PRIVACY NOTICE
ENQUIRIES • SECURITY • ANALYTICS • RIGHTS

PRIVACY

This notice explains what personal data LegacyXV2 handles, why it is handled, which third parties may be involved, and what rights you have.

Last updated:

This page is written to explain the practical data handling behind the LegacyXV2 website, especially for form enquiries, security checks, analytics, and affiliate-linked content.

Who is responsible for your data

Data controller: LegacyXV2, as the operator of this website.

For privacy-related requests, use the website enquiry routes and include the subject line Privacy Request, or contact via the relevant website contact method made available on the Business or Merch pages.

What data may be collected

  • Enquiry details: name, email address, subject/topic, and message contents submitted through website forms.
  • Security and anti-bot data: verification and challenge-related data processed through Cloudflare Turnstile.
  • Basic website analytics: traffic and page-usage information, if privacy-focused analytics tools are enabled.
  • Affiliate interaction data: if you click an affiliate link, the third-party platform may process information under its own terms and privacy notice.

Why this data is used

Enquiries

To receive, review, and respond to messages sent through the website, including merch questions, business proposals, and other direct contact.

Security

To protect forms and site functionality from spam, abuse, automated attacks, and malicious traffic.

Analytics

To understand basic website usage and performance, where enabled, so the site can be maintained and improved.

Affiliate transparency

To disclose that some product links may generate commission if a qualifying purchase is made, at no extra cost to the user.

Lawful bases

LegacyXV2 will usually rely on legitimate interests for website security, essential site operation, and handling relevant direct enquiries, and may rely on consent where a specific form or action is clearly presented on that basis. The correct lawful basis depends on the actual way the data is collected and used.

Important: this page should match the real setup. If your forms, analytics, processors, or retention practices change, this notice must change as well.

Third-party services and processors

  • Cloudflare Turnstile: used for bot protection and form security.
  • Cloudflare: may also be used for website delivery, protection, and analytics features, depending on the live setup.
  • Resend: may be used for email delivery or routing of website enquiries, depending on how the contact system is configured.
  • Affiliate platforms: where affiliate links are used, those services operate under their own policies once you leave this site.

Third-party providers may process data outside the UK. Where that happens, it should be handled using the provider’s applicable safeguards, terms, and data-processing arrangements.

Retention

Enquiry data should only be kept for as long as reasonably necessary to review, respond to, and close the request, and then for any limited period needed for record-keeping, follow-up, or legal protection. If you currently work on a 90-day retention target for standard enquiries, say so consistently across the site and backend processes.

Your rights

Depending on the circumstances, UK GDPR may give you rights including:

  • the right to be informed;
  • the right of access;
  • the right to rectification;
  • the right to erasure;
  • the right to restrict processing;
  • the right to object; and
  • the right to lodge a complaint with the Information Commissioner’s Office.

To exercise a rights request, contact LegacyXV2 using a website enquiry route and use the subject line Privacy Request. Give enough detail to identify the request clearly.

Affiliate disclosure

Affiliate links may be used on this site.

Where affiliate links are included, LegacyXV2 may earn a commission from qualifying purchases. This should not increase the price paid by the user. Always treat the final retailer page and its own privacy terms as separate from this website.

Changes to this notice

This notice may be updated from time to time to reflect changes in services, processors, legal wording, site functionality, or contact methods. The date at the top of this page should be updated whenever a meaningful change is made.