Skip to main content
Menu Menu

UDR Inc. Privacy Policy

Last Updated: June 19, 2025

This Privacy Policy (this "Privacy Policy") explains how UDR Inc. ("UDR," "we," "us," or "our") collects, uses, discloses, and otherwise processes personal information in connection with our website, www.udr.com, UDR resident applications or other customer, associate, or job applicant applications, and other UDR websites and services where this Privacy Policy is referenced (collectively, our "Services"). As used in this Privacy Policy, "personal information" means information that is linked or reasonably linkable to an identified or identifiable individual.

This Privacy Policy does not address our practices regarding information that we collect other than through our Services, nor does this Privacy Policy govern the collection, use, or disclosure of information by any of our affiliates or by any third parties. If you decide to visit a third-party website or service, you are subject to the privacy policy of the third-party website or service. As such, please review the privacy policy of these parties to learn about how they process and use personal information.

Additional terms may apply to you based on the state you reside in or the Services that we provide to you. Please see ADDITIONAL INFORMATION REGARDING INDIVIDUAL RIGHTS below to learn more about additional terms and rights that may apply to you.

By using our Services and/or providing any personal information via our Services, you accept and agree to our practices surrounding the processing of your personal information in accordance with this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

1. WHAT WE COLLECT

The personal information UDR collects or receives depends on the context of your interactions with us and our Services. The types of personal information we may collect or receive may include:

• Identifiers, such as your name, postal address, email address, phone number, Internet Protocol (IP) address and other online identifiers;

• Financial and payment information, such as credit card numbers, bank account information, payment history, billing address, income information, and credit history;

• Commercial information, such as records of personal property, products or services purchased, obtained or considered, and other purchasing or consuming histories or tendencies;

• Internet or other electronic network activity information, including information related to the use of our Services, such as browser type, pages visited, device information, and time spent with our Services;

• Audio, video, and other electronic data, including voice recordings from your telephone calls with us, which we monitor and record, and audio, visual or surveillance recordings at our properties or otherwise related to our Services;

• Professional or employment-related information, such as proof of eligibility to work, resumé, and other professional and employment-related information if you apply for employment or if we consider engaging you as an independent contractor;

• Inferences drawn from information described in this section, which we may use to create profiles about consumers reflecting their preferences, characteristics, predispositions, and behavior, including for customer service purposes;

• Characteristics of protected classifications under applicable law, such as age, national origin, marital status, gender, and veteran or military status;

• Biometric information, such as fingerprints;

• Sensitive personal information, which may include information related to your health or disability status if you request accommodations, including under fair housing or other relevant laws, demographic information related to your race, ethnicity and gender, including for reporting purposes under applicable laws, citizenship or immigration status, account access credentials, and government identifiers such as your Social Security, driver's license, state identification card, or passport number; and/or

• Other personal information, including in any feedback, requests, or correspondence with us, such as through surveys, online forms, and customer service inquiries, and any other personal information as otherwise described to you at the point of collection and/or pursuant to your consent.

For purposes of the California Consumer Privacy Act (CCPA), some types of personal information described above may also constitute personal information described in the California Customer Records statute (Cal. Civ. Code § 1798.80(e)), including name, Social Security number, postal address, telephone number, driver's license or state identification card number, education, employment, bank account number, credit card number, debit card number, or other financial information ("California Customer Records Data").

Our Services are not intended for children under 16 years of age. No one under age 16 may provide any personal information on our Services. We do not knowingly collect, sell, or share for cross-context behavioral advertising (also referred to in this Privacy Policy as "targeted advertising") purposes any personal information of children under 16. If you are under 16, do not use or provide any information on our Services. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at [email protected] or 1-844-204-7755.

2. HOW WE COLLECT YOUR PERSONAL INFORMATION

UDR collects personal information in several ways, both directly and indirectly, including through interactions with our Services and from third parties.

