Regulatory Compliance

Privacy Governance

Comprehensive data protection policies ensuring transparency, accountability, and regulatory compliance across all operations.

GDPR Compliant CCPA Compliant FTC Guidelines COPPA Compliant

Data Collection Practices

We collect only the information necessary to provide our services and fulfill our mission. Our data collection practices are designed with transparency and user consent at their core.

Personal Information

  • Name and contact details
  • Billing and payment information
  • Communication preferences
  • Account credentials

Technical Data

  • Device and browser information
  • IP address and location data
  • Usage patterns and analytics
  • Cookies and tracking data

Cookie Policy

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. You have full control over your cookie preferences.

Essential Cookies

Required for site functionality and security

Always Active

Analytics Cookies

Help us understand how visitors interact with our site

Optional

Marketing Cookies

Used to deliver relevant advertisements

Optional

You can manage your cookie preferences at any time through our cookie consent banner or browser settings.

Your Rights Under FTC & CCPA

As a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA) and FTC guidelines.

Right to Know

Request disclosure of personal information collected, used, shared, or sold about you.

Right to Delete

Request deletion of personal information collected from you, subject to certain exceptions.

Right to Opt-Out

Opt out of the sale of your personal information to third parties.

Right to Correct

Request correction of inaccurate personal information held about you.

Right to Non-Discrimination

Not be discriminated against for exercising your privacy rights.

Limited Use

Right to limit use of sensitive personal information to that which is necessary.

Data Usage & Third-Party Sharing

How We Use Your Data

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze usage patterns and trends

Third-Party Disclosures

We may share your information with the following categories of third parties:

Service Providers

Hosting, analytics, payment processing

Financial Institutions

For payment processing only

Legal Requirements

When required by law or to protect rights

Business Transfers

In case of merger or acquisition

Important: We do not sell personal information to third parties for monetary consideration. We may share certain data with advertising partners in ways that constitute a "sale" under CCPA, and you have the right to opt out.

Data Retention & Security

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Account Data Duration of membership + 3 years
Transaction Records 7 years (financial requirement)
Communications 2 years
Analytics Data 26 months maximum

Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction.

256-bit AES Encryption
TLS/SSL Transport
Regular Security Audits
Access Controls
Firewall Protection
Intrusion Detection
Secure Data Centers
Employee Training

Breach Notification: In the event of a data breach that affects your personal information, we will notify you within 72 hours as required by applicable law.

Privacy Inquiries

Exercise Your Privacy Rights

To submit requests or ask questions about our privacy practices, contact our dedicated privacy team.

Email

[email protected]

Response within 45 days

Phone

1-800-LEGACY-1

Mon-Fri, 9am-5pm EST

Mail

Privacy Department
The Legacy Chamber
123 Constitution Ave NW
Washington, DC 20001

For California residents: You may designate an authorized agent to submit requests on your behalf. We will verify both your identity and the agent's authorization.

Policy Updates & Effective Date

This Privacy Governance Policy was last updated on March 23, 2026. We may update this policy periodically to reflect changes in our practices, technology, or legal requirements.

Update Policy:

  • • We will notify users of material changes via email or prominent notice on our website
  • • Changes will be effective immediately upon posting unless otherwise stated
  • • Your continued use of our services after changes constitutes acceptance
  • • Previous versions available upon request