Generally, we collect your personal information on a voluntary basis. However, if you decline to provide certain personal information that is marked mandatory, you may not be able to access certain Services or we may be unable to fully respond to your inquiry. We may collect personal information directly from individuals, automatically related to the use of the Services, and in some cases, from third parties (such as social networks, platform providers, payment processors, data providers, and operators of certain third- party services that we use). In some cases (such as where required by law), we ask for your consent or give you certain choices prior to collecting or using certain personal information. Information we collect directly. We collect information that you provide to us, such as: When you create an account, provide contact information, or send other personal information to us. When you complete or submit a form through our Services, for example, “Contact Us” or “More Information” forms. When you participate in surveys or contests, submit orders or requests, or register for or use our Services, or otherwise contact us. Information you submit or provide such as real estate searches and preferences, whether you plan on buying or selling real estate, home search criteria, information about financing for the purchase of real estate, and other information related to the purchase or sale of real estate. Information we collect from third parties. We may collect or receive personal information about you and your property from third party sources, such as public databases, joint marketing partners, social media platforms (including from people with whom you are friends or otherwise connected), brokers and affiliated agents, and other real estate professionals, and third parties. For example: Social media. If you choose to link, create, or log in to your Services account with a social media service (e.g., Twitter, Facebook, Instagram, etc.), or if you engage with a separate app or website that communicates with the Services, we may receive personal information about you or your connections from that service. In many cases you can control what personal information you share with us through privacy settings available on those third-party social media services. Real estate professionals. If you interact or list a property with a broker, independent agent, or other real estate professional associated with an Anywhere brand, we may receive personal information about you and your property from them, such as your name and property address, listing and contact information, among other things. These real estate professionals may be affiliated with independently owned and operated brokerages, or with an Anywhere company. Property records. We may collect information about individuals and real estate property through public databases, such as property ownership and tax records maintained by state, local and county agencies.

Certain laws, including the EU General Data Protection Regulation (“GDPR”), UK and Brazil data protection law, and similar laws require that we inform applicable individuals of the legal basis for our use and other processing of their personal information. In this section, we described the purposes for which will collect, use, disclose and otherwise process personal information, as well as the legal bases for such processing, generally, under such privacy laws. Legal bases under certain privacy laws. Pursuant to the GDPR, UK and Brazil data protection law, and similar laws we collect, use and otherwise process personal information for the following legal bases: Performance of contract: as necessary to enter into or carry out the performance of our contract with you. Compliance with laws: for compliance with legal obligations and/or defense against legal claims, including those in the area of labor and employment law, social security, data protection, tax, and corporate compliance laws. Our legitimate interests: in furtherance of our legitimate business interests including, for example: Performance of contracts with franchisees and other parties Implementation and operation of global support (e.g., IT) services for our business operations Customer relationship management and improving our Services, including marketing and analytics Marketing and advertising Fraud prevention, including misuse of company IT systems or money laundering Physical, IT, and network perimeter security Internal investigations Mergers, acquisitions, and reorganization, and other business transactions With your consent: in some cases, we rely on your consent to collect and process your personal information. (See Section 17A below for information about withdrawing your consent.) In addition, we may process your personal information where necessary to protect the vital interests of any individual. Purposes of processing. While the purposes for which we may process personal information will vary depending upon the circumstances, in general we collect, use, disclose and otherwise process personal information for the purposes set forth below, as well as the legal basis for such processing, as applicable under relevant laws (see above for further explanation of these legal bases): Providing support and services: including, for example, to send or facilitate communications among you, independent real estate professionals and our affiliated entities, and other users of the Services, provide products and services you request (and send related information), operate our Services; to communicate with you about your access to and use of our Services; to respond to your inquiries; to provide troubleshooting, fulfill your requests and provide technical support; and for other customer service and support purposes. (Legal basis: performance of our contract with you; and our legitimate interests) Analyzing and improving our business: including to better understand how users access and use our Services, to evaluate and improve our Services and business operations, and to develop new features, offerings, and services; to conduct surveys, and other evaluations, such as customer satisfaction surveys; and for other research and analytical purposes. (Legal basis: our legitimate