PRIVACY POLICY
LegacyGuard Estate Planning LLC
Last Updated: October 30, 2026
This Privacy Policy (the "Policy") describes the categories of personal information collected by LegacyGuard Estate Planning LLC, the purposes for which information is used, the circumstances in which it may be disclosed and the rights available to individuals under applicable law. The Policy applies to LegacyGuard's websites, customer communications, educational materials, Legacy Readiness Assessment and related administrative estate-planning services as more particularly described below.
ARTICLE I. IDENTITY; SCOPE; DEFINITIONS
Section 1.01. Identity of the Business.
For purposes of this Policy, "LegacyGuard," "Company," "we," "us" and "our" mean LegacyGuard Estate Planning LLC, doing business as LegacyGuard Estate Planning. Our principal website is https://legacyguardep.com/ (the "Site"). This Policy addresses the Company's processing of personal information in connection with information submitted to us through the Site, electronic forms, telephone, email, text, customer inquiries, assessments, business records and administrative service coordination. Information processed by independent attorneys, payment processors or technology providers in their independent capacities may also be subject to separate legally required disclosures.
Section 1.02. Defined Terms.
"Personal Information" and "Personal Data" mean information that identifies or is reasonably capable of identifying, relating to, describing or being linked with an individual or household, as those terms are defined by the law applicable to the processing. "Sensitive Personal Information" means information accorded additional protection under applicable law, potentially including particular financial information, health-related details or information about a minor. "Processing" includes collection, receipt, use, storage, access, disclosure, correction and deletion. "Service Provider" means an organization processing information to perform functions for the Company pursuant to an applicable service arrangement. Statutory definitions and exclusions control where they differ from these general descriptions.
Section 1.03. Scope and Relationship to Other Notices.
This Policy applies to Personal Information processed by LegacyGuard in connection with the Site, requested educational services, the Legacy Readiness Assessment and the Company's own administrative activities. Where a separate provider or licensed attorney independently determines the purposes and means of processing information, that party's additional privacy disclosures and legal obligations may apply. No provision of this Policy transfers to LegacyGuard any professional duty owed independently by an attorney, and no provision diminishes rights that an individual has under applicable law.
The categories and uses described herein reflect the types of transactions that LegacyGuard offers. Not every category is collected from every individual. A particular collection or disclosure occurs only to the extent supported by the applicable transaction and actual processing arrangements.
ARTICLE II. CATEGORIES AND SOURCES OF INFORMATION
Section 2.01. Information Affirmatively Provided by Individuals.
The Company collects information that individuals choose to submit through its forms, questionnaires, conversations, requests for materials and administrative planning workflows. Depending upon the requested service, this may include: (a) names, postal addresses, email addresses and telephone numbers; (b) family relationships, marital status and names of intended beneficiaries or fiduciaries; (c) general descriptions of property, ownership interests, assets, liabilities and beneficiary preferences; (d) desired planning instructions, questionnaire answers and document information; (e) communications, inquiries and service requests; and (f) invoices, customer-order status and payment confirmations. Not all categories are requested from every individual. A complimentary educational inquiry ordinarily requires less information than a paid document-coordination transaction.
Section 2.02. Assessment Responses and Educational Results.
When a person completes the Legacy Readiness Assessment, the Company may process the answers provided, assessment completion information, the resulting Legacy Readiness Score, scoring categories and related Legacy Readiness Report. Those materials are educational indicators generated from the respondent's information, not legal opinions or independent certification that an estate plan is valid or effective. The Company does not require a person to purchase Services merely because the person submits an assessment.
Section 2.03. Information About Other Persons.
An individual requesting estate-planning administrative assistance may identify a spouse, partner, child, beneficiary, executor, trustee, agent, guardian or other person. The Company processes this information to support the individual's requested transaction and does not treat the mention of a third party as that person's permission to receive unrelated advertising. Individuals submitting third-party information should have a lawful basis for doing so and should avoid submitting unnecessary personal details.
