Privacy policy.

01Who I am

This website, ioanalucretia.com, is run by Ioana Lucreția through her business, Legacy Thought Leaders LLC, a limited liability company registered in Wyoming, USA. In this policy, “I”, “me” and “my” mean Ioana Lucreția and Legacy Thought Leaders LLC.

I am responsible for the personal information described here. Under European and UK data protection law, that makes Legacy Thought Leaders LLC the “controller” of your data.

Registered address: 30 N Gould St, STE R, Sheridan, WY 82801, USA
Email: ioana@legacythoughtleader.com

This policy covers the website, the forms on it, my newsletter The Next Legacy, and booking the Threshold Session. Cookies are explained in more detail in the cookie policy.

02What I collect and why

I collect information in two ways: what you choose to give me, and some technical information your browser sends when you visit.

When	What I collect	Why
You send a message through the contact form	Your name, email address, and whatever you write in your message.	To read your message and reply.
You request an invitation to Legacy Lab	Your name, email address and the answers you give in the form.	To consider your request personally and write back to you.
You ask to hear about the book, The Legacy Builder’s MAP™	Your first name and email address.	To tell you about the book: new chapters, early copies and its release. You can unsubscribe at any time.
You subscribe to The Next Legacy	Your email address (and first name, if you gave it). Like most email services, the newsletter tool records whether a letter was opened and which links were clicked.	To send you the weekly letter and understand which letters are useful.
You book the Threshold Session	Your name, email address, chosen date, time and time zone, any answers you give to booking questions, and confirmation that you paid.	To confirm and hold your session, send reminders, and keep the records the law requires for payments.
You browse the website	Technical information such as your IP address, browser and device type, the pages you visit, the site that referred you, and your approximate location (country or city).	To keep the site working and secure, and to see in aggregate which pages are useful.

Payments

Payments for the Threshold Session are handled by Stripe or PayPal through the booking page. I never see or store your full card or bank details.

What you share in a session

What you tell me in a session stays private. I don’t record sessions unless we both agree in advance. I keep private notes from our sessions so I can support you well. They are stored securely and never shared. I keep them for up to 2 years after our last session, then delete them.

What I don’t collect

I don’t ask for sensitive information, such as health details, and I don’t use automated decision-making or profiling that has legal or similarly significant effects on you. Please don’t send sensitive information through the forms. If it matters to our work, we can talk about it in a session.

03Legal bases

If you are in the European Economic Area or the UK, the law asks me to name the reason I am allowed to use your information. These are mine:

• Your consent. For the newsletter and for analytics cookies where consent is required. You can withdraw consent at any time, for example by unsubscribing.
• A contract with you. To book, prepare and hold the Threshold Session you paid for.
• Legitimate interests. To reply to messages you send me, consider Legacy Lab requests, and keep the website running and secure. I only rely on this where it doesn’t override your own rights and interests.
• Legal obligation. To keep payment and tax records.

04Who I share it with

I don’t sell your personal information, and I don’t share it with anyone for targeted advertising. I use a small number of services to run my work. They handle your information on my behalf, or as independent providers for their own part of the process:

• Wix (Wix.com Ltd., Israel) hosts the website and runs its forms, analytics, the Journal, and the newsletter through Wix Email Marketing.
• TidyCal (Sumo Group Inc., USA) runs the booking page for the Threshold Session.
• Stripe and PayPal process payments made through TidyCal. They also use payment information for their own purposes, such as preventing fraud, under their own privacy policies.
• Zoom (Zoom Communications, Inc., USA) hosts the online session.

Each of these providers has its own privacy policy on its website. I may also share information with professional advisers, such as an accountant, where needed, or with authorities if the law requires it.

05International transfers

Legacy Thought Leaders LLC is a US company, and the services above store and process information in the United States and other countries. If you are in the EEA or the UK, this means your information leaves your country.

When that happens, each transfer is covered by a safeguard the law recognises:

• Wix is based in Israel, which the European Commission and the UK recognise as giving adequate protection to personal data. For its own service providers elsewhere, Wix uses the European Commission’s Standard Contractual Clauses.
• Zoom takes part in the EU-US Data Privacy Framework and also uses Standard Contractual Clauses.
• Stripe takes part in the EU-US Data Privacy Framework, its UK Extension and the Swiss-US Data Privacy Framework.
• PayPal transfers data within its group under Binding Corporate Rules approved by European data protection authorities.
• TidyCal relies on the European Commission’s Standard Contractual Clauses.

You can find the details in each provider’s own privacy policy.

06How long I keep it

I keep information only as long as I need it for the reason I collected it:

• Book updates: until you unsubscribe, or until the book’s launch updates end.
• Session notes: up to 2 years after our last session.
• Newsletter: until you unsubscribe. After that I keep only a record that you unsubscribed, so I don’t write to you again.
• Messages and Legacy Lab requests: up to 2 years after our last exchange.
• Booking and payment records: 7 years, as tax and accounting law requires.
• Analytics: as set in the Wix dashboard. retention period to confirm

07Your rights

Depending on where you live, the law gives you rights over your personal information. I am happy to honour these requests wherever you live.

If you are in the EEA or the UK

• Access: ask for a copy of the information I hold about you.
• Correction: ask me to fix anything that is wrong or incomplete.
• Deletion: ask me to delete your information.
• Restriction and objection: ask me to pause or stop using it, including any use based on legitimate interests.
• Portability: ask for your information in a format you can take elsewhere.
• Withdraw consent: at any time, without affecting anything done before.
• Complain: to your local data protection authority. In the UK, that is the Information Commissioner’s Office (ICO). I would be grateful for the chance to put things right first.

If you are in the United States

Some US states, including California, give residents the right to know what personal information a business collects, to access it, to correct it, to delete it, and to opt out of its sale or sharing for targeted advertising. I don’t sell or share personal information in that way, so there is nothing to opt out of, but you can make any of the other requests. You can also ask someone you authorise to make a request for you. I will never treat you differently for using these rights.

How to ask

Write to me through the contact form, or by email at ioana@legacythoughtleader.com. Tell me what you would like me to do. I may need to confirm your identity before acting on a request. I will reply within one month, or within the time your local law allows.

To stop the newsletter, use the unsubscribe link at the bottom of any letter.

08Security

I use reputable providers and take reasonable steps to keep your information safe, such as limiting access to it. No website or online service can be completely secure, so I can’t promise that information will never be exposed. If something goes wrong that affects you, I will let you know as the law requires.

09Children

This website and my work are meant for adults. I don’t knowingly collect information from anyone under 16. If you believe a child has sent me their information, please let me know and I will delete it.

10Changes to this policy

If the way I handle information changes, I will update this page and the date at the top. If a change is significant, I will also tell newsletter subscribers and clients by email.

11Contact

Questions about this policy, or about your information, are welcome. Use the contact form or write to ioana@legacythoughtleader.com.

Legacy Thought Leaders LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA

This policy describes how I handle personal information. It is written in plain language and is not legal advice.