Privacy Policy

Last updated: May 11, 2026. This policy describes how Legacy Asset Lab ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or subscribe to our content.

Information we collect

We only collect information you voluntarily provide or that's necessary to operate the site:

  • Email address — when you opt in to a lead magnet, newsletter, or product purchase.
  • Name and message — when you contact us via the contact form.
  • Payment information — handled directly by our payment processor (e.g., Stripe, Gumroad). We do not store full card numbers on our servers.
  • Technical data — anonymized IP-truncated analytics, browser type, referring URL. Only collected if you consent to analytics cookies.

How we use your information

  • Send you the content or product you requested.
  • Send periodic newsletters or product updates (with one-click unsubscribe).
  • Process payments and deliver digital products.
  • Respond to support and editorial inquiries.
  • Understand how the site is used so we can improve it.

What we don't do

  • We never sell your personal data.
  • We never share your email address with third-party marketers.
  • We never use dark-pattern unsubscribe flows.

Cookies

We use minimal cookies — primarily for session management and (with your consent) anonymized analytics. See our Cookie Policy for the full list. You can decline analytics cookies via the banner that appears on your first visit.

Third-party services we use

  • Netlify — site hosting and form processing.
  • ConvertKit (or equivalent) — email delivery and newsletter management.
  • Stripe / Gumroad — payment processing for paid products.
  • Google Analytics 4 — anonymized site analytics (only with consent).

Each of these has its own privacy policy. We only share with them what's necessary to provide the service.

Your rights

Depending on your jurisdiction (GDPR, CCPA, etc.) you have the right to:

  • Access the personal data we hold about you.
  • Correct or update inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Opt out of marketing communications (one-click unsubscribe in every email).
  • Opt out of the sale of personal information (we don't sell it, but the right exists).

To exercise any of these rights, email privacy@legacyassetlab.com or use the contact form.

Data retention

We retain email subscriber data until you unsubscribe. Purchase records are retained for 7 years to meet tax recordkeeping requirements. Contact-form messages are retained for 18 months.

Security

All site traffic is encrypted with TLS. Email data is stored in vendor-managed databases with industry-standard security controls. Payment data never touches our servers.

Children

This site is intended for adults. We do not knowingly collect data from anyone under 16.

Updates to this policy

If we materially change how we handle data, we will update this page and email active subscribers before the change takes effect.

Contact

Privacy questions: privacy@legacyassetlab.com.