Privacy policy

1. Who we are

Legacy Property Investments is a trading name of Legacy Sourcing Limited, a company registered in England and Wales (company number 15156934), with its registered office at 33–34 Winckley Square, Preston PR1 3JJ. In this policy, "Legacy", "we", "us" and "our" mean Legacy Sourcing Limited.

We are the data controller for the personal information described in this policy. We are registered with the Information Commissioner's Office (ICO) under registration number ZB601021.

If you have any questions about this policy or how we use your information, email us at invest@legacysourcing.co.uk or write to us at the address above.

2. The information we collect

We collect information that you give us when you:

• Send an enquiry through our contact form: your name, email address, phone number (if given) and your message.
• Register as an investor: your name, email address, phone number, country of residence, the structure and indicative amount you are interested in, how you heard about us, the investor category you select, and your confirmations about risk and contact.
• Correspond with us by email, phone or in person, including information you share during calls and meetings.

If you go on to invest with us, we will collect further information needed to complete the investment and to meet our legal obligations, such as proof of identity and address, source-of-funds information, bank details and signed investor statements. We will explain this to you at the time.

Our website does not use analytics, advertising or tracking cookies. When you visit the site, our hosting provider may automatically log technical information such as your IP address, browser type and the pages requested, which is used to keep the site secure and working.

3. How we use your information and our lawful bases

We only use your personal information where the law allows us to. We use it to:

• Respond to your enquiry or registration, send you our investor pack and arrange a call. Our lawful basis is our legitimate interest in responding to people who contact us, and taking steps at your request before entering into an agreement.
• Confirm you are eligible to receive details of investment opportunities, as UK financial promotion rules require. Our lawful basis is compliance with a legal obligation and our legitimate interests.
• Send you information about current and future opportunities and investor updates, where you have agreed to this. Our lawful basis is your consent, which you can withdraw at any time.
• Enter into and manage an investment with you, including making payments and sending reports. Our lawful basis is the performance of a contract with you.
• Carry out identity, anti-money-laundering and fraud checks before accepting an investment. Our lawful basis is compliance with legal obligations.
• Keep our website secure and running properly. Our lawful basis is our legitimate interests.

We do not sell your personal information, and we do not use it for automated decision-making or profiling.

4. Who we share it with

We only share your information where necessary, with:

• our website and form hosting provider (Netlify) and our email provider, who process data on our behalf under contract;
• solicitors, accountants and other professional advisers involved in preparing or completing an investment;
• identity-verification and anti-money-laundering service providers;
• our bank and payment providers, to make and receive payments;
• regulators, law enforcement, courts or other authorities where we are legally required to.

Our website uses fonts provided by Google Fonts. When a page loads, your browser connects to Google's servers, which receive your IP address. Google does not set cookies for this service.

5. International transfers

Some of our service providers, including our website host, are based in or store data in the United States. Where your information is transferred outside the UK, we make sure it is protected by appropriate safeguards, such as the UK's International Data Transfer Addendum, standard contractual clauses or the UK–US data bridge.

6. How long we keep it

• Enquiries and registrations that do not lead to an investment: up to two years from our last contact with you.
• Investor records, including identity and anti-money-laundering checks: six years after our relationship with you ends, to meet legal, tax and regulatory requirements.
• Marketing preferences: until you ask us to stop contacting you, after which we keep a record of your request so that we respect it.

7. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is inaccurate or incomplete;
• ask us to delete your information, where we no longer have a reason to keep it;
• ask us to restrict how we use your information, or object to our use of it based on legitimate interests;
• withdraw your consent to marketing at any time;
• ask us to transfer information you have given us to another organisation, where applicable.

To exercise any of these rights, email invest@legacysourcing.co.uk. We will respond within one month. There is normally no charge.

8. Keeping your information secure

We use appropriate technical and organisational measures to protect your information, including encrypted connections to our website, access controls and secure storage. Only people who need your information to do their job can access it.

9. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.