Privacy Policy

Last updated: please insert the date of publication before launch.

1. Data controller

Legend Smart Ltd, registered in the United Kingdom under company number 17281241, registered office 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ, is the data controller. Contact: support@legend-smart.com.

2. Information we collect

• Account information: name, email address, password (stored only as a secure hash), account settings.
• Payment information: billing name, billing country, and transaction references. Card details are collected and processed directly by our payment processor (for example Stripe) and are not stored by Legend Smart.
• Usage information: which exercises and lessons you open or mark complete, progress records, device and log data.
• Customer support communications: the content of messages you send us and our replies.
• Cookies: see our Cookie Policy.

3. Legal bases

• Contract: to create your account, deliver the program and provide support.
• Legal obligation: accounting, tax and record-keeping.
• Legitimate interests: service security, fraud prevention and improving our content.
• Consent: non-essential cookies and any marketing email. You can withdraw consent at any time.

4. Service providers

We use carefully selected providers to operate the service, including hosting, email delivery, customer support tooling and payment processing. Providers act on our instructions under written agreements.

5. Payment processors

Payment card information is processed through our configured payment provider. Legend Smart does not store raw payment card numbers on its systems.

6. Retention

Account and progress data are retained while your account is active and for a reasonable period afterwards. Transaction and invoice records are retained for the period required by law (generally six years in the UK).

7. International transfers

Because we serve customers internationally, including in Canada and South Africa, data may be transferred outside your country. Where required, transfers are protected by appropriate safeguards such as standard contractual clauses or adequacy decisions.

8. Your rights

• Access a copy of your personal data
• Correction of inaccurate data
• Deletion of data where applicable
• Restriction of processing
• Objection to processing based on legitimate interests
• Data portability
• Withdrawal of consent at any time

To exercise a right, email support@legend-smart.com.

9. Complaints

You may complain to the UK Information Commissioner's Office (ico.org.uk) or to the data protection authority in your country of residence.

10. Security

We use encrypted connections, hashed credentials, access controls and logging. No online service can be guaranteed to be perfectly secure, but we work to protect your data.

11. Contact

Legend Smart Ltd, 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. Email: support@legend-smart.com.