interests) Personalizing content and experiences: including to provide or recommend features, content, social connections, and referrals; tailor content we send or display on our Services; to offer location customization and personalized help and instructions; and to otherwise personalize your experiences. (Legal basis: our legitimate interests and/or with your consent) Advertising, marketing and promotional purposes: including to reach you with more relevant ads and to evaluate, measure, and improve the effectiveness of our ad campaigns; to send you newsletters, offers, or other information we think may interest you; to contact you about our Services or information we think may interest you; and to administer promotions and contests. (Legal basis: our legitimate interests and/or with your consent) Securing and protecting our business: including to protect and secure our business operations, assets, Services, network and information and technology resources; to investigate, prevent, detect and take action regarding fraud, unauthorized access, situations involving potential threats to the rights or safety of any person or third party, or other unauthorized activities or misconduct. (Legal basis: our legitimate interests and/or compliance with laws) Defending our legal rights: including to manage and respond to actual and potential legal disputes and claims, and to otherwise establish, defend or protect our rights or interests, including in the context of anticipated or actual litigation with third parties. (Legal basis: our legitimate interests and/or compliance with laws) Planning and facilitating business transactions: related to any actual or contemplated merger, acquisition, asset sale or transfer, financing, bankruptcy or restructuring of all or part of our business. (Legal basis: our legitimate interests and/or compliance with laws) Auditing, reporting, corporate governance, and internal operations: including relating to financial, tax and accounting audits; audits and assessments of our operations, privacy, security and financial controls, risk, and compliance with legal obligations; and our general business, accounting, record keeping and legal functions. (Legal basis: our legitimate interests and/or compliance with laws) Complying with legal obligations: including to comply with the law, our legal obligations and legal process, such warrants, subpoenas, court orders, and regulatory or law enforcement requests. (Legal basis: our legitimate interests and/or compliance with laws)

We may disclose the personal information we collect to third parties, as reasonably necessary for the purposes described above and as otherwise directed or consented to by you, including: Service providers: to third-party service providers who use this information to perform services for us, such as hosting providers, auditors, advisors, consultants, and customer service and support providers. Subsidiaries and affiliates: to our subsidiary and affiliated companies (i.e., companies under common ownership, control or management with us), such as Anywhere Real Estate Inc., Guaranteed Rate Affinity, Anywhere Integrated Services, Anywhere Advisors, Realogy Insurance Agency, and Anywhere Leads Inc., who may process your personal information in accordance with the principles of this Privacy Policy, including to share relevant news, information and offers with you. Where required by applicable law, we will obtain your consent to such sharing. Third parties: to third parties in order to provide our Services, respond to or carry out your requests, and/or with your consent, including to: Independent real estate professionals and owners and operators of real estate brokerage companies to enable them to provide services you request through the Services. Third parties to provide you a service you requested through a partnership or promotional offering made by a third party or us. The public if you submit to a public part of the Services, such as comments, social media posts, or other features viewable by the public or generally by registered users of the Services. Third parties with whom you choose to let us share information, for example other apps or websites that integrate with the Services, or those with Services with which we integrate. Third parties we work with to provide you with more personalized content and ads, and to track the effectiveness of campaigns. Business transfers: as part of any actual or contemplated merger, sale, and transfer of our assets, acquisition, financing or restructuring of all or part of our business, bankruptcy or similar event; and prior to the completion of such a transfer, where necessary for due diligence or to plan for the transfer, such as to lenders, auditors, and third-party advisors, such attorneys and consultants, where permitted by law. Legally required: where we are required to do so by law or legal process (e.g., to law enforcement, courts or others, or in response to a subpoena or court order). Protect our rights: where we believe it necessary to respond to claims asserted against us or, comply with legal process (e.g., subpoenas or warrants), enforce or administer our agreements and terms, for fraud prevention, risk assessment, investigation, and to protect the rights, property, or safety of us, our clients and customers or others. including personal information, related to litigation and other legal claims or proceedings in which we are involved, as well as for our internal accounting, auditing, compliance, recordkeeping, and legal functions. 5. Aggregate and Non-identifiable Data We may also use and disclose aggregate, anonymous, and other non-identifiable data related to our business and the Services for quality control, analytics, research, development and other purposes. Where we use, disclose or process de-identified data (data that is no longer reasonably linked or linkable to an identified or identifiable natural person, household, or personal or household device) we will maintain and use the information in deidentified form and not to attempt to reidentify the information, except as permitted by applicable privacy laws (such as to confirm whether our deidentification processes are reasonable and adequate).