2.1 Direct Interactions

We collect personal information when it is provided voluntarily to us, including:

• When you apply for a lease, register for an account, or contact us;

• When you participate in surveys or provide information through forms on our Services, including on our websites;

• In other communications with us, including when you submit inquiries for information using the "Contact Us" function on our websites or when you contact us for customer support; and

• When you apply for a position or when we consider engaging you as an independent contractor.

2.2 Automatically Through Our Services

We may collect information automatically through interactions with our Services, including through our websites. This may include:

• Cookies, web beacons, and similar tracking technologies (collectively, "cookies") that collect and store information about your interactions with our Services, including the pages you visit and your referring URL, your browser type, device information, and identifiers like your IP address. For more details on how we use cookies and how to manage cookie preferences, please see COOKIES AND OTHER TRACKING TECHNOLOGIES below;

• Internet and other usage information, including information related to the use of our Services, such as browser type, pages visited, device information, and identifiers like your IP address;

• Audio, video, and other information from monitoring and surveillance systems, including audio recording from your phone calls with us and video footage, audio recordings and behavioral data in common areas of our properties, which we use to help ensure the safety and security of our residents, employees, and properties; and/or

• Location information, either through your device settings or based on your IP address, which we may collect when you use our Services.

2.3 Third-Party Sources

We may also receive personal information from third parties, including from:

• Service providers and vendors who help us operate our business and Services, including to assist with payment processing, property management, maintenance requests, and resident services;

• Affiliates and partner organizations who may offer complementary services to UDR residents or potential residents or who we otherwise may collaborate with from time to time, including real estate agents, brokers, real estate or property management platforms, and property management companies who may provide us with your personal information, such as your contact information and preferences;

• Social media and public platforms, if you choose to connect with UDR through social media platforms or other public forums. We may collect information such as social media handles, profile details, or any public posts made in connection with UDR;

• Advertising providers and platforms, who may provide personal information related to your online activity through advertising networks and platforms. These third parties may use cookies to collect information about you when you use our Services. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services to provide you with targeted advertising. For information about how you can opt out of receiving targeted advertising, see COOKIE CHOICES and YOUR PRIVACY RIGHTS below; and/or

• Credit and background check providers, public records, or government agencies, to verify your identity, creditworthiness, and rental history.

3 HOW WE USE YOUR PERSONAL INFORMATION

UDR uses the personal information we collect for a variety of purposes, including:

• To operate our business and provide and manage our Services, including to evaluate leasing applications, process lease agreements, and manage our relationships with our residents, partners, and service providers; to create, maintain, and manage your account; to process payments for rent, fees, and other services; to send billing statements and reminders; and to respond to inquiries and handle customer service issues;

• To communicate with you, including to provide updates on changes to our Services and other relevant news or deadlines; to provide account notifications or service order updates; to send marketing and advertising communications, including to personalize advertising and promotional content, manage promotions and events, and to provide information about products, services, available properties, special offers, or events that may interest you, which you can opt out of receiving at any time (see YOUR PRIVACY RIGHTS below); with your consent, we may send text messages or push notifications about updates to your lease, payment reminders, or special offers;

• To improve our Services, including to better understand how users interact with our Services to improve functionality, user experience, and performance; to customize experiences based on interactions with our Services, including to offer relevant resources based on specific needs or interests; and to analyze user behavior on our Services to help identify trends and areas for improvement;

• For other internal research and development purposes, including using statistical, anonymized, or aggregated data to generate reports on market trends, property performance, and other business insights that help us optimize our Services;

• To assess contractors and job applicants, including to evaluate qualifications and experience, make hiring decisions, conduct interviews, and evaluate suitability;

• To comply with various legal and regulatory obligations, including auditing related to our interactions with you;

• To protect the rights, property, or safety of UDR and others, including for security and fraud prevention purposes; to ensure compliance with our terms of use, policies, and other agreements; and to defend UDR in legal proceedings, including responding to lawsuits or government inquiries;

• For corporate restructuring purposes, including to evaluate or execute a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, as part of regular business operations, or pursuant to a bankruptcy, liquidation, or similar proceeding; and/or

• For other one-time or short-term transient use.