Section 2.04. Health-Related and Other Sensitive Information.
Customers may voluntarily provide health-related planning choices, healthcare-agent information, incapacity-related instructions or other sensitive details. The Company processes such information only for legitimate, disclosed purposes and in accordance with laws imposing additional conditions. We do not require comprehensive medical records for ordinary guide downloads. Persons should not submit confidential medical diagnoses, account credentials or sensitive identifiers through ordinary unsecured contact forms or unsolicited messages when those details are not necessary for the service requested.
Section 2.05. Information From authorized Representatives and Professionals.
Information may also be received from a person who represents that the person is authorized to act on a Customer's behalf, or from a participating professional in connection with a service expressly requested by the Customer. Such information is not obtained for general data brokerage. The Company may take reasonable steps to confirm authority and may restrict access where conflicting instructions or identity concerns arise.
Section 2.06. Technical Infrastructure and Website Data.
The Company requests personal information principally through information an individual affirmatively provides in a form, questionnaire, telephone conversation, email, text or other requested interaction. LegacyGuard does not request that an individual manually furnish an IP address, cookie identifier or device identifier in a typical estate-planning questionnaire.
Separately, operating a website and communications infrastructure may result in technical data, such as connection records, IP addresses, browser or device information, security logs, timestamps and transactional metadata, being automatically processed by hosts, network operators or other technical providers. Advertising or conversion-measurement technologies may also process event or technical information if installed and activated on a particular page. Such processing is distinct from information a customer deliberately types into a planning form. The Company does not represent that ordinary Internet communications are free of such technical processing.
Section 2.07. Customer-Submitted Information Distinguished From Technical Records.
The Company's estate-planning intake process is principally based upon information affirmatively supplied by a person, including information provided orally for verbatim clerical transcription. This description does not include a representation that internet hosting, routing, service security, email delivery or embedded website functions are incapable of processing IP addresses, device data, event information or similar technical records. A customer's failure to type such information into a form does not establish that no such processing occurs. Technical processing, if any, shall be described and managed under the applicable privacy requirements.
Where a person submits information about a spouse, child, beneficiary, fiduciary or another individual, the Company may use the information only for the legitimate purpose for which it was furnished, subject to the data subject's rights and any applicable authority or notice requirement. A customer's relationship to another person does not, by itself, authorise access to all of that person's confidential or legally privileged information.
Section 2.09. Minors, Beneficiaries and Non-Customer Information.
The Site and paid ordering process are directed to adults with legal capacity to transact. The Company does not knowingly solicit online registration or purchases from children under 13. An adult may, however, submit information concerning minor children as prospective beneficiaries, dependants or persons relevant to guardianship planning. Such third-person information shall not be repurposed for independent advertising or incorporated into unrelated profiles merely because it appears in an estate-planning record. Where a legal representative seeks to exercise a minor's rights, the Company may require evidence of authority consistent with applicable law.
Section 2.11. Personal Information Submitted Through Third Parties.
When an individual authorises another person to supply estate-planning information, LegacyGuard may request evidence of that person's lawful authority before providing access to a customer's records or accepting instructions purporting to change a customer's wishes. Identification as a relative, potential beneficiary, executor, financial adviser or emergency contact does not alone confer authority to direct preparation of a living person's legal documents.
LegacyGuard may restrict the submission of government identifiers, account-access credentials, passwords, complete medical records or unrelated financial statements through ordinary contact forms. Information supplied in excess of what is requested may still be subject to applicable privacy and security duties.
Section 2.12. Records Created in the Course of a Requested Transaction.
The Company may maintain limited records of requests, customer-supplied selections, communications, document-delivery status, payment authorization, identity-verification results and express acknowledgements for lawful service administration, fraud prevention, quality control and dispute resolution. Such records are not equivalent to independent legal advice or a record of an attorney-client relationship with LegacyGuard.
