LEGACY STRATEGIC
Privacy Policy
Effective October 28, 2026
This policy describes information handling for Legacy Strategic’s website, business inquiries, and fractional CFO services. For privacy questions or requests, contact Chris Collier at ccollier@legacy-strategic.com.
Information you provide
When you contact us, we receive the information you choose to send, such as your name, business name, contact details, and message. In a client engagement, we may receive accounting records, financial information, and information about business owners, employees, customers, or vendors needed for the agreed services. Please share only information you are authorized to provide and that is relevant to the engagement.
The public website provides information and email links. It does not currently provide a client banking portal or a Plaid connection form. Do not send banking passwords, authentication codes, or other account credentials by email.
Website technical information
Hosting providers may process technical information, including IP addresses, browser information, request times, and security logs, to deliver and protect the website. The site loads fonts from Google Fonts, which sends requests from your browser to Google and may disclose your IP address and browser request information. The website code maintained by Legacy does not currently include advertising pixels or a third-party analytics integration. Hosting infrastructure may process additional technical information independently of that code.
How information is used and shared
Information provided to Legacy is used to respond to inquiries, communicate with clients, administer engagements, and provide agreed financial reporting, planning, and CFO services. It may also be needed for business records, security, dispute resolution, and applicable obligations.
Service providers supporting email, document storage, hosting, and accounting workflows may process information as part of those services. Information may be shared with authorized client representatives or advisers at the client’s direction, or where required by law. The relevant engagement determines the scope of work and the information needed to perform it.
Planned Plaid connections
Legacy is planning a Plaid integration. It is not currently available through this website. Before it launches, this policy will be updated to explain the actual application, financial data requested, and available choices. The intended purpose is authorized financial reporting, cash flow analysis, and CFO services.
A future bank connection will require a separate authorization process. Visiting this website or reading this policy does not authorize access to a bank account. Plaid describes its own information practices in its End User Privacy Policy.
Retention and deletion
Retention depends on the purpose of the records, the engagement, and applicable recordkeeping or preservation obligations. Legacy is formalizing its category-specific retention schedule and deletion procedures. Those procedures will be approved and tested before the planned Plaid integration begins collecting banking information.
You can request deletion by contacting us. We will assess the request against applicable requirements and explain relevant limitations. Records subject to a preservation obligation may need to be retained. Backup copies may remain until the applicable backup cycle expires. Disconnecting a future bank connection will not, by itself, delete all previously obtained records.
Privacy requests and choices
Email ccollier@legacy-strategic.com to request access, correction, deletion, or information about the handling of your personal information. Depending on applicable law, you may have additional rights. We will assess and respond to requests under the requirements that apply.
We may need to verify your identity and authority. Do not include full bank account numbers, passwords, or identity documents in your initial message. If we handle information on a business client’s behalf, we may coordinate your request with that client. You may decline to provide optional information, although some services may require particular information to be performed.
Security and updates
Legacy is formalizing its information security program and verifying the safeguards for its planned banking integration. This policy does not guarantee that information is immune from loss or unauthorized access.
We will update this policy when our information practices change and provide additional notice or request authorization where required. The effective date above identifies the current published version.