Last Updated: May 1, 2026
Effective Date: May 1, 2026
GZI Stoneway LLC (“we,” “us,” or “our”) respects your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information through oristoneway.com (the “Website”), related online communications, leasing communications, and other interactions described below, and explains when certain advertising or analytics activities may be considered a “sale,” “sharing,” or “targeted advertising” under applicable privacy laws. Please review this Policy carefully. By using the Website, you acknowledge that this Policy describes how we collect, use, disclose, sell, share, retain, and protect personal information.
This Policy applies to personal information we collect through the Website, by email, by phone, by text message where applicable, in person at our leasing office, through online advertising about our property, and through other leasing-related communications. It applies to prospective residents, applicants, current residents, guests, vendors, business contacts, and other visitors to the Website.
Some Website features are operated by third-party service providers, including our online rental application, resident portal, payment portal, identity-verification flow, screening tools, chat tools, scheduling tools, call-tracking tools, analytics tools, and advertising technologies. Information you submit through those services may be collected directly by those providers under their own privacy policies and terms. Where we direct that collection, receive the resulting data, or use the data for leasing, resident-service, fraud-prevention, compliance, or property-management purposes, we remain responsible for handling that information as described in this Policy and will help you exercise your rights as required by applicable law.
This Policy is intended for users in the United States. If you access the Website from outside the United States, please see Section 18.
This Policy serves as our Notice at Collection under the California Consumer Privacy Act, as amended (“CCPA”). A link to this Policy is presented at or before each point at which we collect personal information, including contact forms, tour-request forms, interest-list signups, chat tools, call-tracking tools, cookie banners, advertising pixels, email/SMS signups, and rental-application links. At each collection point, the notice identifies, or links to disclosures identifying, the categories of personal information collected, the purposes for which they are collected or used, whether the information is sold or shared, and a link to this full Policy.
Where we collect personal information offline or over the phone, we may provide this notice orally, by signage, by email, or by directing you to this Policy before or at the time of collection. A cookie banner or cookie preference tool does not, by itself, replace a compliant Do Not Sell or Share / Opt Out of Targeted Advertising mechanism.
In the past 12 months, we have collected, or may collect, the following categories of personal information about you. Categories below are drawn from the CCPA.
As part of the online rental application, our property-management software vendor, RentCafe, and its identity-verification sub-processor may collect a scan of a government-issued photo ID and a self-portrait or “selfie” to confirm that the applicant is the person submitting the application. This process may generate a biometric identifier, such as a facial-geometry template, for the limited purpose of identity verification and fraud prevention.
We comply with the Washington Biometric Identifiers Act (RCW 19.375) with respect to any biometric identifier enrolled at our direction. Specifically:
The underlying biometric template is expected to be held by RentCafe and/or its identity-verification sub-processor, not by us. We receive only a verification result or related application status information. We will coordinate with the provider as needed to help you exercise rights available under applicable law.
Please do not submit medical, disability-related, service-animal, emotional-support-animal, or other health-related information through general Website forms unless the form is specifically designated for that purpose. If you need to request a reasonable accommodation or modification, please contact us at stoneway@oriapts.com so we can direct you to the appropriate process. Any Consumer Health Data we collect is addressed in Section 17.
By using RentCafe.com (RentCafe ILS) or any property websites powered by RentCafe (RentCafe Portal) (collectively, “RentCafe”), you acknowledge you have read and understand the latest version of the RentCafe Privacy Policy (posted at resources.yardi.com/legal/rentcafe-privacy-policy), which describes RentCafe’s privacy practices and will be updated from time to time. The property may have its own Privacy Policy that describes the property’s privacy practices.
We retain personal information only as long as reasonably necessary to fulfill the purposes described in this Policy, comply with legal, accounting, tax, fair-housing, screening, leasing, or reporting obligations, enforce our agreements, maintain security, or resolve disputes. Specific retention periods or criteria include:
When personal information is no longer needed, we securely delete, aggregate, or de-identify it, subject to backup, archival, legal hold, and system-retention constraints.
We do not sell personal information for monetary consideration. However, the use of online advertising and analytics partners on the Website, such as Meta Pixel, Google Ads, Google Analytics advertising features, or similar technologies, may qualify as a “sale” or “sharing” of personal information for cross-context behavioral advertising under the CCPA, or as “targeted advertising” under other state privacy laws.
Categories of personal information sold or shared in the preceding 12 months: Identifiers, Internet or Other Electronic Network Activity, Geolocation Data, and Inferences.
Categories of third parties to whom personal information was sold or shared: Advertising networks, analytics providers, social-media platforms, and online advertising partners.
Categories sold for monetary consideration in the preceding 12 months: None.
