Website Privacy Notice

Effective Date: September 7, 2026

1. Who We Are

Christie Legacy Co LLC ("we," "us," or "our") provides bookkeeping, business reporting, operations, and workflow services to owner-led businesses. This notice covers christielegacyco.com, direct digital-product purchases, and ordinary business inquiries.

2. Information We Collect

Depending on how you interact with us, we may collect:

• Contact details, such as your name, business email, phone number, company, role, and mailing address.
• Inquiry details, such as the service area and short description you choose to share.
• Service-fit details, such as whether you use QuickBooks, how current the books are, the last reconciled month, approximate transaction volume, account count, payroll use, and desired start timeframe.
• Business records connected to an inquiry or engagement, such as messages, scheduling details, contracts, invoices, and project materials.
• Order and fulfillment information, such as the product, purchaser contact details, Stripe order and payment references, amount, currency, purchase date, tax status, delivery status, access-token hash, receipt link, and refund or revocation status. We do not receive or store full card numbers or card security codes.
• Limited website and device information, such as IP address, browser type, pages viewed, and referral source.
• Communication preferences, including consent and marketing choices.

3. How We Collect and Use Information

We collect information from you, people you authorize, the business systems used for our work, and public business sources. We may use it to respond to questions, evaluate service fit, process and deliver purchases, provide order support, manage contracts and invoices, handle refunds or disputes, protect our systems, improve the website, keep required records, and comply with law.

4. How We Share Information

We may share information with service providers that support website hosting, email, forms, customer relationship management, file storage, scheduling, meetings, invoicing, payments, security, and professional services. These providers may include Google Workspace, HubSpot, Stripe, Supabase, Netlify, and other providers actually used to host, process, or deliver the requested interaction.

We may also share information with advisors, insurers, legal authorities, a business successor, or another party at your direction or with your consent.

We do not sell personal information for money or use it for cross-context behavioral advertising.

A purchase does not enroll a buyer in marketing. Marketing is optional and requires its own permitted signup or consent. The website asks for a separate yes-or-no choice before Stripe opens and records that answer with the paid order, separately from the email address required for receipts, delivery, and order support. Declining marketing does not stop transactional order messages.

5. Sensitive Information

Do not send passwords, authentication codes, full payment-card information, bank-login credentials, Social Security numbers, protected health information, or other highly sensitive records through ordinary email or a public form. If confidential files are needed, we will explain the appropriate next step.

6. Cookies and Analytics

The website may use essential cookies needed for security and basic operation. Optional analytics may include Google Analytics and HubSpot. We do not send names, email addresses, payment details, form responses, or website addresses containing customer information to analytics. You may decline or change your analytics choice through Cookie Settings. Advertising and session-replay tools are not enabled.

7. Retention and Security

Our general retention periods are seven years after the related tax year for tax, accounting, invoice, and transaction records; up to six years after a transaction for order and fulfillment records; two years after closure for routine support messages; twelve months after the last meaningful contact for unconverted inquiries; and about thirty days for routine website and server logs. We may retain information longer for taxes, fraud prevention, security, a dispute, legal hold, court order, or another legal obligation, and may reduce or delete unnecessary detail earlier.

We use reasonable safeguards appropriate to the information, including access controls, multi-factor authentication where available, device protections, approved business systems, data minimization, and incident-response procedures. No method of transmission or storage is completely secure.

8. Your Choices and Requests

You may ask to access, correct, or delete personal information you provided, or opt out of marketing messages, by emailing info@christielegacyco.com. We may need to verify your identity and may retain information when required by law or for contracts, security, fraud prevention, or disputes.

9. Children and Third-Party Links

Our website and services are intended for business users and are not directed to children under 18. We do not knowingly collect personal information from children through the website.

Third-party websites and services follow their own privacy and security practices.

10. Accessibility

To report difficulty accessing this notice or another part of the website, email info@christielegacyco.com. We will work to provide the information in an accessible format.

11. Changes to This Notice

We may update this notice when our practices or legal obligations change. The Effective Date identifies the current version.

12. Contact

info@christielegacyco.com