Privacy Policy
Last Updated: January 2026
This Privacy Policy describes how Legacy Business Group LLC ("Company," "we," "us," or "our") collects, uses, stores, and shares information when you access or interact with our websites, platforms, services, or communications (collectively, the "Services").
By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please discontinue use of the Services.
Questions or concerns? Contact us at support@legacybizgroup.com.
1. COMPANY ROLE AND SCOPE
Legacy Business Group LLC is a North Carolina-based holding company. We provide administrative, operational, compliance, and infrastructure support to affiliated businesses, subsidiaries, and managed brands, including but not limited to Golden Ticket Online Arcade ("GTOA"), Legacy Global Group LLC, and Legacy Family Home Care.
Legacy Business Group LLC does not directly operate consumer-facing platforms unless expressly stated. Services may be offered through affiliated or managed entities and may be subject to additional terms, policies, or disclosures specific to those entities.
2. INFORMATION WE COLLECT
Personal Information You Provide
We collect personal information that you voluntarily provide when you:
- Register for an account or service
- Contact us for support or inquiries
- Subscribe to communications
- Submit forms or applications
- Interact with our affiliated businesses
This information may include:
- Full name
- Email address
- Phone number
- Mailing or billing address
- Date of birth (where required for age verification)
- Account login credentials
- Communication preferences
- Payment information (processed through secure third-party payment processors)
- Transaction history and records
- Government-issued identification (where required for verification or compliance)
- Customer support communications and correspondence
- Employment or contractor application information
You are responsible for ensuring that all information you provide is accurate, current, and complete.
Information Collected Automatically
When you access or use our Services, we may automatically collect certain technical and usage information, including:
- IP address and device identifiers
- Browser type and version
- Operating system
- Pages visited and features used
- Date and time of access
- Referring and exit pages
- Clickstream data and navigation patterns
Information from Third Parties
We may receive information about you from:
- Third-party service providers and business partners who assist with our operations
- Payment processors and financial institutions
- Identity verification services
- Marketing and analytics providers
- Social media platforms (if you connect your account)
- Publicly available sources
- Affiliated businesses within our holding company structure
Cookies and Similar Technologies
We use cookies, web beacons, pixels, and similar tracking technologies to:
- Maintain your session and preferences
- Analyze usage patterns and improve Services
- Deliver personalized content and advertising
- Monitor and prevent fraud or unauthorized access
You may control cookie preferences through your browser settings, though disabling certain cookies may limit functionality.
Sensitive Personal Information
We do not intentionally collect sensitive personal information as defined by applicable privacy laws (such as health data, biometric data, or precise geolocation), except where explicitly required for specific services and with your express consent or as permitted by law.
3. HOW WE USE YOUR INFORMATION
We process your personal information for legitimate business purposes, including:
Service Delivery and Operations
- Providing, operating, maintaining, and supporting our Services and affiliated platforms
- Creating, managing, and authenticating user accounts
- Processing transactions and fulfilling orders
- Delivering customer support and responding to inquiries
- Verifying identity and eligibility for services
Communications
- Sending transactional notifications (account activity, confirmations, receipts)
- Delivering service updates, policy changes, and security alerts
- Providing customer support responses
- Sending promotional and marketing communications (with your consent where required)
- Conducting surveys and gathering feedback
Business Improvement and Analytics
- Analyzing usage patterns and trends
- Improving Services, features, and user experience
- Developing new products and services
- Conducting research and testing
- Generating aggregated, de-identified analytics
Security and Compliance
- Preventing, detecting, and investigating fraud, abuse, or unauthorized activity
- Enforcing our Terms of Service and other agreements
- Complying with legal, regulatory, or contractual obligations
- Responding to legal requests and protecting legal rights
- Maintaining records required by law
Marketing and Advertising
- Personalizing content and offers
- Delivering targeted advertising (where permitted)
- Measuring campaign effectiveness
- Building customer relationships
We only process personal information when we have a lawful basis under applicable law, including:
- Performance of a contract with you
- Compliance with legal obligations
- Legitimate business interests
- Your explicit consent (where required)
4. HOW WE OBTAIN YOUR CONSENT
We obtain your consent to collect and process personal information through the following methods:
Express Consent
- Clicking "I Agree," "Submit," or similar affirmative action when creating accounts or accepting terms
- Checking opt-in boxes for marketing communications or specific data processing
- Providing information through forms, applications, or during account registration
- Verbally confirming consent during phone interactions (where recorded or documented)
- Signing written agreements, contracts, or authorization forms
Implied Consent
- Continuing to use Services after being notified of changes to this Privacy Policy
- Voluntarily providing information for a specific purpose (such as entering a sweepstakes or requesting customer support)
Withdrawal of Consent
You may withdraw consent at any time by:
- Adjusting account settings or communication preferences
- Following unsubscribe instructions in marketing emails
- Replying STOP to text messages
- Contacting us at support@legacybizgroup.com
- Submitting a formal privacy request
Withdrawing consent does not affect the lawfulness of processing conducted prior to withdrawal and may limit your ability to use certain Services.
