Privacy Policy

This Privacy Policy explains how Legacy processes personal information in line with POPIA principles and operational security safeguards.

1. Scope

This policy applies to candidate, trainee, employee, and business-contact information processed through Legacy public forms, recruitment workflows, and internal portals.

2. Candidate Data Processing

We process application details, work history, contact information, screening answers, and documents for recruitment and training decisions. By submitting an application, candidates provide consent for this purpose-limited processing.

3. Purpose Limitation

Data is collected only for legitimate hiring, onboarding, quality assurance, and service-delivery objectives. We do not sell personal data.

4. Retention and Deletion

Candidate records are retained according to operational and legal requirements, then archived or deleted securely. Data-subject deletion requests may be submitted via our contact page and are reviewed in line with regulatory obligations.

5. Security Safeguards

Legacy applies access controls, audit logging, server-side validation, and secure storage practices. Our platform is aligned with and capable of supporting PCI and HIPAA environments, without claiming certification.

6. Contact

Questions about this policy can be submitted via the Legacy contact form.