Who is responsible
The Legacy Foundation, operating as Plus One, Properly, is the data controller. Privacy questions and data requests go to privacy@plusoneproperly.com.
What we collect
At access request: your name, email, region, and broad event category.
At engagement request: the event date, venue, city, event type, host relationship, attire, the introduction you would like, accessibility needs, and what would make the evening successful.
In the event brief, once a date is reserved: an emergency contact, and anything you choose to tell us for your own comfort. Both are encrypted.
On payment: transaction records held by our payment processor and by us.
What we deliberately do not collect or keep
We do not ask you to upload identity documents, and we hold none. No copy of anything of that kind exists here.
We do not place personal data in analytics, URLs, or error traces, and we do not run session replay on forms or private pages.
Sensitive fields
Safety notes and emergency-contact details are encrypted at the field level with a key held outside the database. They are readable only by the people operating the service, and only in connection with your own engagement.
Consent is separated
Transactional messages about your own request are necessary to provide the service. Everything else — marketing from this service, Foundation news, Foundation fundraising, testimonial use, and any sharing with a referral partner — is a separate consent, defaulted off, and withdrawable at any time.
Buying an engagement never makes you a donor record. If you later make a separate gift, that is recorded and acknowledged separately.
How long we keep things
An unverified access request is deleted after 30 days. A verified visitor who makes no request is deleted or anonymised after 12 months. A declined or withdrawn request has its sensitive fields deleted after 90 days.
Financial records and signed agreements are retained for seven years, because the law requires it. A deletion request removes everything else while preserving those records.
Cookies
This site sets cookies for one purpose: keeping you signed in after you use your access link. They are secure, HTTP-only and same-site.
There are no advertising cookies, no cross-site trackers and no third-party marketing pixels. Because nothing non-essential is set, there is no consent banner to dismiss.
Where product analytics are used, they are configured to exclude personal data and are not applied to private or administrative pages.
Your rights
You may request access to your data, correction of it, or its deletion, by writing to privacy@plusoneproperly.com. We will confirm your identity before acting, and we will tell you plainly if a legal retention obligation prevents us from deleting something.