Categories of Sensitive Personal Information sold or shared in the preceding 12 months: None. We do not sell or share biometric identifiers, Social Security numbers, driver’s license numbers, financial-account information, or other Sensitive Personal Information for monetary or other valuable consideration, and we do not use Sensitive Personal Information for cross-context behavioral advertising or targeted advertising. This statement is intended to satisfy any sensitive-data or biometric-data notice trigger under the Texas Data Privacy and Security Act and similar state laws.
We do not knowingly sell or share the personal information of consumers under 16 years of age without legally required affirmative authorization.
We do not engage in profiling that produces legal or similarly significant effects about you.
You can opt out of sale, sharing, and targeted advertising as described in Section 9.5 and Section 12, including by clicking the “Do Not Sell or Share My Personal Information” or “Cookie Preferences” link in the Website footer. Where the Website uses advertising pixels, our opt-out tool will disable or prevent the relevant sale/sharing or targeted-advertising disclosures and will provide a way for you to confirm that your opt-out request has been processed.
Several U.S. states grant residents specific rights regarding personal information. Because CCPA/CPRA applies to this business, California residents have the rights described below. We may extend some or all of these rights to other Website visitors as a matter of practice, but the exact rights, timing, exceptions, and appeal rights depend on applicable law. Washington State law does not provide a comprehensive consumer privacy right of general application, but the Washington My Health My Data Act applies to Consumer Health Data as described in Section 17.
You can request that we disclose what personal information we have collected about you, the categories of sources, the business or commercial purposes for collecting, selling, or sharing it, the categories of third parties with whom we disclose it, and the specific pieces of personal information we have collected about you. Where required by law, we will provide the specific pieces in a portable and, to the extent technically feasible, readily usable format.
You can request that we correct inaccurate personal information we maintain about you, taking into account the nature of the information and the purposes for processing it.
You can request that we delete personal information we have collected from you, subject to legal exceptions, including exceptions for completing transactions, providing requested services, security, fraud prevention, legal compliance, fair-housing compliance, accounting, dispute resolution, or legal claims.
Where required by the CCPA, you may direct us to limit the use and disclosure of Sensitive Personal Information to purposes permitted by law, such as providing requested services, security, fraud prevention, identity verification, legal compliance, and other permitted purposes. To exercise this right, use the “Cookie Preferences” link in the Website footer or email stoneway@oriapts.com.
You can opt out of the “sale” or “sharing” of your personal information for cross-context behavioral advertising and of targeted advertising by clicking the “Do Not Sell or Share My Personal Information” or “Cookie Preferences” link in the Website footer, enabling a Global Privacy Control (GPC) signal in your browser, or emailing stoneway@oriapts.com. We honor GPC as a valid opt-out preference signal where required by law. We do not sell your personal information. We will not require you to create an account, provide unnecessary information, or complete a verified consumer request to opt out. We will comply as soon as feasibly possible and within the timeframe required by law.
Where applicable state law provides a right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, you may exercise that right by contacting us through the methods in Section 9.9. As a matter of practice, we do not use your personal information to make decisions that produce legal or similarly significant effects about you, such as fully automated tenant scoring or application denial, without human review.
We will not discriminate or retaliate against you for exercising your privacy rights. We will not deny services, charge different prices, or provide a different level of service because you exercised a privacy right, except as permitted by law.
You may designate an authorized agent to make a request on your behalf. We may require written authorization signed by you, proof of the agent’s authority, and identity verification, except where prohibited by law. For opt-out requests, we will not impose verification requirements that are not permitted by law.
To submit a request to know, access, port, correct, delete, limit SPI, opt out, or appeal, you may email stoneway@oriapts.com, use the “Cookie Preferences” form linked in the Website footer, or submit a written request to the mailing address in Section 25. We will verify your identity before responding to access, correction, deletion, or portability requests, using information you provide and information we already maintain. Verification requirements scale with the sensitivity of the request and the data involved.
We will acknowledge receipt of requests within the timeframe required by applicable law, including within ten (10) business days for CCPA requests where required. We will respond substantively within forty-five (45) days, with one forty-five-day extension if reasonably necessary. Opt-out and limitation requests will be honored as soon as feasibly possible and within the legally required timeframe. If we deny a request and applicable law provides an appeal right, you may appeal by replying to our denial or contacting us through the methods above. We will respond to appeals within the legally required timeframe. If you remain unsatisfied, you may contact your state attorney general or, for California residents, the California Privacy Protection Agency or California Attorney General.
The following summary is for convenience only. Where a state law provides different rights, exceptions, verification standards, timing, or appeal rules, that state law controls for that resident.
