Privacy Policy

This policy explains what personal data Legency Media collects when you use legencymedia.com, why we collect it, and what rights you have over it. It applies to this website only.

Who we are

Legency Media is a trading name of Fionn Design Limited, a company registered in Ireland (company number 722903, VAT IE4040423RH). Our principal place of business is Kilgarve North, Newtown, Abbeyknockmoy, Tuam, Co. Galway, H54 XV58, Ireland.

We are the data controller for the personal data described in this policy. You can reach us through our contact page or by email at [email protected].

What data we collect

We collect the information you choose to provide through enquiries, bookings and client questionnaires. We also run our own first-party analytics on this site, described below, which does not use cookies and does not identify who you are. We also run Google Analytics, but only for visitors who accept it on the banner.

Enquiries and saved drafts

The form at /get-in-touch/ asks for your name, email, company, company size, industry, preferred start, the support you need and a relevant budget or a request for guidance. Your current website and goals are optional. We use these details to understand and respond to your enquiry. You can book a call or email us instead of using the form.

Clicking Continue saves the answers you have entered to that point in our private Cloudflare storage. We do not collect unfinished answers as you type. An essential cookie lets the same browser return to its saved enquiry. Incomplete enquiries expire 30 days after the last saved step. You can use Delete saved draft in the form to remove an incomplete enquiry sooner.

The optional, unchecked follow-up box lets you ask us to email you once about an enquiry you leave unfinished. Without that permission we do not send an incomplete enquiry reminder. It does not subscribe you to marketing. You can withdraw permission by returning to Your details and unchecking the box, deleting the draft, or emailing [email protected]. Completing the enquiry stops incomplete enquiry follow-ups.

When you press Send enquiry, we keep the completed form in our private enquiry store for up to 365 days. Resend also delivers your submitted answers to our private business email inbox so we can respond. If an engagement proceeds, relevant details may form part of our correspondence and client records. We do not send your form answers to analytics tools. To limit abuse, we use a short-lived counter derived from your IP address; the form's counter expires after one hour and does not store the raw address.

When you book a call. The /schedule/ page embeds a Calendly booking widget. When you use it, the name, email address and any notes you enter go straight to Calendly, who process that data under their own privacy policy. Calendly then shares your booking details with us so we can prepare for and hold the call.

When you email us. If you email [email protected] directly, we keep that correspondence, along with any information you choose to include in it.

When you fill in a client questionnaire. Some clients receive a private link to a questionnaire at /q/. The answers you type save as you go, so nothing is lost if the page closes. They are stored with the questionnaire in our hosting provider's (Cloudflare) storage, and when you press Send we receive them and our email provider, Resend, delivers you a copy if you ask for one. Answers are kept while the work they inform is live, and deleted when you ask us to delete them.

When you use one of our tools. The private report converter at /tools/ processes a file you choose to upload. The file's contents are sent to Anthropic, the AI provider whose Claude model performs the conversion, and the result comes straight back to you. We never store the file or the result. The only record kept is a daily usage counter tied to your IP address, which expires after 48 hours.

When you browse the site. We run Rialto, our own first-party analytics tool, on every page. It records the pages you view, the things you click, how far you scroll and how long you actively read, along with the page title, your screen size, the site that referred you (kept only as a hostname) and any campaign tags in the address. It does not use cookies, does not use any cross-site tracking identifier, and does not identify who you are. It keeps one short random value in tab memory so a visit counts as one session; that value is gone the moment the tab closes. Visitors are counted using a value rebuilt from scratch each day, which cannot be traced to a person or linked across days. Because it holds nothing that identifies you, it runs for everybody and is not affected by your answer to the cookie banner.

If you accept analytics cookies. We then load Google Analytics 4, which sets cookies on your device and sends details of your visit to Google, including your IP address, the pages you view and general information about your device and browser. Google processes this on our instructions, as our processor.

Google Analytics 4 uses your IP address to estimate roughly where in the world you are and then discards it. It does not store IP addresses, and that is built into the product rather than a setting we chose, so it applies whatever we do.

We never grant Google permission to use this data for advertising or personalisation, and we do not run Google Ads or any other advertising product on this site. The advertising permissions are switched off in the consent signal we send, and they are never switched on, whatever you answer on the banner.

If you reject, or ignore the banner, none of that happens. No Google script is loaded, no Google Analytics cookie is set, and nothing about your visit reaches Google.

Cookies

Saving an enquiry sets an essential cookie so the form can securely recover your progress. This works independently of your analytics choice. Accepting analytics loads Google Analytics and its cookies; rejecting keeps Google Analytics off. Calendly sets its own cookies separately when you use the booking widget on /schedule/. Our own analytics tool, Rialto, uses no cookies either way. You can change your answer at any time from the "Cookie choices" link in the footer of every page, and withdrawing is exactly as easy as accepting. Full detail, including the name and lifetime of every cookie, is in our Cookie Policy.