5. EMAIL AND TEXT MESSAGE COMMUNICATIONS
Email Communications
If you provide your email address and consent to receive communications, you may receive:
- Account notifications and confirmations
- Service updates and announcements
- Security alerts and verification messages
- Promotional offers and marketing content
- Newsletters and educational content
- Customer satisfaction surveys
Opting Out: You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link at the bottom of any promotional email or by contacting support@legacybizgroup.com.
Text Message Communications
If you provide your mobile phone number and opt in to SMS communications, you may receive:
- Account alerts and transaction confirmations
- Security and verification codes
- Service notifications
- Promotional offers (with explicit consent)
- Time-sensitive updates
Message Frequency: Message frequency varies based on your account activity and preferences. You may receive up to 10 messages per month for promotional content and unlimited transactional or security messages.
Carrier Charges: Standard message and data rates may apply based on your mobile carrier plan. We are not responsible for any charges incurred.
Opting Out: Reply STOP to any text message to unsubscribe from future SMS communications. Reply HELP for assistance. You may also contact support@legacybizgroup.com to manage SMS preferences.
Important: Opting out of marketing communications does not affect transactional, operational, or legally required messages necessary to provide Services or fulfill contractual obligations.
6. COOKIES AND TRACKING TECHNOLOGIES
We and our third-party service providers use cookies, web beacons, pixels, local storage, and similar technologies to collect information about your interaction with our Services.
Types of Technologies Used
Essential Cookies: Required for core functionality, security, and service delivery. These cannot be disabled without significantly impacting your ability to use Services.
Functional Cookies: Enable enhanced features and personalization based on your preferences and previous interactions.
Analytics Cookies: Help us understand how users interact with Services, measure performance, and identify areas for improvement.
Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness. May track your activity across different websites.
Third-Party Service Providers
We may use third-party analytics and advertising services, including but not limited to:
- Google Analytics
- Facebook Pixel
- Marketing automation platforms
- Customer relationship management (CRM) tools
- Payment processing systems
These providers may use their own cookies and tracking technologies subject to their respective privacy policies.
Managing Cookie Preferences
You can control cookies through:
- Browser settings (most browsers allow you to refuse or delete cookies)
- Third-party opt-out tools (such as the Digital Advertising Alliance's opt-out page)
- Device settings for mobile applications
Important: Disabling certain cookies may limit functionality and prevent access to features that require session management or personalization.
7. INFORMATION SHARING AND DISCLOSURE
We do not sell personal information to third parties.
We may share personal information in the following circumstances:
With Affiliated Businesses
We may share information with subsidiaries, parent companies, and affiliated entities within the Legacy Business Group LLC holding company structure for:
- Coordinated service delivery
- Shared administrative and operational functions
- Consolidated compliance and reporting
- Cross-platform account management
With Service Providers and Vendors
We engage third-party service providers who perform functions on our behalf, including:
- Payment processors and financial institutions
- Hosting and cloud infrastructure providers
- Customer support and communication platforms
- Identity verification and fraud prevention services
- Marketing and analytics providers
- Legal, accounting, and professional service firms
- Shipping and logistics partners
- Technology and software vendors
These providers are contractually obligated to protect your information and may only use it for the specific purposes we authorize.
