Privacy Policy

1. Our commitment: your data is your data

Confidentiality is central to how we work with families and founders. This Privacy Policy explains practices for the public website at https://thelegacystronghold.com (and related pages we operate for marketing and lead capture). Where more protective terms apply under a signed engagement or Client Portal agreement, those terms control for that relationship.

2. Scope of this policy

This policy applies to:

• Visitors to our public marketing website and linked public pages (including Masterclass waitlist);
• Individuals who submit strategy-call, lead, or waitlist forms;
• Technical data generated by ordinary website operation (e.g., server logs).

This policy does not by itself govern:

• Authenticated Client Portal accounts and family-isolated client records (covered by portal terms and engagement agreements);
• Password-protected commercial sections once unlocked under separate access rules;
• Third-party sites we link to (calendar providers, etc.), which have their own policies.

3. Information we collect

3.1 Information you choose to give us

When you submit a form (for example Schedule Strategy Call or Masterclass waitlist), we may collect:

• Name;
• Email address;
• Phone number (required for some forms so we can confirm by SMS);
• Approximate revenue or other qualifier you enter (used for education tooling and intake context — not for credit decisions);
• Optional message content or preferences you provide;
• Source tags (e.g., website tax tool, masterclass waitlist) and optional UTM parameters if present in the URL.

You control what you type into forms. Do not submit sensitive information you do not want transmitted (for example full Social Security numbers, bank account numbers, or complete tax returns) through public website forms.

3.2 Information collected automatically

Like most websites, we or our hosting providers may automatically receive:

• IP address (which we may hash or truncate for security and rate limiting);
• Browser type, device type, and general request metadata;
• Pages requested, timestamps, and referral URLs;
• Approximate location derived from IP at a coarse level (not precise GPS), if provided by infrastructure.

3.3 Cookies and similar technologies

We may use cookies, local storage, or similar technologies that are strictly necessary for site function (for example security, load balancing, remembering a commercial-section session cookie you initiated, or remembering a revenue selection you made for the tax tool). See Cookies and similar technologies below.

4. How we use information

We use personal information to:

• Respond to your inquiries and schedule or confirm strategy conversations;
• Send confirmation email and/or SMS that may include a calendar booking link (when you provide contact details for that purpose);
• Notify our team of new leads so a human can follow up appropriately;
• Operate, secure, debug, and improve the website (including abuse prevention and rate limiting);
• Maintain records as needed for legitimate business, legal, and compliance purposes;
• Honor your requests regarding access, correction, or deletion where applicable.

We do not use public-site form data to make automated decisions that produce legal or similarly significant effects without human involvement in our client-acceptance process.

5. How we share information

We share personal information only as needed to operate and as described here:

• Service providers / processors — hosting, CRM, email, SMS, calendar, analytics, and security vendors who process data on our instructions and under confidentiality obligations;
• Internal team — principals and authorized staff who need access to respond to you;
• Legal and safety — when we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, and security of visitors, clients, or others;
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and continued privacy protections.

Lead submissions may be forwarded from this website’s secure API to our CRM so we can manage follow-up and trigger confirmation communications. That hand-off is for your request (e.g., strategy call or waitlist), not for unrestricted resale.

6. We do not sell your personal information

We do not sell your personal information for money. We also do not “share” personal information for cross-context behavioral advertising in the sense of selling audience lists to advertisers from this site’s lead forms.

If that practice ever changes, we will update this policy and provide any required notice or opt-out mechanism before doing so.

7. Retention

We retain personal information only as long as reasonably necessary for the purposes described above, including:

• Active inquiry and follow-up periods;
• Legitimate business records and dispute resolution;
• Legal, tax, and regulatory retention requirements;
• Security logs for a limited period appropriate to abuse prevention.

When information is no longer needed, we delete or de-identify it where reasonably feasible. Local development logs (if used) are operational artifacts and are not a public data marketplace.

8. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information (including transport encryption on the public site where configured, access controls on systems we operate, rate limiting, and server-side validation of forms).

No method of transmission or storage is 100% secure. You use the internet at your own risk. If you believe your interaction with us has been compromised, contact us promptly using the details below.

9. Your privacy rights and choices

Depending on your location, you may have rights regarding personal information we hold about you. Subject to applicable law and verification of your identity, these may include:

• Access — request a copy of personal information we maintain about you from public-site interactions;
• Correction — request that we correct inaccurate information;
• Deletion — request deletion, subject to legal and legitimate business retention exceptions;
• Opt-out of marketing — unsubscribe from non-essential marketing emails (transactional confirmations related to a request you made may still be sent as needed);
• SMS — reply STOP to opt out of SMS where applicable under carrier and legal rules (you may still need another channel for essential follow-up if you requested a call);
• Non-discrimination — we will not discriminate against you for exercising privacy rights under applicable law.

9.1 California and similar U.S. state privacy laws

If you are a resident of California or another state with comprehensive privacy legislation, you may have additional rights (including to know categories of personal information collected, purposes of use, and categories of third parties). Categories we may collect from website visitors include identifiers (name, email, phone), commercial-context information you volunteer (e.g., revenue range), and internet activity (pages viewed, IP-related data).

We do not sell personal information. To exercise rights, email team@thelegacystronghold.com with the subject line “Privacy Request” and describe your request. We may need to verify your identity before fulfilling it. Authorized agents may submit requests where law requires us to accept them, subject to verification.

9.2 Do Not Track

Some browsers offer a “Do Not Track” signal. There is no uniform industry standard for responding to DNT. We treat privacy as described in this policy regardless of DNT signals.

10. Cookies and similar technologies

We may use:

• Essential cookies / storage — security, session continuity (for example a commercial-section unlock you requested), load balancing, and remembering in-browser choices such as a tax tool revenue selection so the strategy form can prefill;
• Analytics — if enabled, to understand aggregate traffic and improve the site (configured to respect privacy where tools allow).

You can control cookies through your browser settings. Blocking essential cookies may break parts of the site (forms, restricted access sessions, or prefill behavior).

11. Children

This website is intended for adults and business decision-makers. It is not directed to children under 13 (or under 16 where that is the relevant standard). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will take appropriate steps to delete it.

12. International visitors

We are based in the United States (Georgetown, TX). If you access the site from outside the U.S., you understand that your information may be processed in the United States and other countries where our providers operate, which may have different data-protection rules than your country.

If you believe you need a data processing agreement or additional rights under GDPR/UK GDPR or similar regimes, contact us. For casual marketing-site inquiries we process data based on your request (steps prior to a contract) and our legitimate interests in operating a secure business website, balanced against your rights.

13. Client Portal and engaged clients

The Client Portal is a private system for invited clients. Portal credentials, family-isolated records, documents, and communications inside the portal are governed by engagement agreements, portal terms, and stricter access controls — not solely by this public Privacy Policy.

Public-site leads are not automatically full client files. Promotion into a client relationship occurs only through our internal process and written engagement.

14. Changes to this policy

We may update this Privacy Policy from time to time. The current version will be posted on this page with an updated effective date. Material changes may be highlighted on the site or communicated when required by law. Continued use of the public website after an update constitutes notice of the revised policy for website interactions going forward.

15. Contact us

For privacy questions, requests to access, correct, or delete personal information collected via this website, or concerns about how we handle your data, contact:

Related: Legal Disclosures · Home