Legal
Privacy policy
This website exists so that you can look at properties and get in touch. The only information it asks for is what you type into the contact form, and the only thing it is used for is replying to you.
Who this is
Baron Realty, David S. Brown, a licensed real estate broker in the State of New York, licence number 103-512-10284. You can reach us at david@baron-realty.com.
What we collect
When you use the contact form we receive the name, telephone number, email address and message you enter, and the property you select if you choose to select one. That field is optional and the form works without it.
A spam check on the contact form. When you scroll down to the contact form, your browser loads a check from Cloudflare, called Turnstile, which tells real visitors apart from automated spam. To do that, Cloudflare receives your IP address, your browser type, technical details of your browser and device, and the address of this website. It does not see what you type into the form. Most visitors never notice it; now and then it asks you to tick a box. If you never reach the form, your browser never contacts Cloudflare for it.
Like any website, our hosting provider records technical information such as IP addresses and browser type in its server logs, for security and to keep the site running. We do not use that information to identify or profile you.
We do not collect Social Security numbers, financial account details, government identification numbers or health information through this website. Please do not send them to us through the contact form.
What we use it for
To reply to you, and to have the conversation you started. That is the whole purpose. If your enquiry turns into a transaction, we keep the correspondence as a business record of that transaction.
Marketing
We do not send marketing emails. Contacting us does not add you to a mailing list, a newsletter or a distribution list, because none exist. You will hear from us in reply to your enquiry and in connection with any business that follows from it, and not otherwise.
Cookies and analytics
This website sets no cookies. Nothing is stored in your browser by this site: no cookies, no local storage. There is no tracking pixel, no advertising network and nothing following you between sites, and nothing here needs a cookie banner because there is nothing to consent to. The one piece of outside code is Cloudflare’s spam check on the contact form, described above. It runs only at the form, and we have set it up not to issue its clearance cookie.
We do count visits ourselves, on this site’s own server, so that we know how the site is doing. To tell one visitor from another within a single day, the server makes a code from your IP address and browser type using a secret that changes every day and is then discarded. The code cannot be turned back into your address and cannot recognise you tomorrow; your IP address itself is not stored. Individual records are deleted within seven days and what we keep is totals: which pages were viewed, which site or app the visit came from, country, device type, and which links were tapped. If your browser sends the Global Privacy Control or Do Not Track signal, your visit is not counted at all.
Who else sees it
Your message is transmitted and stored using service providers who host the website and deliver the email. They process it on our instructions in order to provide those services, and for no purpose of their own.
Cloudflare runs the spam check on the contact form. It uses what it receives to decide whether a visitor is a person or a bot, and, as its Turnstile privacy addendum explains, also to improve its bot detection, which it does on its own account rather than on our instructions. Cloudflare says it does not use this information to identify, profile or target anyone.
We do not sell your information, we do not rent it, and we do not share it with other brokers, lenders or third parties for their own marketing. If a transaction requires us to pass details to a party such as an attorney or a title company, we will be doing that at your direction and as part of the deal.
How long we keep it
Enquiries that do not lead anywhere are kept while they are useful and then deleted. Records connected to an actual transaction are kept for as long as the law and ordinary brokerage practice require.
Security
The site is served over an encrypted connection. In line with New York’s SHIELD Act (General Business Law § 899-bb), we maintain reasonable administrative, technical and physical safeguards appropriate to the size of the business and the limited information it holds. If a breach ever affected private information as that law defines it, we would notify affected individuals and the relevant New York authorities as General Business Law § 899-aa requires.
No method of transmission over the internet is completely secure, so please do not send anything highly sensitive through a web form.
Your choices
New York does not currently give residents a general statutory right to access or delete information held by a business, so what follows we offer because it is the right way to behave rather than because a statute compels it.
Write to david@baron-realty.com and we will tell you what we hold about you, correct it if it is wrong, or delete it, unless we are required to keep it as a record of a transaction. There is no charge and you do not need to give a reason.
Children
This is a commercial real estate website. It is not directed at children and we do not knowingly collect information from anyone under 16.
Changes
If this policy changes, the revised version will appear here with a new date at the top. Material changes to how we use information will be described rather than quietly folded in.
On 4 October 2026 we added Cloudflare’s spam check to the contact form. The sections on what we collect, cookies and who else sees it now describe it.