Create secure customer journeys with connected document management, communications and eSignatures built for financial services.
When you visit our website or become a registered end user of Legado’s Platform, we will collect certain personal information about you in order to provide you with relevant information or services, or to fulfil our legal obligations. Below you can read more about what information we collect and how.
When you visit joinlegado.com and any associated websites owned by Legado Technologies Ltd, there are several points of interaction through which we will collect certain personal information about you. These include, but are not limited to, when you engage with:
You provide all personal information about you voluntarily, with your consent, or as a result of your choice to interact with our website.
You can ask to exercise your data rights at any time. For more information about your data rights, please refer to our main privacy policy or to the impartial Information Commissioner’s Office.
We may process data about your use of our website and services (“usage data”). Usage data may include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system. The legal basis for this processing is our legitimate interests, namely monitoring and improving our website and services. You cannot be identified from this information and it is only used to help us provide an effective service.
We may process your account data (“account data”). The account data may include your name and email address. The source of the account data is you. The account data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business, as well as the performance of any contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may process certain personal information you provide in the course of using our services (“service data”). Service data may include your name, address and email address. Service data may be processed for the purposes of operating our website, providing our services, ensuring the security of our website and services, maintaining back-ups of our databases and communicating with you. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business, or the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract.
We may process information contained in any enquiry you submit to us about products and/or services (“enquiry data”). The enquiry data may be processed for the purposes of offering, marketing and selling relevant products and/or services to you. The legal basis for this processing is consent.
We may process information relating to transactions, including purchases of subscription fees and credits, that you enter into with us and/or through our website (“transaction data”). The transaction data may include your contact details, your payment card details and the transaction details. Transaction data may be processed for the purpose of supplying purchased goods or services and keeping proper records of those transactions. The legal basis for this processing is the performance of a contract between you and us and/or taking steps, at your request, to enter into such a contract, and our legitimate interests, namely the proper administration of our website and business.
We may process information that you provide to us for the purpose of subscribing to our email notifications (“notification data”). The notification data may be processed for the purposes of sending you the relevant notifications. The legal basis for this processing is consent.
We may process information contained in or relating to any communication that you send to us (“correspondence data”). The correspondence data may include the communication content and metadata associated with the communication. Our website will generate the metadata associated with communications made using the website contact forms. The correspondence data may be processed for the purposes of communicating with you and record-keeping. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communications with users.
We may process any of your personal information identified in this policy where necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure. The legal basis for this processing is our legitimate interests, namely the protection and assertion of our legal rights, your legal rights and the legal rights of others.
In addition to the specific purposes set out in this section, we may also process any of your personal information where necessary to comply with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another person. Please do not give us anyone else’s personal information unless we ask you to.
We may disclose your personal information to our insurers and/or professional advisers as far as reasonably necessary for obtaining and maintaining insurance cover, managing risks, obtaining professional advice and managing legal disputes.
We may also disclose your personal information where necessary to comply with a legal obligation to which we are subject, or to protect your vital interests or the vital interests of another person.
We will never sell your information to third parties for marketing purposes.
Operationally, Legado has no internal access to client data, because files stored on our servers are encrypted as standard and can only be viewed with authorisation from our clients (the Corporate Partner). If access to personal information is authorised, it is tightly restricted to specific staff who have a duty to keep that information confidential and secure.
This section sets out our data retention policies and procedures, which help us meet our legal obligations on keeping and deleting personal information. We will not keep any personal information we process for longer than we need it for the purpose or purposes it was collected for.
We will keep and delete your personal information as follows:
Our website includes links to, and details of, third-party websites. This privacy policy only covers our websites, and we are not responsible for the privacy policies of third-party websites, even where we link to them. If you follow a link from our website, we recommend you read that website’s privacy policy before sharing any personal or financial data.
We run a number of social media pages, including LinkedIn, X (formerly Twitter) and Instagram. Although this policy covers how we use any data collected from those pages, it does not cover how the social media providers use your information. Please read the privacy policy of each social media website before sharing data, and use the privacy settings and reporting tools to control how your data is used.
We use cookies, a type of tracking technology, to enable the full functionality of our website. A cookie is a small, unique text file that a web server sends to your browser and stores on your device. You can read our full cookie policy.
We are an award-winning tech for good company selling software as a service, and you can learn more about our team and our values on our website. Privacy is one of our core business values and we take protecting your data very seriously, so if you have any concerns about how we use your data, please contact us using the details below.
Handling your personal information with respect and transparency is an essential part of upholding your privacy. At Legado, we work to exceed the minimum requirements of Cyber Essentials Plus, the UK government’s cyber security accreditation scheme. We are voluntarily certified by Alcumus ISOQAR to the ISO/IEC 27001:2022 standard, and we are a member of CiSP, the National Cyber Security Centre’s cyber threat-sharing platform, which provides ongoing analysis, reporting and monitoring of online activity at national level.
When you provide us with personally identifying information, we make sure appropriate cybersecurity and organisational controls are in place to protect it. These include:
We encrypt data using industry-standard algorithms at every verification step. This means that any data entered into our systems for verification is sent and received securely. Data is also encrypted at rest on our servers.
Access to user data is tightly restricted to the authorised requesting firm only, with enforced password standards, activity reporting and account throttling. All passwords are hashed using SHA-512 with over 10,000 rounds and a 32-byte salt of random data.
You are responsible for keeping any password you use to access Legado confidential, and we recommend using two-factor authentication when accessing any Legado account.
We may send you an unprompted email to:
If you do not want to receive these emails, you can unsubscribe using the link in the footer of any email, or contact us at any time using the details below to ask to be removed from future communications.
If you have any questions about service-related communication, please contact us at hello@joinlegado.com.