bandon By The Dunes Realtee
Attn: Privacy
1095 Alabama Ave SE, Ste A
Bandon, OR 97411

For Oregon residents who are not satisfied with our response, the Oregon Department of Justice handles consumer privacy complaints: doj.state.or.us/consumer-protection.