Privacy and security
Privacy and security
How records are handled, what is excluded, who removes personal data and what we do not hold.
How we contact you
We will never ask you to send files, export links, passwords or payment to us. Every de-identification vendor and buyer is named to you in writing before any transfer. If a message that appears to come from Legacy Data asks for any of these, do not act on it. Forward it to security@legacydata.ai.
De-identification
What is de-identified
Direct identifiers are replaced or removed before records are licensed. Health records, children's data, HR, payroll and compensation records, credentials, client-held material and privileged material are never offered, so they never reach that step.
What the company's de-identification vendor is asked to do. Methods vary with the vendor and the records.
| In the records | Before anything is shared |
|---|---|
| Health records, children's data, HR, payroll and compensation records, credentials, client-held material and privileged material | Excluded at the start. Records that cannot be adequately de-identified are not licensed. |
| Names, contact details and account numbers | Replaced with labels that stay the same throughout, such as [PERSON_1] or [ORG_1], so the record remains readable. |
| Details that could point to one person, such as an unusual role or an exact date | Made broader: a month instead of a day, a general role instead of a title. |
| Passwords, keys and access tokens | Deleted. |
| Anything the company asks to leave out | Excluded from the description shown to buyers and from the approved transfer scope. |
Records that cannot be adequately de-identified are not licensed. No method removes every risk of re-identification, and de-identified records can still count as personal data under some privacy laws, such as the GDPR.
The contract the company signs with the buyer is where use is limited. We ask that contract to prohibit re-identification. Deletion and retention sit in that contract. We cannot control or guarantee a buyer's conduct after transfer.
An example
Illustrative example, not real data.
Before: Client: Brightwell Foods, 27 Harbour Lane, Eastbridge Contact: Maren Holloway, Head of Finance, 555 0187, m.holloway@example.net Account: BW-40718, card ending 4821, last sign-in from 203.0.113.24 Work: 3 to 21 March. Migrated 2,400 product records and rebuilt the quarterly sales dashboard. 46 hours of work, invoice settled in full on 28 March. Note: Maren Holloway approved the work. Tobias Wrenfield confirmed delivery for Brightwell Foods. Reviewed by Odile Marsh.
After: Client: [Company], [Address] Contact: [Person 1], [Role], [Phone], [Contact] Account: [Account], card ending [Card], last sign-in from [ID] Work: 3 to 21 March. Migrated 2,400 product records and rebuilt the quarterly sales dashboard. 46 hours of work, invoice settled in full on 28 March. Note: [Person 1] approved the work. [Person 2] confirmed delivery for [Company]. Reviewed by [Person 3].
Privacy, legal and security
Exclusions and limitations
How records are handled, who removes personal data, and the limits of our role. We do not display third-party certification marks and make no claim to any certification.
- We never take custody of your data. You (or your administrator) export it with your own admin tools, such as your workspace owner's export, under a written scope, and transfer it directly to the vendor or buyer.
- Before any buyer is approached, we ask for evidence of who has legal authority to sell, such as board approval, an assignment, a court order or security documents.
- We help identify which customer contracts, employee notices, platform terms and consents may affect the deal, and flag issues for you and your lawyers. The rights holder makes the final decision and gives the warranties to the buyer.
- Before any transfer, a specialist de-identification vendor engaged by the company removes or masks names, contact details, credentials and other direct identifiers. De-identification reduces, but cannot completely eliminate, the risk that individuals could be re-identified, so buyer contracts also prohibit re-identification.
- Health records, children's data, HR, payroll and compensation records, credentials, client-held material and privileged material are never offered. Personal data of people in the EU, EEA, UK or Switzerland is left out by default. It is included only if the rights holder chooses to include it after advice from its own local lawyers, completes the legal steps those laws require first, and we agree to offer it.
- We structure deals with GDPR, UK GDPR and US state privacy laws such as the CCPA in mind. Each seller and buyer remains responsible for its own legal compliance.
- We sign a confidentiality agreement with you before detailed discussions. Until you approve a buyer in writing, we share only a description that does not name the company, and we ask buyers to keep it confidential. Any samples go, once de-identified, from your de-identification vendor directly to a buyer you have approved, never to us.
- Before introducing a buyer, we review who they are and how they intend to use the data, and we require written use restrictions in the buyer contract. We cannot control or guarantee a buyer's conduct after transfer.
- We delete the information you submit through this site on request (see our Privacy Policy). For data transferred in a deal, deletion and retention terms are set in the buyer contract; we will pass on deletion requests to the buyer, but the buyer controls its own systems.
- You pay us no fee. We are paid only by buyers, and we disclose in writing how any buyer-side fee is calculated before you sign our agreement, and its amount, once known, before you sign with a buyer.
- We are not a law firm, broker-dealer, investment adviser or tax adviser. You should get independent legal and tax advice.
Start a confidential review
For companies that are operating, winding down or closed. The first step is a review of what the company holds; no files are transferred.