Other third-party services

The booking page loads the Calendly widget from Calendly's own servers. Loading any resource from a third-party server sends technical information such as your IP address to that server, the same as loading an external image would. We do not receive or store that information ourselves.

If you accept analytics cookies, Google Analytics is loaded from Google's servers in the same way. If you do not, it is never requested. Our fonts and images are served from our own domain. Pages with animated artwork load one animation library from the jsDelivr content delivery network, which receives the same technical information any external server does.

Why we process your data

We rely on the following legal bases under GDPR:

• Consent - for Google Analytics and the cookies it sets. This is why it does nothing at all until you accept, and stops when you withdraw. You can withdraw at any time from the "Cookie choices" link in the footer of every page, and withdrawing is as easy as accepting.
• Consent - also where a third-party tool asks for it directly, such as Calendly through its own notice inside the booking widget.
• Legitimate interests - saving enquiry progress at your request, responding to submitted enquiries or email, limiting form abuse, and running a website that explains what we do. Draft saving helps you finish an enquiry without starting again, with a short retention period and the ability to delete it. Also for our own cookieless analytics, in understanding which pages get used so we can improve the site. That tool stores nothing on your device and holds nothing that identifies you, so the effect on your privacy is minimal.
• Consent - sending one follow-up about an incomplete enquiry when you select the optional follow-up box. You can withdraw this as described above, without affecting the lawfulness of processing before withdrawal.
• Steps prior to a contract - preparing for and holding a discovery call you have booked, and following up with a proposal if you ask for one.

We do not sell your personal data, and we do not run a marketing mailing list on this site.

How long we keep your data

Saved enquiry drafts expire after 30 days without a saved step. Completed forms expire from the enquiry store after 365 days. We keep associated email and call correspondence for as long as it is relevant to a live or potential engagement, and for a reasonable period afterwards in case you get back in touch. Contract and invoicing records are kept for the period Irish law requires.

Google Analytics data, if you accept it, is held for 2 months for event data and 14 months for user-level data, after which Google deletes it. These are the retention settings on our property.

Our own analytics holds nothing that identifies you at all. The value used to count visitors is rebuilt from scratch every day, so there is nothing to retain about a person and nothing that can be linked from one day to the next.

Questionnaire answers are kept while the work they inform is live and for a reasonable period afterwards, and deleted when you ask. The report converter keeps nothing you upload; its usage counters expire after 48 hours.

Who we share your data with

Cloudflare hosts the site and handles the network connection, which means it processes your IP address to serve the page and to protect the site. This happens for every visitor and is how the site is delivered at all. Cloudflare also stores enquiry drafts, completed enquiries and client questionnaire answers on our behalf. Access to the enquiry inbox is restricted to authorised staff.

Calendly receives what you enter into the booking widget, if you use it.

Google receives your visit data through Google Analytics, but only if you accept analytics cookies. If you reject or ignore the banner, we do not send your visit data to Google Analytics. Google Workspace hosts our business email, including the enquiry notifications we receive.

Resend delivers submitted enquiry notifications to our private business email inbox. It also delivers questionnaire emails if you use a questionnaire and ask for a copy of your answers.

Anthropic receives the contents of a file you upload to the report converter, for the sole purpose of converting it, and only when you use that tool.

We do not share your data with advertisers or data brokers, and we do not sell it.

International transfers

Cloudflare, Calendly, Google, Resend and Anthropic are all US companies. Cloudflare serves the site from whichever of its locations is nearest you. Using the booking widget may mean your booking data is processed outside Ireland and the EEA under Calendly's own safeguards. Enquiry data stored with Cloudflare may also be processed outside the EEA under Cloudflare's data processing terms and applicable transfer safeguards. If you accept analytics cookies, Google may process your visit data outside the EEA.

Google relies on the EU-US Data Privacy Framework and on standard contractual clauses approved by the European Commission for these transfers. Calendly and Cloudflare set out their own safeguards in their privacy policies.

Your rights

Under GDPR, you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything that's inaccurate
• delete your data, where we don't have a legal reason to keep it
• restrict or object to how we use it
• move it to another provider (data portability)
• withdraw your consent to analytics cookies at any time, from the "Cookie choices" link in the footer of every page

To use any of these rights, email [email protected] or get in touch through our contact page. You can also complain to the Data Protection Commission (dataprotection.ie), Ireland's supervisory authority, if you think we've got something wrong.

Children

This site is aimed at businesses, not children. We don't knowingly collect data from anyone under 16.

Changes to this policy

We'll update this page if what we collect or how we use it changes, and update the date at the top when we do.