We may also use sensitive personal information to fulfill specific service or internal operations needs, including to maintain and service accounts, provide customer service, process or fulfill orders and transactions and verify information, comply with legal requirements, detect and prevent fraud, identity theft and other malicious activities, ensure safety, for one-time or short-term transient use, and/or for other related purposes that do not involve inferring characteristics about an individual.

We do not perform automated decision making or profiling with your personal information in furtherance of decisions that produce legal or significant effects concerning you under applicable law.

If you apply for a job or if we consider engaging you as an independent contractor, we may use your information to process your job application, verify references, assess qualifications, comply with relevant laws and regulations, manage recruitment processes, including conducting background checks and maintaining application records, and/or to engage in corporate transactions requiring disclosure of job applicant records, such as for evaluating potential mergers and acquisitions.

4. WHEN AND WITH WHOM WE DISCLOSE PERSONAL INFORMATION

4.1. Disclosures

We may disclose personal information with others, including when you direct us to do so, to provide you with our Services, or otherwise to fulfill the purpose for which you provide it. We may also disclose personal information when required by law or to respond to legal process, and to protect our property, rights, safety, and that of our employees, residents, or others. In addition, we may disclose your information in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of our assets.

The parties with whom UDR may disclose personal information for the purposes described above may include:

• Affiliates and partner organizations, including our properties, real estate agents, brokers, and property management companies to assist you with requested products or services, to provide more personalized experiences, and to comply with applicable law. The types of personal information we may disclose to our affiliates and partner organizations may include identifiers, California Customer Records Data, commercial information, and professional information;

• Service providers, consultants, contractors, vendors, and other third parties that support our business, including payment processors to process rent payments, fees, or other transactions, marketing and advertising companies who help us send promotional emails, newsletters, or other communications, IT and security service providers, cloud storage vendors, and hosting platforms that help maintain our Services, and third-party providers who handle customer service, support tickets, or provide technical troubleshooting support. The types of personal information we may disclose to our service providers and third parties that support our business may include identifiers, California Customer Records Data, commercial information, internet or other electronic network activity information, audio, video and other electronic data, professional or employment-related information, and sensitive personal information (such as government identifiers);

• Government entities, regulatory bodies, and law enforcement agencies, including to comply with subpoenas, legal processes or other lawful requests by government authorities, to investigate, detect, and prevent fraud, to enforce our policies and agreements, and to protect the rights, property, and safety of UDR, our employees, residents, and others;

• A buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of UDR's assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by UDR is among the assets transferred; and

• Other third parties to fulfill the purpose for which you provide personal information, for any other purpose disclosed by us when you provide your information, and otherwise at your direction or with your consent.

4.2. Selling and Sharing for Cross-Context Behavioral Advertising

We do not sell personal information in exchange for monetary consideration and we do not sell sensitive personal information for monetary or any other valuable consideration. We also do not share sensitive personal information with third parties for "cross-context behavioral advertising," which for purposes of this Privacy Policy, means targeting advertising to consumers based on personal information obtained over time from their activities across nonaffiliated websites, applications, or services.

However, where consumer privacy laws define "sell" to include disclosing personal information for other, non-monetary consideration, we may "sell" certain identifiers and California Customer Records Data under such definitions to our affiliates and partner organizations.

We may also share personal information for cross-context behavioral advertising purposes to advertising providers, data analytics companies, and other third parties, who may analyze such information and use it to market their products or services to you.

Please see ADDITIONAL INFORMATION REGARDING INDIVIDUAL RIGHTS to learn more about choices you may have with respect to such disclosures.

5. COOKIES AND OTHER TRACKING TECHNOLOGIES

5.1.  Use of Cookies on Our Services

As mentioned, we use cookies to collect certain information about your equipment, browsing actions, and patterns as you navigate through and interact with our Services. We use these cookies to enable functionality of our Services, analyze performance, keep track of your preferences and account information, and to show advertising which is more likely to be of interest to you.

