1. Who We Are

Legacy Coras is a gambling addiction support service based in Leeds, UK. We are committed to protecting your privacy and handling your personal data in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR).

Data Controller:
Legacy Coras
Pelican Works, Wakefield Road, Rothwell
Leeds, West Yorkshire, LS26 0RS
Email: info@legacycoras.com
Phone: +1 864 293 0252

2. Information We Collect

Personal Data

We may collect the following types of personal information when you contact us:

• Contact information (first name, email address, phone number)
• Communication preferences and preferred contact times
• Any information you voluntarily provide when contacting us for support

Special Category Data

In the course of providing gambling addiction support services, we may process special category personal data relating to your health and wellbeing. This will only be processed with your explicit consent, where necessary for the provision of health services, or where you have manifestly made such data public.

Cookies and Website Data

Our website uses cookies and similar technologies. We only use:

• Essential cookies: Required for the website to function properly
• Analytics cookies: To understand how visitors use our website (only with your consent)

3. How We Use Your Information

We process your personal data for the following purposes:

• To respond to your enquiries and provide support services
• To communicate with you about our services
• To improve our website and services
• To comply with legal obligations

4. Legal Basis for Processing

We process your personal data based on:

• Consent: When you provide explicit consent for us to process your data (Article 6(1)(a) UK GDPR)
• Legitimate interests: To respond to enquiries and improve our services (Article 6(1)(f) UK GDPR)
• Vital interests: Where necessary to protect someone's life or health
• Legal obligation: Where required by law (Article 6(1)(c) UK GDPR)

5. Data Sharing

We do not sell, rent, trade, or otherwise commercialise your personal information. We may share your data only in the following limited circumstances:

• With your explicit consent
• With healthcare professionals involved in your care (with your consent)
• Where required by law or court order
• To protect vital interests (life or death situations)
• With trusted service providers who assist us in operating our website and services (under strict confidentiality agreements)

6. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected:

• Contact form enquiries: 2 years from last contact (unless you request earlier deletion)
• Client records: 7 years after last contact (in line with healthcare record retention guidelines and professional requirements)
• Website cookies: As specified in our cookie settings

7. Your Rights

Under UK data protection law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate personal data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Limit how we use your data
• Right to data portability: Receive your data in a portable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time

To exercise any of these rights, please contact us at info@legacycoras.com. We will respond within one month of receiving your request.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Secure data transmission and storage
• Access controls and staff training
• Regular security assessments
• Incident response procedures

9. International Transfers

We primarily process data within the UK. If we need to transfer data outside the UK, we will ensure appropriate safeguards are in place to protect your data in accordance with UK data protection law, including adequacy decisions or appropriate safeguards such as Standard Contractual Clauses.

10. Cookies Policy

Our website uses cookies in accordance with the Privacy and Electronic Communications Regulations (PECR). You can control cookie settings through our cookie banner and preferences centre. Essential cookies are necessary for the website to function and cannot be disabled. We will not place non-essential cookies without your prior consent.

11. Data Protection Officer

For data protection enquiries, you can contact us at info@legacycoras.com. We take data protection seriously and will respond to all enquiries promptly.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the updated policy on our website with a new "last updated" date.

13. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Email: info@legacycoras.com
Phone: +1 864 293 0252
Address: Pelican Works, Wakefield Road, Rothwell, Leeds, West Yorkshire, LS26 0RS

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113

15. Automated Decision Making

We do not use automated decision-making or profiling that would have legal or similarly significant effects on you.

16. Data Breach Notification

In the unlikely event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by UK GDPR.