JOIN GALLERIA GOLD

Privacy Policy

Introduction and Overview

We have updated our Privacy Policy to enhance transparency regarding how your personal information is used and the expanded choices and control you have over that information. This Privacy Policy describes how Douglas Emmett Inc., its affiliates and its direct and indirect subsidiaries (“Douglas Emmett,” “us,” “our,” and “we”) collect, use, and share information about you, as well as your rights and choices regarding such information.

It applies to any of our online locations, websites, or platforms, including www.douglasemmett.com, that links to this Privacy Policy (the “Service”) or offline location that makes this Privacy Policy available to you. By using the Service or interacting with us offline, you agree to our Terms of Use and consent to our collection, use and disclosure practices, and other activities as described in this Privacy Policy.

1. Information Collection

A. Information You Provide

We collect information that you provide about yourself when you use the Service or interact with us offline, including as a tenant or prospective tenant or as a job applicant, when you access our website content, or for another reason. The categories of information we collect (and have collected in the last 12 months) include:

  • Identifiers, such as your first and last name, email address, postal address, phone number, username, password, password hints, information for authentication and account access, Social Security Number, driver’s license number, passport number, and any messages you choose to send to us.
  • Demographic Data (including information protected by California or federal law), such as your age, gender, and country.
  • Location Data, if you provide it to us, such as information related to your state, city, or neighborhood.
  • Customer Data, such as your payment information (credit or debit card or bank account data), proof of income, current and previous addresses, references, current or prior employer names, telephone numbers, and other information necessary to consider your eligibility for tenancy and/or to maintain a relationship with you.
  • Employment and Education Data, including your employment and education history, writing samples, references, and other information as necessary to consider your job application for open positions.

B. Information Collected Automatically

In addition, we automatically collect internet and electronic network activity information when you use the Service, including pages you visit, device type, browser settings, operating software, internet service provider, and device identifiers such as your IP address or Ad ID via tracking tools like cookies, pixels, and log files.

2. Notice of Collection and Use of Sensitive Personal Information (SPI)

We collect and process Sensitive Personal Information (such as Social Security Numbers, driver’s licenses, passport numbers, and bank account details) strictly for necessary business purposes—including tenant background screening, identity verification, eligibility evaluation, and lease execution.

Notice on SPI Limits: Douglas Emmett does not use or disclose your Sensitive Personal Information for purposes other than those permitted under Section 7027(m) of the CCPA/CPRA Regulations (such as performing services safely, verifying customer identity, or maintaining legal compliance). Because we do not use your SPI for cross-context behavioral advertising or unauthorized secondary commercial purposes, a formal “Limit the Use of My Sensitive Personal Information” option is not required.

3. Data Retention Criteria

We retain the personal information we collect about you only for as long as reasonably necessary to fulfill the business or commercial purposes for which it was collected, or to comply with our legal, accounting, regulatory, or reporting obligations.

To determine the appropriate retention period, we consider the volume, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure, and applicable statutory limitation requirements.

Data Category Retention Standard / Criteria
Identifiers & Customer Data (Names, SSNs, Driver’s Licenses, Proof of Income) Maintained for the active duration of the lease agreement or application review period, plus standard statutory limitation periods post-termination (typically 4–7 years for legal, tax, and audit compliance).
Employment & Education Data (Job Applicant Records) For hired employees, transferred to internal personnel records. For candidates not selected, maintained for up to 3 years in compliance with state recordkeeping laws.
Internet & Electronic Activity Logs (Cookies, Pixels, Device Logs) Retained securely via automated systems for up to 13 months from the date of collection before automatic deletion or anonymization.

Export to Sheets

4. Use and Sharing of Information

We use your data to operate our services, process tenant evaluations, manage accounts, prevent fraud, and conduct corporate marketing. We share information for clear business purposes with Service Providers (handling payments, hosting, and technical operations), Vendors (including ad-tech firms and background check agencies), and internal Affiliates.

5. Your Expanded California Privacy Rights (CCPA / CPRA)

If you are a California resident, you hold expanded legal rights regarding the collection and management of your personal information. These rights include:

  • Right to Know & Access: The right to request information regarding the categories of data we collect, the sources of collection, the business purpose for collection, and the specific pieces of data we hold about you.
  • Right to Delete: The right to request the erasure of personal information collected from you, subject to legal and contractual exceptions (such as active tenancy).
  • Right to Correct: If you believe that any personal information we maintain about you is inaccurate, you have the right to request that we correct that information. Upon receiving a verifiable consumer request, we will use commercially reasonable efforts to update our systems.
  • Right to Opt-Out of the “Sale” or “Sharing” of Personal Information: Douglas Emmett does not sell your personal information for monetary compensation. However, we utilize tracking pixels (such as Google Analytics and Meta pixels) that log cross-context behavioral activity across different websites to deliver targeted advertisements. This activity is legally defined as “Sharing” under the CCPA/CPRA. You have the right to direct us not to share your personal info at any time.
  • Right to Non-Discrimination: We will not penalize, deny services, or provide a different level of quality to any consumer who chooses to exercise their privacy rights.

How to Exercise Your Rights

To submit a verifiable consumer request to Know, Delete, Correct, or Opt-Out, please contact us through one of our official intake channels:

Global Privacy Control (GPC) & Automated Opt-Outs: Our website is configured to detect and process Global Privacy Control (GPC) signals broadcasted by compatible web browsers. If our system detects a GPC signal from your device, it will automatically opt your browser out of targeted tracking pixels as a valid, automated “Do Not Sell or Share My Info” request.

6. Data Security

We implement and maintain reasonable administrative, physical, and technical security safeguards designed to protect your information from loss, theft, misuse, and unauthorized access, disclosure, alteration, or destruction. Nevertheless, transmission via the internet is never completely secure, and we cannot guarantee absolute security.

7. Contact Us

If you have any questions or comments about this Privacy Policy, our data practices, or our compliance with applicable law, please contact us: