Privacy Policy

1. Who we are

Legend Fusions Limited is an international tax and accounting firm. The company was formerly known as Legend Financial and Tax Advisers Limited.

For personal information covered by this UK policy, the controller is:

When we provide payroll, accounting, tax, advisory or related services, our role may vary. We may act as a controller where we decide why and how information is used, including for our legal, regulatory and professional obligations. In some engagements, we may also process information on documented instructions from a client, for example when administering payroll or handling records provided by that client.

2. Scope of this policy

This policy applies when you:

• visit or interact with the UK pages of legendfusions.com;
• submit an enquiry, request a quote or book a consultation;
• become, or represent, a client of Legend Fusions Limited;
• communicate with us by email, telephone, online meeting, approved messaging channel or another business channel;
• receive tax, accounting, payroll, advisory or related professional services from us; or
• act as an employee, director, beneficial owner, supplier, professional adviser or authorised representative of a client or prospective client.

Separate notices may apply to employees, contractors, job applicants or specific services where additional information is required.

3. Personal information we collect

The information we collect depends on your relationship with us and the services requested. It may include:

Identity and contact information

• name, title, date of birth and contact details;
• home, business or correspondence address;
• signature, identity verification information and proof of address;
• company, partnership, trust, directorship or beneficial ownership details; and
• authorised representative and professional adviser details.

Tax, accounting, payroll and financial information

• Unique Taxpayer Reference, National Insurance number, PAYE, VAT and company tax references;
• income, expenses, assets, liabilities, investments, pensions and business records;
• banking and payment information where required for an engagement;
• payroll, salary, pension, benefits, deductions and employee records supplied for payroll services;
• invoices, receipts, accounts, returns, calculations and supporting documents; and
• information required to meet anti-money-laundering, fraud prevention, sanctions-screening or professional obligations.

Service and communication information

• enquiry details, consultation notes and service requirements;
• contracts, engagement letters and instructions;
• emails, meeting records, call notes, support requests and correspondence;
• complaints, feedback and information about the services provided; and
• marketing preferences and consent records.

Website and technical information

• IP address, browser type, device information and approximate location;
• pages viewed, referral source, session information and website interactions;
• cookie choices and consent records; and
• security, diagnostic and access logs used to protect the website and systems.

Please avoid sending information that is not necessary for your enquiry. We may ask you to use an approved secure method when documents contain identity, payroll, tax, banking or other restricted information.

4. Where personal information comes from

We may obtain personal information:

• directly from you;
• from a client, employer, company, trustee, authorised representative or other person who is permitted to provide it;
• from HM Revenue & Customs, Companies House and other public authorities or official registers;
• from accounting, payroll, banking or business platforms that you authorise us to access;
• from identity-verification, fraud-prevention or compliance providers;
• from professional advisers, referral partners or other service providers; and
• automatically through our website, cookies and security technologies.

Where another person gives us your information, that person is responsible for ensuring they are authorised to do so and, where required, for making this policy available to you.

5. How and why we use personal information

UK data protection law requires us to identify and document a lawful basis for each purpose. The bases we most commonly rely on are contract, legal obligation, legitimate interests and consent.

Where we rely on legitimate interests, those interests may include operating a professional-services business, responding to business enquiries, maintaining client relationships, protecting our systems, preventing fraud and improving our services. We assess whether these interests are necessary and balanced against your rights.

6. Sensitive, special-category and criminal-offence information

Most of our services do not require special-category information. However, tax, payroll or advisory documents may sometimes contain information about health, disability, trade-union membership or another protected characteristic. We only use this information where it is necessary, lawful and relevant to the service or legal obligation.

Where UK law requires an additional condition for special-category or criminal-offence information, we identify and document that condition before processing. We apply restricted access and additional safeguards appropriate to the sensitivity of the information.

7. Cookies, analytics and online technologies

We use essential technologies to operate and secure the website. With your consent, we may also use Google Analytics to understand website use and Google Ads technologies to measure PPC campaign performance and conversions. These non-essential technologies should not be activated until the relevant consent has been recorded.

Google Search Console is used as an administrative search-performance tool and is not presented as a separate visitor-cookie category. Details of cookies, providers, purposes and retention periods are set out in our UK Cookie Policy and the live cookie settings tool.

8. Who we share personal information with

We do not sell personal information. Where necessary and lawful, we may share it with:

• other Legend Fusions or Legend Group entities involved in an authorised service, support or administrative activity;
• HM Revenue & Customs, Companies House, courts, regulators, law-enforcement bodies and other public authorities;
• banks, payment providers, pension providers and financial institutions where required for a service;
• professional advisers, auditors, insurers, legal advisers and consultants;
• website, cloud, email, Microsoft 365, CRM, accounting, payroll, identity-verification, cybersecurity, hosting, analytics and advertising providers;
• suppliers and contractors who process information under confidentiality, security and data-protection obligations;
• a purchaser, investor or successor in connection with a proposed or completed corporate transaction, subject to appropriate safeguards; and
• another person where you authorise the disclosure or the law permits or requires it.

We limit disclosures to what is necessary for the relevant purpose and apply contracts, access restrictions and due-diligence controls where appropriate.

9. International access and transfers

Legend Fusions operates internationally. Personal information may be accessed or processed by authorised personnel, affiliated entities and service providers in the United Kingdom, Canada, the United States, the United Arab Emirates, Pakistan and other locations used by our approved providers.

Some support, technology, cybersecurity, administration or service-delivery activities may be performed from Pakistan or another country outside the UK. Where UK transfer rules apply, we use an available lawful mechanism, which may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved EU Standard Contractual Clauses;
• contractual, technical and organisational safeguards; and
• a transfer risk assessment or data-protection test where required.

You may contact the Data Protection Contact for further information about the safeguards relevant to a particular transfer.

10. How long we keep personal information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet legal, tax, accounting, anti-money-laundering, professional, insurance and dispute-resolution requirements.

Our retention decisions take account of:

• whether you become a client and the duration of the engagement;
• statutory and professional record-keeping requirements;
• limitation periods for possible legal claims;
• the sensitivity and volume of the information;
• the risk of harm from continued retention; and
• whether information can be securely deleted or anonymised.

Marketing records are kept until you withdraw consent or object, although we may retain a minimal suppression record to ensure we respect your preference. Cookie and analytics retention periods are described in the UK Cookie Policy and live cookie inventory.

11. How we protect personal information

We use technical and organisational measures appropriate to the nature and risk of the information. These may include role-based access, multi-factor authentication, encryption in transit, endpoint protection, backups, logging, security monitoring, supplier due diligence, confidentiality controls, staff awareness and incident-response procedures.

No internet transmission or storage system can be guaranteed completely secure. Where you need to send identity, payroll, tax, banking or other restricted documents, use the secure channel specified by your Legend Fusions contact rather than an unapproved personal messaging account.

12. Your UK data protection rights

Depending on the circumstances, you may have the right to:

• be informed about how your personal information is used;
• request access to the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request erasure in circumstances where the right applies;
• request restriction of processing;
• receive certain information in a portable format;
• object to processing based on legitimate interests;
• object at any time to direct marketing;
• withdraw consent without affecting processing carried out before withdrawal; and
• raise concerns about solely automated decisions with legal or similarly significant effects.

These rights are not absolute and may be limited by legal, regulatory, professional or evidential requirements. We may ask for information needed to verify your identity before acting on a request. We normally do not charge a fee, although the law permits a reasonable fee or refusal in limited cases involving manifestly unfounded or excessive requests.

To exercise a right, email info@legendfusions.com with enough information for us to identify the relevant records and understand your request.

13. Marketing communications

Submitting an enquiry does not automatically subscribe you to marketing. Where consent is required, we use a separate, unticked option for tax updates, regulatory bulletins, event information or service news.

You can withdraw consent or object to direct marketing at any time by using the unsubscribe link in an email or contacting us. We will stop the relevant marketing as soon as reasonably possible and may keep a suppression record so that your preference is respected.

14. Automated decision-making and profiling

We do not use the UK website to make decisions about you based solely on automated processing where the decision produces legal or similarly significant effects. We may use analytics or advertising measurement to understand website performance, but these activities are subject to cookie controls and are not used by us to make professional tax or accounting decisions without human involvement.

15. Children's information

Our website and services are directed primarily at businesses and adults. We do not knowingly use the website to collect information directly from children for marketing purposes. We may process limited information about a child or dependant where it is lawfully provided by a parent, guardian, employer or client and is necessary for tax, payroll or another professional service.

16. Changes to this policy

We may update this policy to reflect changes in our services, systems, suppliers, legal obligations or regulatory guidance. The effective date at the top shows when the current version applies. Where a change is material, we may provide an additional notice through the website, email or another appropriate channel.

17. Contact and complaints