Effective: August 17, 2026
Bay Property Management Group (“BMG,” “we,” “us,” or “our”) is a residential property management company headquartered at 1114 Saint Paul Street, Suite 1A, Baltimore, Maryland 21202. We manage rental and community-association properties in Maryland, Pennsylvania, Virginia, and Washington, D.C.
This Privacy Policy explains what personal data we collect through www.baymgmtgroup.com (the “Site”), why we collect it, who we share it with, how long we keep it, and the choices and rights you have.
This policy covers the Site only. Separate notices may govern:
If you are a rental applicant, resident, or property owner under contract with us, additional notices and disclosures apply to that relationship.
We do not operate a mobile application.
We may update this policy. When we make material changes, we will update the “Last updated” date and post the revised policy here. If a change materially affects how we use personal data we have already collected, we will provide notice and, where the law requires it, obtain your consent before applying the change to that data.
Identifiers and contact data
Name, email address, telephone number, mailing address, and the address of a property you own or are inquiring about.
Inquiry data
Your role (property owner, prospective resident, current client, current resident, HOA board member), the state and county of the property, and any comments you submit through our contact or vendor forms.
Marketing preferences
Whether you have consented to receive marketing email or SMS from us.
Vendor and applicant data
If you apply as a maintenance vendor or job applicant, the business, licensing, insurance, or employment information you submit.
Device and usage data
IP address, browser type and version, operating system, device type, referring URL, pages viewed, time on page, and interactions with the Site. This is collected automatically through cookies and similar technologies (Section 6).
Inferred data
Audience or interest segments that advertising and analytics services may associate with your device.
We do not knowingly collect sensitive data through this Site. “Sensitive data” under Maryland law includes data revealing racial or ethnic origin, religious beliefs, consumer health data, sex life or sexual orientation, status as transgender or nonbinary, national origin, immigration status, genetic or biometric data, precise geolocation (within a 1,750-foot radius), and the personal data of a consumer known to be under 18. Please do not submit information of this kind through our web forms.
We do not sell sensitive data under any circumstances. Maryland law prohibits this outright, and consent does not create an exception.
We limit our collection of personal data to what is reasonably necessary and proportionate to provide the specific service you have requested, as Maryland law requires. We do not collect data “just in case,” and we do not repurpose data for unrelated uses without your consent.
| Purpose | Data used |
|---|---|
| Respond to your inquiry and provide a property analysis or rental information | Identifiers, inquiry data |
| Process vendor and job applications | Vendor and applicant data |
| Send marketing email or SMS you have asked to receive | Identifiers, marketing preferences |
| Operate, secure, and troubleshoot the Site; prevent fraud and abuse | Device and usage data |
| Measure how the Site performs and improve it | Device and usage data |
| Advertise our services to people who have visited the Site | Device and usage data, inferred data |
| Meet legal, regulatory, tax, fair housing, and recordkeeping obligations | As required |
| Category | What it does | Consent required |
|---|---|---|
| Strictly necessary | Page caching and delivery, form submission, spam and bot prevention, load balancing. | No |
| Functional | Remembers preferences; enables embedded content such as video players and review widgets. | Yes |
| Analytics | Measures traffic, page performance, and how visitors move through the Site. | Yes |
| Advertising | Builds audiences and measures ad performance so we can show our services to people who have visited the Site. | Yes |
Technologies currently deployed on the Site:
| Technology | Provider | Category | Purpose |
|---|---|---|---|
| Google Tag Manager | Container | Loads and manages the tags below | |
| Page cache (WP Rocket) | Site infrastructure | Strictly necessary | Page delivery and performance |
| Form spam and bot prevention | reCAPTCHA | Strictly necessary | Prevents automated form abuse |
| Review widget | Trustindex | Functional | Displays customer reviews |
| Embedded video | YouTube / Google | Functional | Plays embedded video |
| Google Analytics 4 | Analytics | Measures Site traffic and conversions | |
| Microsoft Clarity | Microsoft | Analytics | Session recording, heatmaps, behavior analytics |
| Call Rail | Call Rail | Analytics | Dynamic phone-number insertion for call-source attribution |
| LinkedIn Insight Tag | Advertising | Builds LinkedIn audiences, measures ad performance | |
| Meta Pixel | Meta | Advertising | Builds Meta/Facebook audiences, measures ad performance |
Advertising and analytics technologies on the Site may transmit device identifiers and browsing activity to third parties who use that information for their own advertising purposes. Under Maryland, Virginia, and several other state privacy laws, this may qualify as a “sale” of personal data and as “targeted advertising”, even though no money changes hands.