For Legal and Compliance Purposes
We may disclose information when required or permitted by law:
- To comply with legal obligations, court orders, subpoenas, or regulatory requirements
- To respond to lawful requests from government authorities or law enforcement
- To enforce our Terms of Service, policies, and agreements
- To protect the rights, property, safety, or security of the Company, our users, or the public
- To investigate, prevent, or take action regarding suspected fraud, illegal activity, or policy violations
- In connection with legal proceedings or investigations
Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, bankruptcy, or similar business transaction, personal information may be transferred to the acquiring or successor entity. You will be notified of any such change via email or prominent notice on our Services.
With Your Consent
We may share information for purposes not described in this Policy with your explicit consent or at your direction.
Aggregated or De-Identified Information
We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, marketing, or other business purposes without restriction.
All information sharing is conducted under appropriate confidentiality, security, and data protection obligations.
8. DATA RETENTION
We retain personal information only for as long as reasonably necessary to:
- Fulfill the purposes described in this Privacy Policy
- Provide ongoing Services and support
- Comply with legal, regulatory, tax, and accounting obligations
- Resolve disputes and enforce agreements
- Protect against fraud and maintain security
Retention Periods vary based on:
- The type of information collected
- The purpose for which it was collected
- Legal or contractual requirements
- Operational business needs
When personal information is no longer needed, we securely delete, destroy, or anonymize it in accordance with our data retention and disposal policies.
Account Deletion: If you close your account or request deletion of your personal information, we will delete or anonymize your data within a reasonable timeframe, except where retention is required by law or necessary for legitimate business purposes (such as fraud prevention, dispute resolution, or audit requirements).
You may request information about our retention practices for specific data categories by contacting support@legacybizgroup.com.
9. DATA SECURITY
We implement reasonable and appropriate administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, disclosure, alteration, loss, misuse, or destruction.
Security Measures Include:
- Encryption of data in transit and at rest (where appropriate)
- Secure authentication and access controls
- Regular security assessments and audits
- Employee training on data protection and confidentiality
- Vendor management and third-party security requirements
- Incident response and breach notification procedures
- Physical security controls for facilities and equipment
Important Limitations:
No method of electronic transmission or storage is completely secure. While we strive to protect your personal information, we cannot guarantee absolute security. Use of the Services is at your own risk.
Your Responsibility:
You are responsible for:
- Maintaining the confidentiality of your account credentials
- Using strong, unique passwords
- Logging out of your account when using shared devices
- Promptly notifying us of any suspected unauthorized access
If you believe your account has been compromised or your personal information has been accessed without authorization, immediately contact support@legacybizgroup.com.
10. CHILDREN'S PRIVACY
Our Services are not intended for, marketed to, or designed to attract individuals under the age of 18.
We do not knowingly collect, use, or disclose personal information from minors without verifiable parental or guardian consent, except as permitted by applicable law.
Age Verification: We may implement age verification mechanisms to prevent access by minors.
Parental Rights: If you are a parent or legal guardian and believe we have collected information from your child without proper consent, please contact us immediately at support@legacybizgroup.com. We will take reasonable steps to investigate and, if appropriate, promptly delete such information from our systems.
Compliance: We comply with the Children's Online Privacy Protection Act (COPPA) and other applicable laws regarding the collection of information from minors.
11. YOUR PRIVACY RIGHTS
Depending on your location and applicable law, you may have rights regarding your personal information.
General Rights (Where Applicable)
- Right to Access: Request a copy of the personal information we hold about you
- Right to Correction: Request correction of inaccurate or incomplete information
- Right to Deletion: Request deletion of your personal information (subject to legal exceptions)
- Right to Restriction: Request that we limit how we process your information
- Right to Object: Object to certain types of processing (such as direct marketing)
- Right to Data Portability: Receive your information in a structured, machine-readable format
- Right to Withdraw Consent: Withdraw previously given consent at any time
- Right to Non-Discrimination: Exercise your privacy rights without facing discriminatory treatment
How to Exercise Your Rights
To submit a privacy request or exercise your rights:
- Email support@legacybizgroup.com with "Privacy Request" in the subject line
- Provide sufficient detail to identify you and specify your request
- We may require identity verification to protect your information
Response Time: We will respond to verified requests within the timeframe required by applicable law (typically 30-45 days, with possible extensions for complex requests).