Whether a particular system automatically generates connection or security logs is a matter of its actual configuration. This Policy does not promise that internet service providers, hosting platforms, payment systems or telecommunications networks never process technical connection information.
ARTICLE III. PURPOSES AND LIMITATIONS OF PROCESSING
Section 3.01. Permitted Business Purposes.
Subject to applicable law, LegacyGuard processes Personal Information to (a) respond to an individual's inquiry or request; (b) deliver requested educational materials and assessment results; (c) coordinate customer-directed estate-planning administrative services; (d) transmit necessary information to authorized professional and technical providers involved in a requested service; (e) maintain customer-service, payment and transaction records; (f) verify identity or authority and prevent fraud; (g) perform security, troubleshooting and business-continuity functions; (h) comply with legal duties, preserve evidence and respond to lawful process; and (i) send communications permitted by law and consistent with the individual's choices.
Section 3.02. Data minimization; Purpose Limitation.
LegacyGuard seeks to limit the information requested, retained and accessed to that reasonably necessary and proportionate for the relevant service, operational need or legal obligation. Submission of unnecessary details does not authorise unrestricted secondary use. Customer information obtained for a particular estate-planning workflow shall not be treated as an unrestricted commercial marketing asset. The Company may restrict or redact sensitive fields where those fields are not required by the relevant process.
Section 3.03. Use of Educational Scores and Reports.
Assessment answers, scores and reports may be used to fulfill the individual's request, explain the assessment, support authorized follow-up and coordinate services the individual requests. The Company does not represent that an assessment score is a legal determination or professional suitability finding. The information is not sold to data brokers. Any other use requiring a separate disclosure or consent remains subject to applicable law.
Section 3.04. Marketing and Communications.
The Company may respond to inquiries or deliver information requested by an individual and may send other communications where a lawful basis exists. Promotional email recipients may exercise applicable unsubscribe rights. Consent to automated promotional calls or texts, where required, shall be sought through an appropriate distinct mechanism rather than implied solely from use of the Site. Withdrawal of consent or a marketing opt-out does not necessarily preclude communications necessary to complete a pending transaction or comply with law.
Section 3.05. No Commercial Sale of Customer-Submitted Estate Data.
NO SALE OF PERSONAL INFORMATION FOR COMMERCIAL MONETISATION. LegacyGuard Estate Planning LLC does not sell, rent or license personal information furnished to LegacyGuard, including contact information, questionnaire responses, asset descriptions, beneficiary details and health-related instructions, to data brokers or unrelated parties for independent marketing. We do not offer customer lists or estate-planning files for sale. Information may be disclosed to participating attorneys and restricted business service providers to perform a service requested by an individual, administer transactions, maintain security or comply with law as described in this Policy.
The foregoing statement concerns LegacyGuard's business practice and shall not be construed as an assertion that every disclosure of technical website data is categorically outside a statutory definition of "sale," "sharing" or "targeted advertising." Some privacy laws use those terms to encompass transfers made without monetary payment, including certain advertising identifiers and events. Where an applicable law treats a practice as a sale, sharing or targeted advertising, LegacyGuard shall provide the legally required transparency, opt-out rights or consent. No provision of this Policy authorises the use of estate-planning questionnaire contents for unrelated behavioral advertising.
ARTICLE IV. DISCLOSURES AND RECIPIENTS
Section 4.01. authorized Professional and Technology Providers.
Where reasonably necessary to fulfill a request, information may be made available to participating licensed attorneys, document-processing and workflow providers, customer-support systems, secure hosting and communication providers, payment processors, identity-verification services or other service providers operating for an authorized business purpose. The Company seeks appropriate confidentiality, security and use restrictions for providers acting on its behalf. Independent attorneys and other independently responsible professionals may have separate duties and privacy notices. LegacyGuard does not promise that no information will leave its own systems when a Customer affirmatively requests a service requiring external professional or technical processing.
