top of page

​

Privacy Policy​

 

Legends & Legacies CIC

Last updated: January 2026

​

1. Who We Are

Legends & Legacies is a community interest company delivering safeguarding-first Life Story Recordings and resident-led podcasts for older adults in care settings and, where appropriate, in the community.

Data controller: Legends & Legacies CIC
Location: London, UK
Contact: info@legendsandlegacies.co.uk

We are the data controller for the personal information we collect and use.

​​

2. What Information We Collect

We may collect and process:

  • Names and contact details (residents, family members, care home staff, or representatives)

  • Audio or video recordings and any related written content created as part of our services

  • Consent records, capacity notes where relevant, and safeguarding documentation

  • Messages sent via our website, email, or other agreed communication channels

  • Technical information such as cookies and basic website analytics​

​

3. How We Use Your Information

We use personal information to:

  • Deliver Life Story Recordings and resident-led podcast services

  • Create, store, and provide recordings to residents or authorised recipients, according to consent and resident choice

  • Communicate with residents, families, and care providers about delivery, scheduling, and support needs

  • Meet safeguarding duties and legal obligations

  • Improve our services and website

​

We do not sell personal data.

​

4. Legal Basis for Using Your Data

Under UK GDPR, we process personal data using one or more of the following lawful bases:

  • Consent (for recordings and any sharing beyond agreed private use)

  • Legitimate interests (to deliver and improve services, and to communicate appropriately with care providers and families)

  • Legal obligations (including safeguarding and record-keeping duties)

​

Where we rely on consent, it can be withdrawn at any time.

​ 

5. How Long We Keep Data

We keep information only for as long as necessary:

  • Contact details: while arranging delivery and providing services, or while responding to enquiries

  • Recordings: stored only in line with consent and resident choice, and deleted if consent is withdrawn or deletion is requested where applicable

  • Consent and safeguarding records: retained in line with safeguarding responsibilities and legal obligations

​

6. Sharing Your Data

We do not share personal data with third parties except:

  • Where required by law or safeguarding duty

  • Where there is clear, explicit consent from the resident (or authorised representative where appropriate)

  • Where we use trusted service providers to store or process data securely (for example, email, secure storage, or website platforms). These providers act under contract and only process data on our instructions.​

​

7. Your Rights

We do not share personal data with third parties except:

  • Where required by law or safeguarding duty

  • Where there is clear, explicit consent from the resident (or authorised representative where appropriate)

  • Where we use trusted service providers to store or process data securely (for example, email, secure storage, or website platforms). These providers act under contract and only process data on our instructions.​

​

8. Cookies and Website Data

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Correct inaccurate data

  • Request deletion of your data in certain circumstances

  • Restrict or object to processing in certain circumstances

  • Withdraw consent at any time (where processing is based on consent)

  • Complain to the Information Commissioner’s Office (ICO)

To exercise these rights, contact: info@legendsandlegacies.co.uk​

​

9. Contact Us

If you have questions about this policy or how we handle your data, please contact:
info@legendsandlegacies.co.uk

bottom of page