Privacy Policy
Last updated: October 2026
What we collect
When you submit a request through our website, we collect the name and contact details you provide. During the legacy creation process, we collect and store biographical material you supply: written life stories, photographs, audio recordings, and other documents relating to the person whose legacy you wish to preserve. We do not collect payment information directly — billing is handled separately if applicable.
How we use your information
We use contact details solely to respond to your request and coordinate the legacy creation process. Biographical material is used exclusively to build the AI virtual twin for the person you have nominated. We do not sell, share, or use this material for any other purpose, including advertising, model training for third parties, or analytics beyond the scope of your project.
Data storage and security
All data is stored on servers located in the United Kingdom and European Economic Area. Biographical material is encrypted at rest and in transit. Access is restricted to authorised Online Legacy staff involved in your project. Private profile URLs are randomly generated and not guessable; they are the primary access control mechanism for your legacy profile.
Data retention
We retain your contact details and biographical material for the duration of your hosting plan. Upon expiry or at your request, all material is securely deleted within 30 days unless you request an extension. You may request deletion at any time by contacting us.
Your rights
Under UK GDPR and applicable data protection law, you have the right to access, correct, or delete your personal data at any time. You may also withdraw consent for processing biographical material, which will result in the suspension of the associated legacy profile. To exercise any of these rights, contact us at the address below.
Cookies
Our website uses a minimal number of session cookies required for the admin interface. We do not use tracking cookies, advertising pixels, or third-party analytics tools that identify individual visitors.
Contact
For privacy enquiries or to exercise your data rights, submit a request via our contact page at https://online-legacy.com/contact. We aim to respond within 10 business days.