Section 4.02. Customer-Directed Disclosures.
Information may be disclosed to a person, professional or institution designated or authorized by the individual when reasonably necessary to implement the individual's instructions. Before releasing particularly sensitive information, the Company may request reasonable identity verification or clarification of authorization. A designation in a future estate document does not automatically give that named individual immediate access to the Customer's confidential records.
Section 4.03. Legal Process; Protection; Corporate Transactions.
LegacyGuard may disclose information to the extent reasonably necessary and permitted or required to comply with a valid subpoena, court order, compulsory legal process, regulatory request or other legal duty; to investigate fraud or security incidents; or to protect legal rights and safety. Information may also be processed in a lawful merger, reorganisation, financing or transfer of business assets, subject to statutory notice, purpose limitations and applicable confidentiality obligations. None of these provisions confers a general right to monetise customer estate-planning records for unrelated commercial advertising.
Section 4.04. Advertising and Technical Service Providers.
The Company does not intentionally disclose substantive estate-planning answers, confidential asset-distribution directions or the text of legal documents to advertising platforms for their independent marketing. Depending on the Company's actual website configuration, hosting, campaign attribution, conversion-measurement or embedded services may process limited connection or event data. A disclosure of identifiers or website events may qualify as "sharing," "targeted advertising" or "sale" under an applicable statute even if no money is exchanged. Any legally required notice, consent, preference-management tool or opt-out shall apply to the processing concerned.
A request to receive a free guide, a Legacy Readiness Score or an administrative reply does not itself constitute consent to unrelated automated promotional calls or text messages. Marketing permissions and revocations are addressed under the applicable communications rules and any separate consent supplied at the point of collection.
Section 4.05. Service Providers, Independent Professionals and Instructions to Processors.
Service providers that process information on the Company's behalf may be engaged for hosting, customer relationship management, secure communications, document workflow, identity and payment verification, storage, support or other functions reasonably necessary to fulfill a request. The Company shall address applicable confidentiality, permitted-purpose, security, subprocessor and return-or-deletion obligations in the relevant provider arrangements to the extent required by law. A participating attorney may independently control professional client records under the attorney's own governing obligations; this Policy does not purport to give LegacyGuard the authority to alter, waive or destroy independently maintained privileged material.
An individual's decision to purchase or enquire about estate planning does not constitute authorization to share the individual's answers, healthcare selections, asset-distribution instructions or document contents with advertising platforms for behavioral targeting. No such authorization is created by a general website-use agreement.
Section 4.06. Restricted Access and Onward Use by Business Providers.
To the extent required by applicable privacy law and the parties' functions, LegacyGuard will use contractual or other appropriate safeguards addressing permitted processing purposes, confidentiality, unauthorized onward disclosure, reasonable information security, assistance with required consumer requests and appropriate disposition of information following the service relationship. Such safeguards are not a representation that every participating attorney is a processor acting solely on LegacyGuard's instructions; attorneys may independently determine lawful professional obligations.
LegacyGuard does not authorise a person receiving customer-estate instructions solely to complete a requested administrative service to use those instructions to solicit the customer for unrelated products. An independent provider's own legal obligations or separate customer relationship must be evaluated under the applicable facts and law.
Section 4.07. Demands From Family Members, Fiduciaries and Other Third Parties.
Requests from spouses, children, beneficiaries, prospective trustees, executors, guardians, agents and other third parties will be evaluated under the customer's instructions, verified authority, the status of any relevant documents and applicable law. Mere assertion of family relationship or an expected inheritance does not establish entitlement to private customer information.
The Company may withhold access pending reasonable authentication or resolution of conflicting claims and may comply with a valid subpoena, court order, compulsory process or other lawful obligation. The Company cannot create or extend attorney-client privilege by describing its own administrative communications as confidential.