Our Services may use first party and third-party cookies, pixel tags, plugins, and other tools to gather device, usage and browsing information when users visit our Services. For instance, when you visit our Services, our server may record your IP address (and associated location information) and other information such as the type of your internet browser, your Media Access Control (MAC) address, computer type (Windows or Macintosh), screen resolution, operating system name and version, device manufacturer and model, language, and the pages you view and links you select on the Services, as well as date and time stamps associated with your usage of and activities on our Services. We use the information for security purposes, to facilitate navigation, to improve, analyze and optimize our Services and their functionality, to personalize and improve your experience while using the Services, to improve and measure our advertising campaigns, and to better reach users with relevant advertising both on our Services and on third party websites. Click “Cookie Preferences” link in the footer of our Website for more information about cookies on that Website, and to review and update your preferences for most types of cookies (other than those that are necessary to the functionality of that Website). Cookies. Cookies are small text files that a website transfers to your hard drive to store and sometimes collect information about your usage of websites, such as time spent on the websites, pages visited, language preferences, and other anonymous traffic data. You can control the way in which cookies are used by altering your browser settings. You may refuse to accept cookies by activating the setting on your browser that allows you to reject cookies. However, if you select such a setting, this may affect the functioning of our Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you access or log on to our Service. If you have disabled one or more cookies, we may still use information collected from cookies before your disabled preference was set. However, we will stop using the disabled cookie to collect any further information. Pixel tags and other similar technologies. Pixel tags (also known as web beacons and clear GIFs) may be used in connection with some Websites to, among other things, track the actions of users of the Websites (including email recipients), measure the success of our marketing campaigns and compile statistics about usage of the Websites and response rates. We and our service providers may also use pixel tags in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, track whether our emails are forwarded, and conduct analytics. Log files. Most browsers collect certain information, such as your IP address, device type, screen resolution, operating system version and internet browser type and version. This information is gathered automatically and stored in log files. Third party analytics tools. Our Websites use automated devices and applications operated by third parties, such as Google Analytics, which uses cookies and similar technologies to collect and analyze information about use of the Websites and report on activities and trends. This service may also collect information regarding the use of other websites, apps and online resources. You can learn about Google’s practices and opt-out of collection of your browsing data by Google Analytics at https://tools.google.com/dlpage/gaoptout. Browser signals. Please note that our Websites do not recognize or respond to browser “do-not-track” requests or other browser privacy signals. However, you can review and update your cookie preferences on our Websites as discussed above.

We share your personal data with your consent or as necessary to complete any transaction or provide any service you have requested or authorized. For example, we share your content with third parties when you tell us to do so. When you provide payment data to make a purchase, we will share payment data with banks and other entities that process payment transactions or provide other financial services, and for fraud prevention and credit risk reduction. In addition, we share personal data among our controlled affiliates and subsidiaries. We also share personal data with vendors or agents working on our behalf for the purposes described in this statement. For example, companies we've hired to provide customer service support or assist in protecting and securing our systems and services may need access to personal data in order to provide those functions. In such cases, these companies must abide by our data privacy and security requirements and are not allowed to use personal data they receive from us for any other purpose. We may also disclose personal data as part of a corporate transaction such as a merger or sale of assets.