Introduction

At Legendary Requirements, your privacy is our foundation. We believe trust is earned through responsible data practices. This Privacy Policy explains how Legendary Requirements (“we,” “us,” or “our”) collects, uses, retains, and discloses your personal information when you use our website or other services (collectively, the “Services”). This policy does not apply to information collected by third parties. If any term in this policy is unacceptable to you, please do not provide Legendary Requirements with any personal information. This policy may change from time to time (see Revisions to Our Privacy Policy).

Information We Collect About You

We collect various types of information from and about individuals, which may include information defined as personal data or personal information under applicable law. Some of that information is collected directly from you, and some is provided by third parties.

1. Categories of Personal Data We Collect

We collect the following categories of personal information:

• Identifiers (name, email address, postal address, account login credentials, unique device identifier)
• Personal information (name, signature, address, telephone number, passport number, driver’s license or state identification card number, education history and credentials, employment, employment history)
• Commercial Information (information about products or services purchased, obtained, or considered, purchasing or consuming histories or tendencies)
• Internet or electronic network activity (browsing history, IP address, search history; data regarding use and interaction with the website, hardware and software information, log information, mobile network information, browser type, internet connection data, referral website data, chat messages or emails sent to us)
• Geolocation Information (general geolocation data)
• Professional or employment-related information (work history)
• Educational information (educational history and/or credentials)
• Sensitive personal information (driver’s license or state ID information)
• Inferences drawn from other personal information (inferences about your interests, preferences, and characteristics)

2. Sources of Personal Information

• We collect personal information from a variety of sources, including:

• Directly from you when you use our Services, such as when you:

• Create an account and provide your name, username, email address, postal address

• Make a purchase/engage our service and provide your payment information

• Contact us via email, web form, or through chat/messaging features and we collect contact information and message content necessary to provide customer support

• Indirectly from you or through third-party service providers, affiliates, and or partners, such as when:

• We collect banking information from your financial institution with your consent

• We collect your IP address, device identifiers, browser information, hardware and software information, referrer information, log data, general location data, and website behavior when you interact with our website.

Third-Party Services

We use High Level, a third-party marketing and sales platform, and Google Ads, a third-party advertising service, to display targeted advertisements and measure their effectiveness. These services may collect information about your device, IP address, internet browsing behavior, and interactions with our ads and our website. This data, collected via cookies and similar technologies, helps us to identify our customers and deliver relevant advertising as well as understand user engagement with our website and advertising campaigns.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies (including necessary, functional, analytics, and marketing cookies) to enhance your experience, analyze usage, and deliver personalized content. Cookies are small text files that a website’s server stores in your web browser. Cookies allow companies to recognize your device and store information about your account and preferences. For example, we may use cookies to store information about pages visited on our sites, language preferences, your relationship with us, or other information that we have associated with you or your device. We use single-session (temporary) and multi-session (persistent) cookies. Temporary cookies last only as long as your web browser is open and are used for technical purposes such as enabling better navigation on our site. The cookie is deleted when the browser is closed. Persistent cookies are stored on your computer for longer periods and are used for purposes such as tracking the number of unique visitors to our site other pertinent web statistics. This information identifies your browser to our servers.

Strictly necessary cookies are used to operate the website, maintain security, enable page navigation, and support basic functionality. These cookies do not require consent. Non-essential cookies include analytics cookies, marketing and advertising cookies, personalization cookies, and any other cookies that are not required for the site to function.

We, or our service providers, may also use pixel tags to collect information. A pixel is an image or a small string of code that may be placed in a website, advertisement, or email. It allows companies to set or read cookies or transfer information to their servers when you load a webpage or interact with online content. Pixels help us or our vendors and service providers determine whether you have interacted with a specific part of our website, viewed a particular advertisement, or opened a specific email.

You may withdraw or change your preferences for these technologies at any time through our cookie banner, preference management tools, or your browser settings (consult your browser’s “Help” menu to learn how to delete cookies). Please be aware that disabling certain cookies may affect the functionality or performance of the Services.

3. Use of Personal Information

We may use your personal data for different purposes, such as when you have given consent, for the performance of a contract, to comply with our legal and regulatory obligations, or when we have a legitimate interest in processing your information. In some instances, we may engage in automated decision-making, which is the processing of personal data by automated means to conduct analysis or make predictions. We process your information for the following purposes:

• To perform services on behalf of the business, to include communicating with you, fulfilling your requests, verifying customer information, and providing customer service
• To process payments
• To keep our customer records updated and accurate
• To ensure operational efficiency and quality control
• To improve our Services
• To personalize your experience
• To send you marketing and promotional communications (with your consent)
• To analyze how you use our Services
• To ensure that the website content is presented in the most effective manner for your device
• To understand how many visitors utilize the website, count ad impressions, and measure the effectiveness of ad impressions
• To utilize automated decision-making and/or profiling to analyze your preferences and interests, verify identities, detect fraud, or analyze our business operations
• To maintain the security of our website and systems
• To maintain server logs
• Debugging to identify and repair errors that impair intended functionality
• To prevent fraud
• For our legitimate interests or those of a third party
• To comply with legal and regulatory obligations, to include complying with lawful orders or the requirements of judicial/administrative proceedings.
• To assert or defend our legal rights
• To transfer, sell, or assign to third parties information concerning your relationship with us, including, without limitation, personal data that you provide and other information concerning your relationship with us in the event of a sale, merger, consolidation, change in control, transfer of substantial assets, reorganization, or liquidation.