ARTICLE V. SECURITY; ACCESS; RETENTION
Section 5.01. Administrative, Technical and Physical Safeguards.
LegacyGuard maintains or requires administrative, technical and physical measures reasonably appropriate to the information involved, including, as applicable, access controls, account authentication, restricted service-provider access, protected transmission, staff permissions, secure storage and incident-response procedures. The selection and implementation of particular controls depend on the systems used and foreseeable risk. No system or method of electronic transmission is completely secure, and the Company does not guarantee absolute protection against every unauthorized act.
Where the Company entrusts information to a service provider, the Company will apply applicable contractual and legal requirements to the provider relationship. The Company's security obligations and a provider's separate legal obligations remain governed by the law applicable to each party.
Section 5.02. Access Restrictions; authorized Personnel.
Access to submitted customer information is limited, to the extent practicable, to persons and service providers with a legitimate need relating to a requested service, administrative function, security concern or legal obligation. Information about beneficiaries and family members is not made publicly accessible merely because it appears in a submitted planning questionnaire. The Company may restrict access when it has reasonable grounds to believe that a requester lacks authority or that disclosure would create a material privacy risk.
Section 5.03. Retention and Deletion Criteria.
Personal information shall be retained for periods reasonably necessary to fulfill the stated purpose of collection, administer the customer relationship, comply with applicable legal obligations, address disputes, enforce lawful agreements, maintain necessary financial records and respond to lawful preservation requirements. Retention may differ among customer contact information, assessments, service instructions, completed administrative records, invoices and security records. The Company shall not retain information indefinitely merely because storage is technically available.
Upon expiry of the applicable retention period, information will be deleted, de-identified or otherwise disposed of through a reasonably appropriate process, subject to lawful backup cycles, litigation holds and independently maintained records. A request for deletion is not a direction to alter an executed instrument or to erase a separate attorney's professional file. Where law requires a specific retention schedule or disclosure for a category, that rule governs.
Section 5.04. Incident Management.
If the Company becomes aware of a security incident involving Personal Information, it may take reasonable steps to contain and investigate the event, preserve relevant records, identify affected information, coordinate with applicable providers and provide notices to affected individuals or regulators where legally required. Notice timing, content and method are governed by applicable law. Public statements of security commitments do not replace incident-specific legal obligations.
Section 5.05. Accuracy and Customer Corrections.
Individuals are encouraged to report inaccurate contact details or incorrect customer-directed information. The Company may request verification before making a material correction to sensitive records. Corrections within LegacyGuard's administrative records do not automatically amend a signed legal instrument or alter an independent attorney's professional file. Any requested legal amendment must follow the process applicable to the document and professional engagement.
Section 5.06. Security Events and Statutory Notification.
If the Company determines that a security event constitutes a legally notifiable breach, notices shall be provided to affected persons, regulators or other recipients as and when required by the law applicable to the incident, subject to lawful investigation, law-enforcement and remediation exceptions. The Company shall not treat a contractual liability limitation, a service-provider arrangement or a general statement about the limits of internet security as a waiver of mandatory breach-notification duties. Technical investigations may require information from hosting, communications and other restricted processors.
Section 5.07. Security Controls and Limits of Confidentiality.
LegacyGuard shall evaluate reasonably foreseeable risks associated with the sensitivity of the information processed and maintain legally required administrative, physical and technical safeguards appropriate to the Company's activities, its service providers and applicable law. Access, authentication, secure transmission, vendor oversight, personnel controls and incident response shall be addressed as appropriate to the risks and applicable requirements.
No transmission or storage method can be guaranteed to be completely secure. This statement does not disclaim legally required reasonable-security duties, contractual security commitments or liability for conduct for which applicable law prohibits an exclusion.
Section 5.08. Preservation of Records and Disputed Instructions.