The cookies we deploy may include essential cookies (also referred to as "necessary" cookies), which are required to support core functionality, as well as advertising and analytics cookies, which help us and our advertising partners serve advertising content that is relevant to you. We may also deploy third-party analytics cookies to improve the performance and funtionality of our Services. For example, we may use Google Analytics or similar services to collect data on website traffic, user engagement, and other analytics to understand how visitors interact with our Services.

We may also use third-party advertising networks and providers who use cookies to collect information about you when you use our Services, and who may track your browsing activity across different websites to provide you with targeted advertising.

5.2.  Cookie Choices

Most web browsers allow you to control and manage cookies through the settings menu. You can choose to accept or block cookies, delete cookies when you close your browser, or receive notifications when cookies are being used. The method for managing cookies varies by browser, so please consult your browser's help section for specific instructions.

You can also opt out of receiving targeted advertisements from many third-party advertising networks by visiting websites like the Network Advertising Initiative (NAI) or the Digital Advertising Alliance (DAA) and following their opt-out instructions. UDR does not control how third parties manage their opt-out processes. Please note that even if you opt out of targeted advertising, you may still see general ads that are not tailored to your interests.

When you first visit our online Services, you may be presented with a cookie consent banner that allows you to accept or manage your cookie preferences. You can choose which categories of cookies you want to allow. You can also modify your preferences at any time by clicking on the Cookie Preferences link.

Please note that if you choose to disable or block certain cookies, some features of our Services may not function as intended. Essential cookies, which are necessary for our online Services to function properly, cannot be disabled.

6. HOW WE PROTECT PERSONAL INFORMATION

We follow industry-standard practices to secure and prevent the unauthorized access, use, or disclosure of personal information that we collect and maintain. These security practices include technical, administrative, and physical safeguards, which may vary depending on the type and sensitivity of the information. Although we take the responsibility of safeguarding your personal information seriously, no security measures are 100% effective and we cannot guarantee that these practices will prevent every unauthorized attempt to access, use, or disclose your information.

7. HOW WE RETAIN PERSONAL INFORMATION

We retain personal information for different lengths of time depending on the type of information and the applicable business and legal requirements. In deciding how long to retain personal information, we consider many criteria, including: (i) the business purpose for which the information is used, and the length of time for which the information is required to achieve those purposes; (ii) whether we are required to retain the information in order to comply with legal obligations or contractual commitments, or is otherwise necessary to investigate theft or other illegal activities, to ensure a secure online environment, or to protect health and safety; (iii) the privacy impact on the consumer of ongoing retention, including the consumer's likely expectations in light of the sensitivity of information; and (iv) the manner in which information is maintained and flows through our systems, and how best to manage the lifecycle in light of the volume and complexity of the systems in our infrastructure.

Individual pieces of personal information may exist in different systems that are used for different business or legal purposes. A different maximum retention period may apply to each use case of the information. Certain individual pieces of information may also be stored in combination with other individual pieces of information, and the maximum retention period may be determined by the purpose for which that information set is used. Some information is also deleted automatically after a set period of time, often set by law, unless we are legally required to hold it longer, such as for pending litigation.

8. YOUR PRIVACY RIGHTS

You may have rights under certain consumer privacy laws regarding the collection, use, and disclosure of your personal information, as described in more detail in ADDITIONAL INFORMATION REGARDING INDIVIDUAL RIGHTS below.

We will make all required updates and changes within the time specified by applicable law and as required by law. When permitted by law, we may charge an appropriate fee to cover the costs of responding to the request. Such requests may be submitted via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755.

8.1 Access, Correction, and Deletion

As described in more detail in ADDITIONAL INFORMATION REGARDING INDIVIDUAL RIGHTS, depending on where you live and the types of information we collect about you, and subject to legal and contractual retention requirements, you may have the right to request:

• Access to the personal information we have collected from you;

• Correction of any inaccuracies in the personal information we have about you; and/or

• Deletion of your personal information.