You can opt out. See Section 9.
We never sell or share for targeted advertising:
| Category of recipient | Why |
|---|---|
| Website hosting, security, and caching providers | Operate and protect the Site |
| Analytics providers | Measure Site performance |
| Advertising and social media platforms | Advertise our services |
| Email and SMS marketing platforms | Send communications you requested |
| Property management software and portal providers | Manage properties and accounts |
| Tenant screening and background check providers | Evaluate rental applications |
| Professional advisors (legal, accounting, insurance) | Obtain professional services |
| Government agencies, courts, and law enforcement | Comply with law or legal process |
| An acquirer, in a merger, sale, or reorganization | Business transfer |
Service providers act on our documented instructions under written contracts and may not use your data for their own purposes.
We do not share your personal data with unaffiliated companies for their own independent marketing.
If you are a resident of Maryland, Virginia, or another state with a comprehensive privacy law, you have the right to:
You will never be discriminated against, denied service, or charged a different price for exercising these rights.
How to make a request:
We respond within 45 days. We may extend once by an additional 45 days where reasonably necessary, and we will tell you if we do. We may need to verify your identity before acting; if we cannot verify you, we will tell you why. You may use an authorized agent, with proof of authorization.
Universal opt-out signals: We honor the Global Privacy Control (GPC) and other recognized universal opt-out mechanisms. If your browser or extension sends a GPC signal, we treat it as a request to opt out of the sale of your personal data and of targeted advertising automatically.
The Site is intended for adults and is not directed to children. We do not knowingly collect personal data from anyone under 18 through the Site.
Where we know or should know that a person is under 18, we will not sell their personal data or process it for targeted advertising, and we will not collect or process it beyond what is strictly necessary to provide the service requested.
If you believe a minor has provided us with personal data, contact us at privacy@baymgmtgroup.com and we will delete it.
We keep personal data only as long as reasonably necessary for the purpose it was collected, or as long as law requires.
| Data | Retention |
|---|---|
| Website inquiries that do not become a client relationship | 24 months after the last interaction, unless a longer period is required for legal, regulatory, dispute, or recordkeeping purposes |
| Marketing contact data | Until you unsubscribe, then a suppression record |
| Analytics and advertising data | Per the retention setting configured with each provider |
| Client, owner, and resident records | As required by lease, management agreement, and applicable state record retention and fair housing law |
| Vendor and job applicant data | 12 months for unsuccessful applicants, unless a longer period is required |
We use administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, disclosure, alteration, and destruction. These include access controls, encryption in transit, vendor security review, and staff training.
No system is perfectly secure. If a breach affecting your personal information occurs, we will notify you as required by the Maryland Personal Information Protection Act and any other applicable state breach notification law.
You can opt out of marketing email using the unsubscribe link in any message, or by contacting us. For SMS, reply STOP to any message. Message and data rates may apply.
We will still send you transactional and service messages related to your account, property, lease, or management agreement.
The Site links to third-party websites, including our resident and owner portals, listing services, and social media pages. We do not control those sites, and this policy does not apply to them. Review their privacy notices before providing information.
Maryland
This policy is written to meet the requirements of the Maryland Online Data Privacy Act. Maryland residents have the rights described in Section 9, including the appeal process and the right to file a complaint with the Maryland Attorney General.
Virginia
Virginia residents have the rights described in Section 9 under the Virginia Consumer Data Protection Act, including the right to appeal.
Pennsylvania and Washington, D.C.
Neither jurisdiction currently has a comprehensive consumer privacy statute. We extend the rights in Section 9 to residents of both.
California
If you are a California resident, contact us at privacy@baymgmtgroup.com for information about our practices under California law, including your rights under the CCPA and the “Shine the Light” law.
Texas
Texas residents have the rights described in Section 9 under the Texas Data Privacy and Security Act. We will obtain consent before processing sensitive data where Texas law requires it. If we deny a Texas privacy request, you may appeal using the process in Section 9. If we deny your appeal, you may submit a complaint to the Texas Attorney General.
1114 Saint Paul Street, Suite 1A
Baltimore, MD 21202