Where reasonably necessary to preserve evidence of an actual or reasonably anticipated dispute, comply with a lawful preservation request or investigate suspected fraud or unauthorized access, LegacyGuard may temporarily preserve or restrict relevant records to the extent permitted by law. Preservation is subject to confidentiality, access and retention requirements and is not an assumption of responsibility for resolving family disputes.
A consumer's deletion or correction request will be considered in light of applicable statutory rights and any lawful exceptions. Any refusal or limitation shall be explained to the extent legally required.
ARTICLE VI. PRIVACY RIGHTS AND CHOICES
Section 6.01. Rights Under Applicable Law.
Depending upon the individual's state of residence and the Company's status under the relevant law, the individual may have rights to confirm processing, access certain data, obtain a portable copy, correct inaccuracies, request deletion, opt out of certain sales, sharing or targeted advertising, limit certain processing of sensitive data and appeal a denial. Rights are subject to statutory thresholds, scope limitations, authentication requirements and exceptions. The Company does not represent that every right listed applies identically to every person or transaction.
Section 6.02. Submission and Verification of Requests.
Requests concerning Company-held Personal Information may be sent to [email protected] with sufficient information to identify the requester and describe the request. The Company may use reasonable, proportionate steps to authenticate identity or authority, especially where disclosure would reveal confidential family or financial information. A verified authorized agent may act where the applicable law permits. The Company shall not require unnecessary sensitive identifiers merely to initiate an ordinary request. Response and appeal periods shall be governed by the applicable privacy law.
Section 6.03. Exceptions; Separate Professional Records.
Privacy rights do not necessarily require deletion or disclosure of records that must be maintained for legal compliance, transaction performance, security, evidence preservation or an applicable professional obligation. An attorney independently holding records under a separate professional engagement may be responsible for handling rights requests concerning those records. LegacyGuard will not misrepresent its technical or legal authority to access, alter or delete records held exclusively by another organization.
Section 6.04. Marketing Choices and Revocation.
Individuals may opt out of promotional emails by using the available unsubscribe mechanism or contacting the Company. Text-message recipients may use applicable opt-out instructions, including supported keyword replies, and may withdraw legally revocable consent by reasonable means. A promotional opt-out does not prevent legally required or customer-requested transactional messages. The Company will not condition a purchase on promotional consent where applicable law prohibits that practice.
Section 6.05. Children and Minors.
The Site's general education and administrative Services are directed to adults. The Company does not knowingly solicit children to submit their information for independent marketing purposes. References to children within an adult Customer's family or estate-planning questionnaire may be processed for the limited purposes of the requested service, subject to applicable protections for minors and relevant state law. If the Company discovers information collected in a manner prohibited by law, it shall take legally required remedial steps.
Section 6.06. authorized Agents; Appeals; Non-Discrimination.
Where a privacy statute gives an individual the right to use an authorized agent, seek reconsideration or appeal a refusal, or obtain information about an adverse decision, the Company shall provide the procedure required by that statute. The Company may verify the identity and authority of the person making the request and shall not require unnecessary additional personal information solely to exercise a statutory right. Where available under applicable law, a consumer may appeal a denial by writing to [email protected] with the subject line "Privacy Rights Appeal". The Company shall respond within the period prescribed by the law that governs the particular request.
Section 6.07. Digital Advertising Opt-Out Signals.
To the extent that any applicable law treats the Company's actual digital processing as a sale, sharing or use for targeted advertising, the Company shall provide the legally required opt-out method and honour qualifying browser-based or universal opt-out signals where required. A request concerning technical advertising identifiers is distinct from a request to delete estate-planning records retained for an active requested service. The availability or operation of any website preference mechanism depends on the technology actually deployed and the law applicable to the processing. This Policy does not assert that merely emailing an opt-out request is necessarily sufficient where the governing law requires a browser, website or in-product control.
Section 6.08. Separate Choices for Marketing and Sensitive Data.