Legal Bases for Collecting and Using Personal Data

• Consent: We may collect and use your data based on your clear and affirmative consent. This consent will always be freely given, specific, informed, and unambiguous. You also have the right to withdraw your consent at any time.
• Contract: In certain cases, we need to process your data to fulfill a contractual agreement with you. This may involve processing your payment information, name, and address to complete a purchase or deliver a service or may involve communicating with you to provide customer service
• Legal Obligation/Compliance: We may process your data when required to comply with legal or regulatory obligations (e.g. tax reporting)
• Vital Interests: Under exceptional circumstances, we may process your data to protect your vital interests or the vital interests of another person. This could involve processing your data during an emergency.
• Public Interest: In some instances, processing your data may be in the public interest. This could involve processing data for public health initiatives or national security purposes, as authorized by law.
• Legitimate Interests: We may also process your data based on our legitimate interests, provided these interests do not outweigh your fundamental rights and freedoms. Examples of legitimate interests include fraud prevention, direct marketing (with proper consent mechanisms) or improving our services.

4. Disclosure of Personal Information

We may disclose your personal information in the course of business. We may share information with the following parties.

• To third-parties who help us operate our business, such as our payment processor, website host, and marketing agencies.
• To government entities and other administrative or regulatory bodies for legal or necessary purposes, such as when we are required to do so by law, in order to assert or defend our legal or administrative rights, or in the good faith belief that such disclosure is necessary to comply with a court order, subpoena, or other legal process.
• To other parties in the event of a sale, merger, consolidation, change in control, transfer of substantial assets, reorganization, or liquidation.

5. Data Retention & Deletion

We will retain your personal information for as long as necessary to provide you with the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. We also consider legal, compliance, and audit obligations, our ability to address any questions regarding our services, and our ability to assert or defend our legal rights. When it is no longer necessary to retain your information we will delete or de-identify it.

6. Confidentiality & Security of Personal Information

We take reasonable steps to protect your personal information from unauthorized access, disclosure, alteration, or destruction and strive to protect your information. However, no website, storage mechanism, or data transmission is completely secure and we cannot guarantee the absolute security of your personal information.

7. Children’s Privacy

Our Services are not directed to individuals under 18, and we do not knowingly collect personal information from them. If you learn that anyone younger than 18 has provided us with personal data, please contact us and we will take steps to delete such information.

8. Changes to our Privacy Policy

We may update this Privacy Policy due to legal changes, updates to our services or website, or business needs. We will post updates to the policy on this page, and where required by law, notify you through the service or email of significant changes. By continuing to use our services after the update, you agree to the new terms.

9. Contact Us

If you have any questions about this Privacy Policy, or would like to update/amend your information, please email us at privacy@legreq.com or call us at 805-705-8651.

Additional Information for Residents of the European Economic Area (EEA) and the United Kingdom (UK)

This Privacy Statement explains how we collect, use, disclose, and safeguard personal data of individuals located in the United Kingdom, the European Economic Area, and Switzerland, and supplements our Privacy Policy.

1. Data Controller and Contact Details

Legendary Requirements is the entity responsible for the processing of your personal data in connection with the Services. You may contact us at:

• Registered Address: 2674 E. Main Street., Suite E #336, San Buenaventura, CA 93003[A8]
• Email: privacy@legrep.com
• Tel: +1(805)705-8651

2. Categories of Personal Data We Process

We process the categories of data described in the “Information We Collect About You” section above.

Special Categories of Data

Legendary Requirements does not directly or intentionally collect, store, process, or transmit special category data, such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, health information, sexual orientation, genetic data, or criminal convictions.

3. Purposes of Processing and Legal Grounds

We process your personal data for the purposes listed in the “Use of Personal Information” section above.

For EEA/UK users, we process your personal data only when a valid legal basis exists:

• Contractual Necessity: For the performance of a contract that we have with you.
• Complying with Legal and Regulatory Obligations: To comply with applicable laws, regulations, or codes of practice.
• Consent: Where you have provided freely given, specific, and unambiguous consent. You may withdraw consent at any time, though doing so may affect our ability to provide certain services.
• Legitimate Interests: For interest pursued by us or a third party, including:

• User registration, authentication, and client services

• Responding to your requests and inquiries

• Business administration and statistical analysis

• Fraud prevention and detection

• Providing and maintaining our sites and solutions

4. Your Data Subject Rights

• Right of Access: You have the right to request access to your personal data. Requests for additional copies may incur a reasonable administrative fee.
• Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data. We may require evidence to support these corrections.
• Right to Erasure: You have the right to request deletion of your data in certain circumstances.
• Right to Restriction of processing: You may request that we limit the processing of your data in certain circumstances.
• Right to Data Portability: You have the right to receive your data in a structured format to transfer it to another organization, provided processing is automated and based on consent or contract.
• Right to Object: You have the right to object to processing based on direct marketing or processing based our legitimate interests for reasons relating to your specific situation.
• Automated Decision Making: You have the right not to be subject to decisions based solely on automated processing that have a legal or similarly significant effect on you.
• Consent Withdrawal: Where processing is based on consent, you may withdraw consent at any time.

5. Exercising Your Rights

To exercise any of your data subject rights, or to file a complaint, contact us at privacy@legreg.com. You may also call us at 805-705-8651 or write to us at 2674 E. Main Street., Suite E #336, San Buenaventura, CA 93003. We may need to verify your identity before responding.

6. International Data Transfers

In order to deliver services to you, we may transfer your personal data to recipients outside of the EEA and the UK. Information may be held at our offices or those of our vendors and/or service providers. For all such transfers, we ensure compliance with applicable data protection laws by moving your data to recipients where: (i) the recipient is in a country deemed adequate by the European Commission or the UK Secretary of State; (ii) a specific derogation applies, such as where you have provided explicit consent for the transfer. or (iii) we utilize Standard Contractual Clauses, the UK International Data Transfer Agreement/Addendum, and/or utilize practices that meet the requirements for data transfer.