Limitations: Certain rights may be subject to exceptions or limitations under applicable law. We may deny requests that are manifestly unfounded, excessive, or would compromise the privacy or security of others.
12. UNITED STATES PRIVACY RIGHTS
Residents of certain U.S. states have additional privacy rights under state law.
California Residents (CCPA/CPRA)
California residents have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:
- Right to know what personal information is collected, used, and shared
- Right to delete personal information
- Right to opt out of sale or sharing of personal information
- Right to correct inaccurate information
- Right to limit use of sensitive personal information
- Right to non-discrimination for exercising privacy rights
We do not sell personal information as defined by California law.
We do not share personal information for cross-context behavioral advertising.
Authorized Agent: You may designate an authorized agent to submit requests on your behalf. Agents must provide written authorization and we may require verification of your identity and the agent's authority.
Shine the Light: California residents may request information about disclosures of personal information to third parties for direct marketing purposes (if applicable) once per year.
Other U.S. State Privacy Rights
Residents of Colorado, Connecticut, Utah, Virginia, and other states with comprehensive privacy laws have similar rights, including:
- Access to personal information
- Correction and deletion rights
- Opt-out of targeted advertising, sale, or certain profiling
- Appeal denied privacy requests
To Exercise Rights: Contact support@legacybizgroup.com or use the methods described in Section 11.
Appeals Process: If we deny your request, you may appeal by responding to our decision email or contacting us directly. We will respond to appeals within the timeframe required by applicable law.
Verification: We may request additional information to verify your identity before processing requests. This protects your privacy and prevents unauthorized access to your information.
13. DO-NOT-TRACK SIGNALS
Some web browsers transmit "Do-Not-Track" (DNT) signals to websites. At this time, there is no universal standard for how companies should respond to DNT signals.
We currently do not respond to DNT signals or similar mechanisms due to the lack of industry consensus and standardization. We will continue to monitor developments and may update our practices as standards evolve.
You may control cookies and tracking through browser settings and third-party opt-out tools as described in Section 6.
14. INTERNATIONAL DATA TRANSFERS
Legacy Business Group LLC is based in the United States. If you access our Services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where we or our service providers operate.
Data Protection Standards: We take reasonable steps to ensure that personal information transferred internationally is protected in accordance with this Privacy Policy and applicable law. This may include:
- Standard contractual clauses
- Adequacy decisions
- Other legally recognized transfer mechanisms
By using our Services, you consent to the transfer of your information to the United States and other jurisdictions that may have different data protection laws than your country of residence.
15. THIRD-PARTY LINKS AND SERVICES
Our Services may contain links to third-party websites, applications, or services that are not owned or controlled by Legacy Business Group LLC.
We are not responsible for the privacy practices, content, or policies of third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit or services you use.
Social Media Integration: If you interact with social media features (such as sharing buttons or plugins), information may be collected and shared according to the policies of the relevant social media platform.
16. UPDATES TO THIS PRIVACY POLICY
We reserve the right to update, modify, or replace this Privacy Policy at any time to reflect:
- Changes in our business practices
- Legal or regulatory requirements
- Technological developments
- User feedback and evolving privacy standards
Notification of Changes:
- The "Last Updated" date at the top of this Policy will be revised
- Material changes may be communicated via email, prominent notice on our Services, or other appropriate methods
- Continued use of Services after changes become effective constitutes acceptance of the updated Policy
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.
17. CONTACT US
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
For privacy-specific inquiries, please include "Privacy Request" or "Privacy Inquiry" in your subject line.
We will make reasonable efforts to respond to all inquiries and requests in a timely manner in accordance with applicable law.