A request to obtain a free guide, take an educational assessment or receive a service-related update does not by itself establish consent to unrelated marketing communications, an automatic telephone dialing system, artificial or prerecorded voice calls, or the use of sensitive estate-planning information for targeted advertising. Where separate consent is legally required, LegacyGuard shall seek it through a distinct and appropriate process.
Consent may be withdrawn and statutory opt-out rights exercised as applicable law permits. An individual will not be required to surrender a non-waivable privacy right as a condition of obtaining an otherwise available service.
ARTICLE VII. STATE-SPECIFIC DISCLOSURES
Section 7.01. California Residents.
To the extent LegacyGuard qualifies as a covered "business" under the California Consumer Privacy Act and related regulations (collectively, the "CCPA"), California residents may exercise the applicable rights to know, access, correct, delete, obtain information about disclosures, opt out of sale or sharing and limit certain uses of sensitive personal information. The Company will not discriminate unlawfully for exercising a covered right. Requests may be submitted using the contact method in Section 6.02 or another legally required method provided at collection.
The categories of Personal Information that may be processed in connection with applicable transactions include identifiers and contact details; customer and commercial records; family and beneficiary relationships; asset and financial descriptions voluntarily supplied for planning; communications and forms; assessment responses and derived educational scores; and, where submitted, health-related or other sensitive data. The sources and purposes are detailed in Articles II and III, and potential recipient categories are described in Article IV. The specific categories relevant to an individual depend upon the information actually submitted and the Site features used. Applicable disclosures at the point of collection and statutory opt-out mechanisms supplement this Policy where required.
If a particular technical integration constitutes sale or sharing under the CCPA, the Company will implement the required opt-out method, including recognition of covered opt-out preference signals where mandated. No statement that LegacyGuard does not sell customer estate-planning files is intended to limit rights relating to other covered disclosures.
Section 7.02. Other State Consumer Privacy Laws.
Where applicable, rights under the privacy statutes of Colorado, Connecticut, Delaware, Indiana, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia and other states are governed by the particular statute, its effective date, applicability thresholds and lawful exceptions. Individuals may seek information about a specific right through the contact method in Section 6.02. LegacyGuard will apply the legally required appeal process, opt-out choices and non-discrimination protections where a statute imposes them. This Section is not a representation that the Company is a covered entity under every listed law.
Section 7.03. Consumer Health Data.
Certain information supplied for healthcare directives, incapacity planning or related purposes may qualify as "consumer health data" under Washington's My Health My Data Act or another applicable statute. Where such law governs, the separately identified Consumer Health Data Privacy Notice supplies additional information about categories, sources, purposes, recipient categories, rights and contact methods. Consent to collection and consent to sharing will be obtained separately where the governing law requires them, unless an applicable exception is available.
The Consumer Health Data Privacy Notice is separately available in the Legal & Privacy materials. This Policy does not substitute for any additional notice, independent consent or consumer rights established by applicable health-data law.
Section 7.04. Nevada and Other Statutory Requests.
To the extent applicable, verified requests under Nevada's online privacy law or any other specialised state requirement may be made using the contact channel in Section 6.02. The Company shall comply with lawfully applicable requirements concerning covered information, rights to direct that certain information not be sold and other regulatory obligations. A request will be interpreted consistently with the definitions and exceptions of the relevant statute.
Section 7.05. Notice at Collection; Consumer Request Administration.
Where applicable law requires a notice at or before collection, LegacyGuard will make the required information available in connection with the form or interaction through which information is obtained. An individual may request information about applicable access, deletion, correction or opt-out rights by contacting [email protected]. Reasonable verification may be required before disclosing confidential records. Where a law requires more than one request method or an appeals process, those methods and timelines will apply.
The existence of a right or exception under one state's statute does not confer or eliminate a right under a different state's statute. A request under this Section does not itself amend any signed estate-planning instrument.
Section 7.06. Notice at Collection and Retention Disclosure.
