Privacy Policy

Carolina Connections Realty, Inc., a North Carolina corporation, operating the Carolina Connections School of Real Estate (NCREC Education Provider #1853).

When you enroll in a course or contact us, we collect:

• Your full legal name, email address, and phone number
• Your North Carolina real estate license number
• A copy of your real estate Pocket Card or driver's license (uploaded as part of NCREC-required identity verification)
• A record of your acknowledgement of our Policies & Procedures Disclosure, including your IP address, browser user-agent string, and the timestamp of your acknowledgement
• Your payment information, which is collected and processed by Stripe, our payment processor. We never see or store your full card number.
• The course session you registered for and your attendance and completion status
• Any content you submit through our contact form
• Limited cookies necessary to operate the website (see Section 6)

We do not run advertising trackers, analytics that profile individual users, or third-party social media pixels.

• To register you in the courses you've selected and provide course materials
• To verify your identity, as required by NCREC Rule 58H .0204 and related rules
• To process payment and issue receipts
• To report course completions to the North Carolina Real Estate Commission within the time required by NCREC rules
• To communicate with you about your enrollment, including class details, Zoom links, and certificates
• To comply with our recordkeeping obligations as a NCREC-certified Education Provider
• To prevent fraud and abuse

We share information with the following service providers strictly to operate the School. We do not sell or rent personal information to anyone.

• Stripe, for payment processing. Stripe collects card details directly from you under its own terms and privacy policy; we receive only the metadata needed to confirm and reconcile a payment.
• MongoDB Atlas, for database hosting (enrollment records and signed disclosures).
• Cloudflare R2, for encrypted private storage of uploaded ID documents.
• Vercel, for website and application hosting.
• Resend, for transactional email delivery (registration confirmations, course communications).
• Zoom, for live virtual classroom sessions. Zoom collects information directly from you under its own privacy policy when you join a session.
• The North Carolina Real Estate Commission (NCREC), to whom we report course completions and provide any records NCREC is entitled to inspect under Subchapter 58H rules.

We may also disclose information if required by subpoena, court order, or other valid legal process.

• Course enrollment, payment, and completion records: at least seven (7) years from the date of the course, to satisfy NCREC and tax recordkeeping requirements.
• Signed Policies & Procedures Disclosure acknowledgements and uploaded ID documents: seven (7) years.
• Contact form messages: two (2) years from receipt.
• Backups containing the above may persist beyond these periods until rotated out.

When the retention period ends, we delete or de-identify the information.

The website uses one operational cookie to support the private-preview access gate (ccars_auth). It is HTTP-only, secure, and expires after 30 days. We do not use advertising cookies. If we add analytics in the future, we will update this Policy and disclose them by name here.

You may contact us at any time to:

• Request a copy of the personal information we hold about you
• Ask us to correct information that is inaccurate
• Ask us to delete information, except where we are required to retain it under NCREC rules, tax law, or other legal obligations
• Request a portable copy of information you provided to us

These rights mirror those granted to North Carolina residents under the North Carolina Consumer Privacy Act (effective January 1, 2026) and to California residents under the California Consumer Privacy Act (CCPA). The School is a small operator and is not subject to either statute's enforcement thresholds, but we honor these rights as a matter of good practice.

To exercise any of these rights, email us at the address at the bottom of this page. We respond to verified requests within 30 days.

The School is intended for adults pursuing a real estate license or continuing education. We do not knowingly collect information from anyone under 18.

We use industry-standard safeguards: HTTPS for all traffic, encrypted-at-rest storage at Cloudflare R2 and MongoDB Atlas, scoped API tokens, and access logging. No system is perfectly secure. If you believe your account has been compromised, contact us immediately.

We may update this Policy as our practices change. Material changes will be posted at this page with a new effective date and, where appropriate, communicated by email to enrolled students.