Privacy Policy

1. Who We Are

YourLegacy Tech ("we", "our", or "us") is a digital design and technology studio based in Miami, FL, USA. We operate the website yourlegacy.tech and any related services.

YourLegacy Tech is a brand of Amper Group LLC, a Florida limited liability company.

2. Information We Collect

We only collect information you voluntarily provide through our contact form, the website check and newsletter signup:

• Contact form and website check: name, email address, phone (optional; in the check, your email or your phone is enough), company (optional), service of interest, message (optional) and the business details you pick from a list: sector, goal, whether you have a website or use social media, how customers find you, how you keep track of contacts, team size, indicative budget and timing. From the check we also keep the recommendation we showed you.
• Newsletter signup: email address only.
• Technical data: standard server logs (IP address, browser type, pages visited) retained for up to 30 days. Server error logs are kept without personal data and deleted after 90 days. With each request we also keep your approximate time zone (for example, “America/New_York”), which our hosting provider infers from the connection, without storing your IP address: it is only used to call or write to you at permitted hours.

3. How We Use Your Information

We use your information exclusively to: respond to your inquiry, send you the newsletter you subscribed to, and improve our services. We do not sell or rent your personal data. Only if you accept «Marketing» cookies, when you send the contact form or the website check we may share your email and phone with Meta as a SHA-256 hash, to measure our ads; the Cookie Policy (section 5) explains it. With «Reject» or «Analytics» only we share nothing.

4. Email Service Provider

We use Resend (resend.com) to deliver transactional emails. Your email address is transmitted to Resend solely to send the reply or newsletter you requested. Resend's privacy policy is available at resend.com/legal/privacy-policy.

5. Data Retention

Contact form submissions are retained in our email inbox for up to 2 years. Newsletter subscriptions are retained until you request removal. You may request deletion of your data at any time by emailing us.

6. Your Rights

You have the right to access, correct, or delete your personal data. To exercise these rights, contact us at the email below. We will respond within 30 days.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated date. Continued use of our website after changes constitutes acceptance of the new policy.

8. International transfers

YourLegacy Tech is based in Florida (USA). If you write to us from the European Union, your data is processed in the US, with the providers in this table. For each one we rely on the EU-US Data Privacy Framework (DPF) if it is certified and, if not or as a backup, on the European Commission’s standard contractual clauses (GDPR art. 46). The basis is the one each provider declares: we are checking each certification on the official DPF list and completing the signature of its processor agreement. Where it says “to be confirmed”, we have not checked it yet.

You can ask us for a copy of the safeguards of any provider by writing to contact@yourlegacy.tech.

9. Security and audit logs

To protect your data we record who on our team views, exports or changes data, and sign-ins to our panel, without passwords (the IP and the email of a failed attempt, only as an encrypted fingerprint). Raw sign-in and access logs are deleted after 12 months; all we keep from them for 7 years is a sealed summary, with counts and keyed encrypted fingerprints, without any of your data. The trail of changes and its sealed copy, which cannot be deleted or altered, are kept for 7 years so we can demonstrate compliance (GDPR art. 5.2). In that copy, everything that identifies a person (emails, phone numbers, names, identifiers and notes) is stored only as a keyed encrypted fingerprint, never in clear. What we delete at your request disappears from the CRM; only that fingerprint remains in the sealed copy, unused, until it expires. Errors on our websites, already without personal data, are also kept in our own copy for 90 days; internal alert marks and the count of rejected calls to our scheduled jobs, for 30 days, with nobody’s data. If there were a security incident, its record is kept for 5 years.

10. Minors

Our services, newsletter and the forms on this website are for adults 18 and over. We do not knowingly collect data from minors. If you believe a minor has given us their data, write to contact@yourlegacy.tech and we will delete it.

11. «Do Not Track» and Global Privacy Control

If your browser sends the Global Privacy Control (GPC) or «Do Not Track» (DNT) signal, we honour it as if you had chosen «Reject», even if you had accepted a cookie category before: we do not load Google Analytics, the Meta Pixel or PostHog, we do not share the hash of your email or phone with Meta, and we do not store in your browser the code of the partner who referred you or the campaign. This applies to the whole website, including /nfc and the digital cards. Without those signals, none of that is switched on until you allow it in the cookie notice: analytics with «Analytics» and the rest with «Marketing» (or both with «Accept all»). The error log (Sentry), which uses no cookies and is not used for advertising, keeps working.

12. Business outreach

YourLegacy Tech (the controller named in section 1) may email or call businesses to offer its services. If we wrote to you or called you without you contacting us first, this section explains where we got your details and what we do with them. You can reach us at contact@yourlegacy.tech.

What data and where it comes from: the name, website, address, phone and contact email that the business itself publishes (on its website or its Google Maps listing) and, for the person who runs it, their name and title as listed in the Florida business registry (Sunbiz). We do not buy lists, we do not guess email addresses and we do not store personal social media profiles. We collected the public listings with the Apify tool.

Why and on what basis: to offer our services to your business (direct marketing). Our legitimate interest is making our services known to businesses they may be useful to, and we have weighed it against your rights (GDPR art. 6(1)(f) and recital 47). We do not use this data for anything else, we make no automated decisions about you and we never sell or share it.

Who receives it: only the providers that host our CRM (Google Cloud) and the tool we send our emails with, under contract and only on our instructions. Some are in the United States: see section 8.

How long: 12 months without a reply, counted from our last step with your business; then it is deleted automatically. If you ask us to stop, we delete your contact details right away and keep only a one-way encrypted fingerprint (a “hash”) of your email, domain or phone in our suppression list, so that we never contact you again.

Your rights: you can object at any time and we will stop (reply “unsubscribe” or “no”, or write to contact@yourlegacy.tech). You can also ask to access, correct or delete your data, or to restrict its use. We answer within one month; opt-outs from our emails are honored within 10 business days at the latest, usually the same day. If you are in the European Union, you can complain to your data protection authority (in Spain, the AEPD, www.aepd.es).

What we do not do: we do not send unsolicited commercial emails to people or businesses in the European Union or Canada, and we do not send commercial text or WhatsApp messages to anyone who has not given us permission.