You can opt out of marketing emails at any time by clicking the “unsubscribe” link in any marketing email we send. You can opt out of promotional text messages, where applicable, by following the instructions in the message, such as replying STOP. We may continue to send transactional or service-related communications, such as responses to tour requests, application communications, maintenance communications, resident-service communications, or notices required by law.
The Website is intended for adults age 18 and over and is not directed to children. We do not knowingly collect personal information from children under 13 in violation of the Children’s Online Privacy Protection Act (COPPA). We do not knowingly sell or share the personal information of consumers under 16 for cross-context behavioral advertising or targeted advertising without legally required affirmative authorization, including opt-in for ages 13 to 15 and parental opt-in for children under 13 where applicable. If you believe a child under 13 has provided us with personal information, please contact us at stoneway@oriapts.com so we can delete it.
Like most websites, we use cookies, pixels, web beacons, embedded scripts, and similar tracking technologies to operate the Website, analyze usage, secure the Website, and deliver or measure advertising.
We work with online advertising partners, including Google and Meta, that may use cookies and pixels on the Website to show advertisements about our property to you on other websites and platforms. These partners may combine information collected on our Website with information collected on other websites to build or use profiles for advertising purposes. This may constitute sale, sharing, or targeted advertising under applicable privacy laws.
You can opt out of sale, sharing, and targeted advertising through the methods in Section 9.5. Industry opt-out tools may also help reduce interest-based advertising from participating companies, but they do not replace our legal opt-out process.
We use Google Analytics and similar tools to help measure Website performance. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on at tools.google.com/dlpage/gaoptout.
You can control cookies through the “Cookie Preferences” link in the Website footer, where available, and through your browser settings. Disabling certain cookies may affect Website functionality. Our cookie controls are configured so that non-essential advertising cookies and pixels are disabled when a legally valid opt-out has been submitted. A cookie banner or cookie preference tool alone does not, by itself, satisfy our obligations regarding sale, sharing, or targeted advertising; it operates alongside the dedicated opt-out mechanisms described in Section 9.5.
We treat the Global Privacy Control (GPC) browser signal, and any other universal opt-out preference signal recognized under applicable state law (including any signal designated by the Colorado Attorney General or other state regulator), as a valid opt-out request from sale, sharing, and targeted advertising where required by law. Where technically feasible, we will display or otherwise provide a way for you to confirm that your opt-out preference signal has been processed.
We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
In the event of a breach of personal information requiring notification, we will notify affected individuals and regulators as required by applicable law, including Washington’s data-breach notification law and California Civil Code § 1798.82, where applicable. For Washington residents, notification generally must be made in the most expedient time possible and without unreasonable delay, and no later than the timeframe required by RCW 19.255.010, subject to lawful exceptions such as law-enforcement delay.
If calls to or from our leasing office are recorded, we will provide notice and obtain consent as required by applicable law. Washington generally requires consent of all parties before recording private communications. If you do not wish to be recorded, you may discontinue the call and contact us through another available method, such as email or written correspondence.
If you interact with us on social media platforms such as Facebook, Instagram, X, TikTok, or similar platforms, we may receive information about you in accordance with the platform’s privacy policy and your privacy settings. Please review each platform’s privacy policy for details on how it processes your information. We are not responsible for the privacy practices of those platforms.
Because there is currently no industry consensus on how to interpret browser “Do Not Track” signals, the Website does not respond to Do Not Track signals. We do, however, honor Global Privacy Control signals as described in Section 12.5.
This Section is our Consumer Health Data Privacy Policy under the Washington My Health My Data Act, RCW 19.373 (“MHMDA”), to the extent the Act applies to Consumer Health Data we collect. This Section is linked separately from the homepage and from any accommodation-related collection point as required by applicable law.
Consumer Health Data means personal information that is linked or reasonably linkable to a consumer and that identifies the consumer’s past, present, or future physical or mental health status. Although we do not operate a health-related service, we may collect Consumer Health Data if you voluntarily provide disability-related, health-related, service-animal, emotional-support-animal, or reasonable-accommodation information in connection with your inquiry, application, tenancy, or accommodation/modification request. Consumer Health Data does not include information regulated as protected health information under the Health Insurance Portability and Accountability Act of 1996 (HIPAA), and GZI Stoneway LLC is not a HIPAA-covered entity or business associate. Information governed by HIPAA, the Fair Credit Reporting Act, the Gramm-Leach-Bliley Act, or other federal laws referenced in RCW 19.373.020(8) is excluded from MHMDA to the extent provided by those exemptions.
We collect Consumer Health Data directly from you, by email, phone, designated form, contact form, text message where applicable, mail, or in person at the leasing office. We may also receive Consumer Health Data from your authorized representative or professional advisor if you direct them to provide it to us.