Where the California Consumer Privacy Act applies to the Company, the legally required notice at or before collection shall identify the personal-information categories and purposes involved, disclose the sale or sharing status of those categories, and state applicable retention periods or the criteria used to determine them. Applicable notice requirements may extend to information submitted through a lead form, assessment, telephone intake, checkout, third-party hosted questionnaire or embedded component. The general retention criteria in Section 5.03 and the categories described in Articles II through IV must be consistent with, and do not replace, any separate or more specific notice required at collection.
A consumer's exercise of a legally available right of access, correction, deletion, portability, limitation, opt-out or appeal shall not be penalised in a manner prohibited by applicable law. Statutory exemptions, identity verification and limits on disclosure of another person's private or privileged information shall continue to apply.
Section 7.07. State and Sector-Specific Requirements.
A resident's rights and the Company's duties may differ under the privacy, consumer-protection, breach-notification, health-data, biometric, communications and other laws of the state concerned. Nothing in this Policy represents that a particular comprehensive state privacy act applies to every interaction or that a statutory right exists where its applicability criteria have not been met. Conversely, the Company's small size or the absence of general privacy legislation in a state does not eliminate independently applicable duties concerning security, breaches, deceptive practices, consumer health data, confidentiality or communications.
Section 7.08. Additional Consumer-Privacy Disclosures Where Required.
To the extent an applicable state privacy law requires a notice at collection, a category-by-category account of information processed during a specified period, retention periods or criteria, a designated opt-out mechanism, recognition of an opt-out preference signal, an appeals process or a separate sensitive-data notice, LegacyGuard shall supply the relevant disclosure or mechanism as required by that law. The Company shall not represent that a right is unavailable merely because it is not described at length in this general Policy.
A business's eligibility for, and the scope of, a statutory exception must be determined under the statute rather than inferred from the Company's size or the use of a third-party technology provider. Where the law requires a standalone consumer-health-data policy prominently linked from the homepage, listing a notice as a tab within a general legal page alone may be insufficient.
ARTICLE VIII. GENERAL PROVISIONS
Section 8.01. International Processing.
LegacyGuard operates from the United States. Service providers involved in communications, hosting or support may process information in other jurisdictions subject to their arrangements and applicable law. Individuals located outside the United States may have additional legally protected rights. The Company does not represent that all information remains physically stored on premises or in data centres owned by LegacyGuard.
Section 8.02. Independent Professional Relationships.
LegacyGuard provides educational and administrative coordination services and is not a law firm. The Company's Privacy Policy does not override a participating attorney's independent duties concerning confidentiality, client files or privilege. Where an attorney-client relationship is formed, the attorney's professional duties and disclosures apply separately. Estate-planning data provided to the Company is not automatically privileged solely because an estate-planning matter is involved.
Section 8.03. Changes to this Policy.
The Company may revise this Policy to reflect changes in its practices, services or law and will post an updated revision date. Where applicable law requires advance notice or consent for a material new use of Personal Information, publication of a revised policy alone shall not substitute for that requirement. Prior uses remain subject to the statements and legal obligations applicable when those uses occurred.
Section 8.04. Contact Details.
Questions about this Policy, privacy-rights requests and concerns about information supplied to the Company may be directed to LegacyGuard Estate Planning LLC, [email protected], or through the contact methods at https://legacyguardep.com/. Where applicable law requires an additional request method or specific point-of-collection notice, the Company will make that method or notice available in the relevant context.
Section 8.05. No Contractual Waiver Through Privacy Notice.
This Policy is a disclosure of the Company's information practices and not a contractual waiver of statutory privacy rights, breach remedies, confidentiality duties or mandatory security standards. Any permitted limitation in a separately accepted commercial agreement applies only as far as the law governing the particular claim allows.
Any material change to a practice for which advance notice, a new opt-out opportunity or affirmative consent is required will not be implemented solely by revising the date displayed on this Policy.