Such requests may be submitted via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755.

For your security and to ensure unauthorized third parties do not access your personal information, we may require you to verify your identity before we can act on your request. If you have an account with us, you may be required to authenticate through your account. If you do not have an account, you may be required to provide an email address and mobile phone number to start the verification process. You may also be required to provide a qualified government-issued photo identification. If you are asking for access on behalf of someone else, we will require verification of your identity, as well as proof of authorization by the individual whose personal information you wish to access. There may be information we will not return in response to your access request, such as information that would affect the privacy of others or interfere with legal requirements. Similarly, there may be reasons why we cannot comply with your deletion request, such as the need to keep your personal information to provide you Services or to fulfill a legal obligation. In certain circumstances, we may not collect sufficient identifiers to match information in our records with your request.

8.2 UDR Marketing Communications

You can opt out of receiving marketing and promotional emails from us at any time by clicking the "unsubscribe" link at the bottom of any marketing emails we send you, or you may contact us at [email protected] or 1-844-204-7755 to request removal. This opt out may not apply to information provided to UDR as a result of a purchase, registration, or other transactions.

8.3 Cross-Context Behavioral Advertising and Targeted Advertising

If you do not want us to share your personal information for cross-context behavioral or targeted advertising purposes, you can request to opt out by using the GPC signal, (see OPT-OUT PREFERENCE SIGNALS AND DO-NOT-TRACK below for more information). Please note that, if applicable, your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

You can also learn more about opting out of personalized advertising in web browsers by visiting the DAA and NAI opt-out pages or other similar industry opt-out platforms.

8.4 Cookies and Tracking Technologies

As explained above, we use cookies and similar tracking technologies on our Services, including to enable functionality of our Services, analyze performance, provide a personalized experience, and for targeted advertising purposes.

You can control the use of cookies on our websites by changing your browser settings or modifying your preferences via the cookie banner. You can also opt out of receiving targeted advertisements from many third-party advertising networks by visiting the NAI and DAA websites. See COOKIE CHOICES above for more information.

8.5 Sensitive Personal Informations

You may have the right under applicable law to limit our use and disclosure of sensitive personal information for certain purposes. We limit the use of your sensitive personal information to that use which is necessary to perform reasonably expected services or as required by law. Where required by applicable law, we will also obtain your consent to process sensitive personal information for certain purposes.

8.6 Opt-Out Preference Signals and Do-Not-Track

User-enabled opt-out preference signals, including Global Privacy Controls (GPC) and Universal Opt-Out Mechanisms (UOOM) (collectively referred to in this Privacy Policy as "GPCs") provide consumers with a simple and easy-to-use method by which to exercise the right to opt-out of "sale" and/or sharing of their personal information with third parties for cross-context behavioral advertising purposes. We will process opt-out preferences for a browser from GPC signals which are in formats commonly used and recognized by businesses, such as an HTTP field header, as required by applicable law. We currently do not connect browser use to particular individuals and, as such, you will need to use GPCs on all browsers in which you access our Services.

Do-Not-Track (DNT) is a privacy preference that users can set if they do not want web services to collect information about their online activity. We do not respond to DNT signals or other mechanisms (with the exception of GPCs) that provide a choice regarding the collection of personal information about activities over time and across different websites or online services. We encourage users who have DNTs to use GPCs.

9. ADDITIONAL INFORMATION REGARDING INDIVIDUAL RIGHTS

9.1 California

California law provides California residents with rights to receive certain disclosures regarding the collection, use, and sharing of "personal information," rights to access, delete, correct certain personal information we collect about them, restrict us from "selling" or "sharing" certain personal information, and limit our use of sensitive personal information, as defined by the CCPA and described below. As a California resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

The CCPA defines "personal information" to mean "information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular consumer or household." When we use the term "personal information" in our Privacy Policy, it includes personal information covered by this definition.

