Legal

Privacy Policy

How Legend Fusions collects, uses and protects your personal data.
Effective date: [effective date] · Applies to legendfusions.com and our regional sites.

This policy is a working draft for the website build. The bracketed items below must be completed and the wording reviewed by the firm and its legal advisers before publication. 
On this page

1. Who we are

Legend Fusions is a firm of international tax and accounting advisers operating across the United Kingdom, the United States, Canada and the United Arab Emirates. This policy explains how we handle personal data collected through legendfusions.com and our regional sites.

The data controller responsible for your personal data is the Legend Fusions entity that serves your region: [registered entity name & company number per region]. Where this policy refers to “we”, “us” or “the firm”, it means the relevant regional controller.

If you have any questions about this policy or how we handle your data, contact our privacy team at [Data Protection Officer / privacy contact email] or, for general enquiries, hello@legendfusions.com. 

2. The personal data we collect

We collect personal data that you provide directly and data collected automatically when you use our website.

Information you give us

When you submit an enquiry, request a quote, book a consultation or otherwise contact us through a form on the site, we collect:

  • Your name;
  • Your email address;
  • Your telephone number, where you provide it;
  • The region you select and a short description of your situation or message;
  • Any further details you choose to include in your message or during a consultation.

Information we collect automatically

When you browse the site we may collect technical and usage data through cookies and similar technologies, including your IP address, device and browser type, the pages you view and how you arrived at the site. See our Cookie Policy for detail.

3. How we use your personal data

We use your personal data to:

  • Respond to your enquiry and provide the information or quote you request;
  • Arrange and conduct consultations and provide our tax and accounting services where you become a client;
  • Communicate with you about your enquiry or engagement;
  • Operate, maintain, secure and improve our website;
  • Comply with our legal, regulatory and professional obligations;
  • Send you updates or insights where you have asked to receive them.

4. Our lawful bases for processing

Where the UK GDPR and EU GDPR apply, we rely on the following lawful bases:

  • Consent — for optional cookies and for marketing communications, where required;
  • Performance of a contract — to provide services you have engaged us for, and to take steps at your request before entering into a contract;
  • Legitimate interests — to respond to enquiries, to run and secure our website, and to develop our services, provided your interests and rights do not override those interests;
  • Legal obligation — to meet anti-money-laundering, tax, accounting and other regulatory duties.

Processing carried out by our United States, Canadian and United Arab Emirates entities is also governed by the data protection laws applicable in those jurisdictions.

5. Cookies and analytics

We use cookies and similar technologies, including analytics and tag management tools, to understand how the site is used and to improve it. You can control non-essential cookies through our cookie settings and your browser. Full detail is set out in our Cookie Policy.

6. Sharing your personal data

We do not sell your personal data. We may share it with:

  • Other Legend Fusions entities, where coordinating advice across regions is necessary to respond to your enquiry or serve you;
  • Service providers who support our website, hosting, analytics, communications and IT, acting on our instructions under appropriate agreements;
  • Professional advisers, auditors and insurers where reasonably necessary;
  • Regulators, law enforcement or other authorities where we are required to do so by law or our professional obligations.

7. International transfers

Because Legend Fusions operates across the United Kingdom, the United States, Canada and the United Arab Emirates, your personal data may be transferred to and processed in a country other than the one in which you are located. Where we transfer personal data out of the UK, the European Economic Area or another protected jurisdiction, we put appropriate safeguards in place, such as standard contractual clauses or an equivalent lawful transfer mechanism, so that your data remains protected.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out in this policy. Where you make an enquiry but do not become a client, we keep your data for a limited period and then delete it. Where you become a client, we keep records for the periods required by our legal, tax, accounting and regulatory obligations, after which the data is securely deleted or anonymised.

9. How we keep your data secure

We maintain appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including access controls, encryption in transit where appropriate, and supplier due diligence. No method of transmission over the internet is completely secure, but we take reasonable steps to protect the information you provide.

10. Your rights

Subject to the data protection law that applies to you, you may have the right to:

  • Access the personal data we hold about you;
  • Have inaccurate data corrected;
  • Have your data erased in certain circumstances;
  • Restrict or object to certain processing;
  • Receive your data in a portable format;
  • Withdraw consent at any time, where processing is based on consent;
  • Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us using the details below. If you are in the UK or EEA and are not satisfied with our response, you may complain to the relevant supervisory authority: [supervisory authority / regulator].

11. Marketing communications

We will only send you marketing communications where you have asked us to, or where we are otherwise permitted to do so. You can opt out at any time using the unsubscribe link in our emails or by contacting us.

12. Children

Our website and services are directed at businesses and adults. We do not knowingly collect personal data from children.

13. Changes to this policy

We may update this policy from time to time. The effective date at the top shows when it was last revised. Where changes are significant, we will take reasonable steps to bring them to your attention.

14. How to contact us

For any privacy question, or to exercise your rights, contact our privacy team at [Data Protection Officer / privacy contact email]. For general enquiries you can reach us at hello@legendfusions.com. The controller for your region is [registered entity name & company number per region].