Privacy Policy

Business name: Leggacy Inc Website: leggacy-inc.com Privacy contact: gemma@leggacy-inc.com Last updated: 16 December 2025 This Privacy Policy explains how Leggacy Inc (“we”, “us”, “our”) collects, uses, and protects your personal data when you use our website or contact us. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who is responsible for your personal data?

Leggacy Inc is the “data controller” for the personal data described in this policy. If you have any questions or want to exercise your rights, contact us at: gemma@leggacy-inc.com .

What personal data we collect

When you use our contact forms, we collect: Name Email address Phone number Any information you choose to include in your message We also collect certain technical data when you browse our website (via cookies and similar tools), which may include: IP address (or a partial/anonymised version, depending on settings) Device and browser information Pages visited and actions taken on the site Identifiers associated with cookies/pixels

How we collect personal data

We collect personal data: Directly from you when you submit information through our contact forms Automatically through cookies and similar tracking technologies, including Google Analytics and the Meta Pixel

Why we use your personal data

We use your personal data to: Respond to enquiries Provide pricing estimates Provide customer support and handle requests Send marketing emails (only where permitted—see “Marketing” below)

Our legal bases for using your personal data

Under UK GDPR, we rely on the following legal bases (depending on the context): Legitimate interests: to respond to enquiries, provide estimates, and manage our communications with you (where those interests are not overridden by your rights). Consent: for non-essential cookies/tracking (e.g., analytics/advertising cookies) and for marketing emails where you have opted in. You can withdraw consent at any time. Contract (where applicable): if your request is in preparation for providing services to you (for example, where you ask for a quote/estimate that may lead to a service arrangement).

Marketing

We may send marketing emails about our services only when we are allowed to do so under UK law (UK GDPR and PECR). In practice: We will send marketing emails where you have opted in (for example, via a clear consent checkbox or subscription option). You can opt out at any time by using the unsubscribe link (if provided) or by emailing gemma@leggacy-inc.com .

Cookies and tracking

We use cookies and similar technologies, including: Google Analytics (analytics and performance measurement) Meta Pixel (advertising measurement and audience insights) These tools may collect information about your device and how you use our website and may set or read cookies/identifiers in your browser. Where required, we will ask for your consent before placing non-essential cookies/pixels. You can manage cookies through: Any cookie banner or preference tool on our website (if available), and/or Your browser settings (you can block or delete cookies) Blocking some cookies may affect how the site functions.

Who we share personal data with

We do not sell your personal data. We may share limited technical/usage data collected via cookies/pixels with: Google (Google Analytics) Meta (Meta Pixel) Aside from the above, we do not share the personal data you submit via our contact forms with third parties unless it’s necessary to operate the website or comply with the law (for example, if we must respond to a lawful request).

International transfers

Some providers (such as Google and Meta) may process data outside the UK. Where personal data is transferred internationally, we take steps to ensure appropriate safeguards are in place (for example, adequacy regulations or approved contractual protections such as the UK International Data Transfer Agreement and/or UK Addendum to EU Standard Contractual Clauses, as appropriate).

How long we keep your personal data

We keep personal data only as long as deemed necessary to respond to enquiries or fulfil requests, unless a longer retention period is required or permitted by law.

How we protect your personal data

We use appropriate technical and organisational measures designed to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. However, no website or internet transmission is completely secure.

Your UK GDPR rights

You have rights over your personal data, including the right to: Access your personal data Correct inaccurate data Request deletion of your data (in certain situations) Restrict or object to our processing (in certain situations) Withdraw consent at any time (where we rely on consent) Data portability (in certain situations) To exercise any of these rights, contact gemma@leggacy-inc.com . You also have the right to complain to the UK regulator, the Information Commissioner’s Office (ICO).

Children’s privacy

Our website is not intended for children, and we do not knowingly collect personal data from children.

Changes to this policy

We may update this policy from time to time. We will post the latest version on this page and update the “Last updated” date above.