You or your authorized agent may submit a request to exercise these rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. If we deny your request, you may have the right to appeal our decision, which you can do by emailing us at [email protected].

Residents of California also have the right to request information regarding third parties to whom UDR has disclosed certain categories of personal information during the preceding year for the third parties' direct marketing purposes under California's "Shine the Light" law (Cal. Civ. Code §1798.83). Personal information under this California law means "any information that when it was disclosed identified, described, or was able to be associated with an individual." If you are a California resident and would like to inquire further, please email [email protected].

Right to Know, Request Correction, and Request Deletion

California residents have the right to request that we disclose what personal information we collect, use, and sell, as well as the right to request that we delete certain personal information that we have collected from you. If we hold personal information that is not accurate, California residents have the right to request that we correct this information. You or your authorized agent may submit a request to exercise these rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755.

For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

Selling and Sharing for Cross-Context Behavioral Advertising

The CCPA requires businesses to include certain disclosures relating to your right to opt out of "sale" or "sharing" for cross-context behavioral advertising purposes. We do not sell personal information in exchange for monetary consideration and we do not sell sensitive personal information or personal information of consumers under 16 years of age for monetary or any other valuable consideration. We do not share sensitive personal information or knowingly sell personal information of consumers under 16 years of age with third parties for cross-context behavioral advertising purposes.

However, for residents of California, we may "sell" personal information for other valuable consideration and share personal information for cross-context behavioral advertising purposes, as explained in more detail in CROSS-CONTEXT BEHAVIORAL ADVERTISING AND TARGETED ADVERTISING above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or sharing for cross-context behavioral advertising purposes under California law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal.

Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

Right to Restrict Use of Sensitive Personal Information

California residents have the right to request that businesses restrict the use of sensitive personal information. We limit the use of your sensitive personal information to that use which is necessary to perform reasonably expected services or as required by law.

Right to Information Regarding Participation in Data Sharing for Financial Incentives

We may run promotions from time to time and ask you to share personal information with us in exchange for discounts. We will give you clear notices about these types of programs when you sign up, and participation is always voluntary. If you change your mind, you will always be able to opt out, and if you don't participate, you will still be able to use our Services.

ADDITIONAL INFORMATION REGARDING COLORADO RESIDENTS' PRIVACY RIGHTS

Colorado law provides Colorado residents with rights to access, delete, and correct certain "personal data" we collect about them, as well as to restrict the use of that personal data for "targeted advertising," restrict the "sale" of that personal data, and control our use of personal data considered sensitive. If you are a Colorado resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights. While Colorado residents have the right to opt out of automated profiling that would produce legal or other similarly significant effects, we do not use personal data to make automated decisions in any situation where you would have a legal right to opt out.

The Colorado Privacy Act defines "personal data" to mean "any information that is linked or reasonably linkable to an identified or identifiable individual." When we use the term "personal information" in our Privacy Policy, it includes personal data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or targeted advertising under Colorado law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

If we deny your request, you may have the right to appeal our decision, which you can do so by emailing us at [email protected].

ADDITIONAL INFORMATION REGARDING TEXAS RESIDENTS' PRIVACY RIGHTS

Texas law provides Texas residents with rights to access, delete, and correct certain "personal data" we collect about them, as well as to restrict the use of that personal data for targeted advertising, restrict the "sale" of that personal data, and control our use of personal data considered sensitive. If you are a Texas resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights. While Texas residents have the right to opt out of automated profiling that would produce legal or other similarly significant effects, we do not use personal data to make automated decisions in any situation where you would have a legal right to opt out.

The Texas Data Privacy and Security Act defines "personal data" to mean "any information, including sensitive data, that is linked or reasonably linkable to an identified or identifiable individual." When we use the term "personal information" in our Privacy Policy, it includes personal data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or targeted advertising under Texas law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

If we deny your request, you may have the right to appeal our decision, which you can do so by emailing us at [email protected].