We collect and use Consumer Health Data only to evaluate, respond to, implement, and document accommodation or reasonable-modification requests; comply with fair-housing and related legal obligations; communicate with you or your authorized representative; maintain appropriate records; and establish, exercise, or defend legal claims. We do not use Consumer Health Data for marketing, advertising, retargeting, profiling, or unrelated secondary purposes.
Categories of Consumer Health Data we may share: disability- and health-related information you voluntarily provide in support of an accommodation or modification request, and information regarding service-animal or assistance-animal needs. Categories of third parties to whom we may share Consumer Health Data: (i) personnel and service providers of GZI Stoneway LLC and its property manager who need it for the purposes in Section 17.4; (ii) professional advisors such as legal or fair-housing advisors; (iii) property owners or managers with a need to know; and (iv) government authorities where required by law. We do not sell Consumer Health Data and we do not share Consumer Health Data with advertising or analytics partners. We will obtain separate, valid authorization before sharing Consumer Health Data in any manner that requires authorization under MHMDA.
Where MHMDA requires consent to collect or share Consumer Health Data, we will obtain consent in a manner required by law. If you voluntarily submit health-related or disability-related information to request an accommodation or modification, we will process that information only for the limited purposes described above and as permitted by applicable law. You may withdraw consent where applicable by emailing stoneway@oriapts.com, but withdrawal will not affect processing already completed and may affect our ability to evaluate, document, or continue an accommodation or modification request.
To exercise these rights, email stoneway@oriapts.com or call +1 206-710-6502.
We do not implement, and do not direct any advertising partner to implement, a geofence within 2,000 feet of an in-person healthcare facility for the purpose of identifying or tracking consumers seeking healthcare services, collecting Consumer Health Data, or sending health-related advertising or notifications prohibited by RCW 19.373.090.
Consumer Health Data is access-restricted to personnel and service providers with a need to know and is stored separately from marketing data where reasonably feasible. We retain Consumer Health Data only as long as necessary to evaluate, implement, and document the request; comply with fair-housing and related legal obligations; and establish, exercise, or defend legal claims, unless a longer period is required by law.
The Website is operated in the United States and is intended for users located in the United States. We do not represent that the Website is appropriate or available for use in any other jurisdiction. If you access the Website from outside the United States, your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your jurisdiction.
We comply with the federal Fair Housing Act, the Washington State Law Against Discrimination (RCW 49.60), and other applicable fair-housing laws. We do not use information collected through the Website to discriminate against any person on the basis of race, color, national origin, religion, sex (including gender identity and sexual orientation), familial status, disability, marital status, veteran or military status, source of income, or any other class protected by law. We do not intentionally use advertising tools to exclude or target individuals based on protected characteristics, and we seek to configure housing-related advertising in accordance with applicable fair-housing requirements.
California residents may request, once per calendar year, information about our disclosure of certain categories of personal information to third parties for those third parties’ direct marketing purposes during the preceding calendar year, to the extent California Civil Code § 1798.83 applies. We do not currently disclose personal information to third parties for their own direct marketing purposes. To make a Shine the Light request, email stoneway@oriapts.com with the subject line “California Shine the Light Request.” We will respond within the timeframe required by law.
We do not currently offer a financial incentive or price/service difference in exchange for the collection, retention, sale, or sharing of personal information. If we later offer a leasing promotion, referral program, giveaway, concession, loyalty benefit, or other program that qualifies as a financial incentive or price/service difference under the CCPA, we will provide a separate notice of financial incentive and obtain opt-in consent where required before you participate.
We seek to require service providers, contractors, and processors that handle personal information on our behalf to use the information only for specified business purposes, protect the information with reasonable safeguards, assist with legally required privacy requests, and comply with applicable restrictions on sale, sharing, retention, and secondary use.
This Policy is available in a format reasonably accessible to individuals with disabilities, and we will provide alternative formats on request. If you need this Policy in an alternative format, please contact us at stoneway@oriapts.com.
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this Policy and, where appropriate or required, provide additional notice, such as a banner on the Website, email notice, or renewed consent for material changes affecting Consumer Health Data or other sensitive data. Material changes will take effect when posted unless otherwise required by law. Your continued use of the Website after the changes take effect constitutes acceptance of the updated Policy.
GZI Stoneway LLC
Attn: Privacy Request
4453 Stone Way N, Seattle WA 98103
Email: stoneway@oriapts.com
Phone: 206-710-6502
For privacy-specific inquiries, please use the subject line “Privacy Request” or one of the specific request titles above. Please do not submit Social Security numbers, government ID numbers, financial-account information, medical information, disability-related information, or other sensitive information through general Website contact forms. If you need to submit sensitive information as part of an application, identity verification, resident account, or reasonable-accommodation request, please use the designated process provided by us or our authorized service provider.