Create secure customer journeys with connected document management, communications and eSignatures built for financial services.
When you become a registered user of Legado, we collect certain personal information about you so that we can provide you with relevant information or services, or meet our legal obligations. You can read more below about what information we collect and how.
You can ask to exercise your data rights at any time. For more information about your data rights, please see our main privacy policy or the impartial Information Commissioner’s Office.
We may process data about your use of our website and services (“usage data”). Usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as the timing, frequency and pattern of your use of the service. The source of usage data is our analytics tracking system. The legal basis for this processing is our legitimate interests, namely monitoring and improving our services. You cannot be identified from this information, and it is only used to help us provide an effective service.
We may process your account data (“account data”). Account data may include your name and email address. Account data does not come from you directly; it comes from the corporate client providing our service to you. We may process it to operate our application, provide our services, keep our website and services secure, maintain back-ups of our databases and communicate with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our application and business. It is also the performance of any contract between you and us (or between us and the corporate client providing our service to you), or taking steps, at your request, to enter into such a contract.
We may process certain personal information you provide while using our services (“service data”). Service data may include your name and email address. We may process it to provide our services, keep our website and services secure, maintain back-ups of our databases and communicate with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our application and business. It is also the performance of any contract between you and us (or between us and the corporate client providing our service to you), or taking steps, at your request, to enter into such a contract.
We may process information in any enquiry you send us about our products or services (“enquiry data”). We may use enquiry data to offer, market and sell relevant products or services to you. The legal basis for this processing is consent.
We may process information that you, or the corporate client providing our services to you, give us so that we can subscribe you to or send you email notifications (“notification data”). We use notification data to send you the relevant notifications. The legal basis for this processing is consent.
We may process any of the personal information described in this policy where necessary to establish, exercise or defend legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely protecting and asserting our legal rights, your legal rights and the legal rights of others.
We may also process any of your personal information where necessary to comply with a legal obligation we are subject to, or to protect your vital interests or the vital interests of another person. Please do not give us anyone else’s personal information unless we ask you to.
We may share your personal information with our insurers or professional advisers where reasonably necessary to obtain and maintain insurance cover, manage risks, get professional advice and manage legal disputes.
We may also share your personal information where necessary to comply with a legal obligation we are subject to, or to protect your vital interests or the vital interests of another person.
We will never sell your information to third parties for marketing purposes.
Operationally, Legado has no internal access to client data, because files stored on our servers are encrypted as standard. If access to personal information is authorised, it is limited to specific staff who have a duty to keep that information confidential and secure.
Our data retention policies and procedures help us meet our legal obligations on keeping and deleting personal information. We do not keep personal information for longer than we need it for the purpose or purposes it was collected for.
We will keep and delete your personal information as follows:
We are an award-winning data and communication platform, selling software as a service. You can learn more about our team and our values on our website.
Privacy is one of our core business values, and we take protecting your data very seriously. If you have any concerns about how we use your data, please contact us using the details below.
Handling your personal information with respect and transparency is an essential part of protecting your privacy. At Legado, we work to exceed the minimum requirements of Cyber Essentials Plus, the UK government’s cyber security accreditation scheme, and we are voluntarily certified by Alcumus ISOQAR to the ISO/IEC 27001:2022 standard.
When you give us personally identifying information, we make sure the right cybersecurity and organisational controls are in place to protect it. These include:
We encrypt data using industry-standard algorithms at every verification step, so any data entered into our systems for verification is sent and received securely. Data is also encrypted at rest on our servers.
If you have any questions about service-related communication, please contact us at:
Data Protection Team
Wsm Advisors Connect House, 133-137 Alexandra Road, Wimbledon, London, United Kingdom, SW19 7JY