ADDITIONAL INFORMATION REGARDING VIRGINIA RESIDENTS' PRIVACY RIGHTS

Virginia law provides Virginia residents with rights to access, delete, and correct certain "personal data" we collect about them, as well as to restrict the use of that personal data for targeted advertising, restrict the "sale" of that personal data, and control our use of personal data considered sensitive. If you are a Virginia resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

The Virginia Consumer Data Protection Act defines "personal data" to mean "any information that is linked or reasonably linkable to an identified or identifiable natural person." When we use the term "personal information" in our Privacy Policy, it includes personal data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or targeted advertising under Virginia law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

If we deny your request, you may have the right to appeal our decision, which you can do so by emailing us at [email protected].

ADDITIONAL INFORMATION REGARDING MARYLAND RESIDENTS' PRIVACY RIGHTS

Maryland law provides Maryland residents with rights to access, delete, and correct certain "personal data" we collect about them, as well as to restrict the use of that personal data for targeted advertising, restrict the "sale" of that personal data, and control our use of personal data considered sensitive. If you are a Maryland resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

The Maryland Online Data Privacy Act defines "personal data" to mean "any information that is linked or can be reasonably linked to an identified or identifiable consumer." When we use the term "personal information" in our Privacy Policy, it includes personal data covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or targeted advertising under Maryland law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

If we deny your request, you may have the right to appeal our decision, which you can do so by emailing us at [email protected].

ADDITIONAL INFORMATION REGARDING TENNESSEE RESIDENTS' PRIVACY RIGHTS

Tennessee law provides Tennessee residents with rights to access, delete, and correct certain "personal information" we collect about them, as well as to restrict the use of that personal information for targeted advertising, restrict the "sale" of that personal information, and control our use of personal information considered sensitive. If you are a Tennessee resident, you also have a right not to receive discriminatory treatment for the exercise of your privacy rights.

The Tennessee Information Protection Act defines "personal information" to mean "any information that is linked or reasonably linkable to an identified or identifiable natural person." When we use the term "personal information" in our Privacy Policy, it includes personal information covered by this definition.

You or your authorized agent may submit a request to exercise your access, deletion, and correction rights via the Your Privacy Choices link at the bottom of our website or by contacting us at [email protected] or at 1-844-204-7755. For your security, we may require you to verify your identity before we can act on your request, as described in more detail in YOUR PRIVACY RIGHTS above.

To opt out of our disclosure of your personal information to third parties where the disclosure constitutes "selling" or targeted advertising under Tennessee law, you or your authorized agent may submit a request via the Your Privacy Choices link at the bottom of our website, by contacting us at [email protected] or at 1-844-204-7755, or by using a GPC signal. Please note that your right to opt out does not apply to our sharing of data with service providers, with whom we work and who are required to use the data only on our behalf.

If we deny your request, you may have the right to appeal our decision, which you can do so by emailing us at [email protected].

10. INTERNATIONAL USERS

Our Services are controlled and operated by us from the United States. Any availability of our Services from outside the United States is not intended to subject us or any of our affiliates to the laws or jurisdiction of any state, country or territory other than that of the United States. We do not represent or warrant that our Services, or any part thereof, is appropriate or available for use in any particular jurisdiction. Those who choose to access our Services do so on their own initiative and at their own risk, and are responsible for complying with all local laws, rules, and regulations. We may limit the availability of our Services, in whole or in part, to any person, geographic area or jurisdiction we choose, at any time and in our sole discretion.

11. CHANGES TO OUR PRIVACY POLICY

As UDR and our Services evolve and we perceive the need or desirability of using information collected in other ways, we may from time to time amend this Privacy Policy. We encourage you to check our website frequently to see the current Privacy Policy in effect and any changes that may have been made to them. If we make material changes to this Privacy Policy, we will post the revised Privacy Policy and the revised effective date on this website. Please check back here periodically or contact us at the address listed at the end of this Privacy Policy.

12. CONTACT US

If you have any questions about this Privacy Policy, please contact us at [email protected] or 1-844-204-7755.