Event Privacy Policy

Legacy Foundations Event Registration

​

1. Introduction
This Privacy Policy applies between you and Cynthia McFarlane, the founder of Lawpreneur®. Cynthia McFarlane acts as a Data Controller under the General Data Protection Regulation (‘GDPR’) and is registered with the Information Commissioner’s Office (‘ICO’) as a Data Controller under registration number ZA324198.

​

2. Data I Collect
I may collect:

• Name, email address, and business details

• Payment and billing information

• Application for Invitation responses

• Any additional information voluntarily shared during registration
   

3. How I Use Your Information
Your data is used to:

• Process your registration and secure your place
   

• Deliver a personalised event experience
   

• Provide pre-event communications and logistical information
   

• Administer your bonuses (e.g., Legacy Audit insights)
   

• Maintain our records for legal and regulatory purposes
   

4. Our Legal Basis for Processing
I process your data under:

• Contractual necessity (to deliver the event you registered for)
   

• Legitimate interest (to improve event experience and communication)
   

• Legal obligation (for accounting or regulatory compliance)
   

5. How I Store & Protect Your Data

• Your information is stored securely and accessed only by authorised personnel.
   

• I never sell or share your data with third parties for marketing.
   

• Payment information is handled securely by our payment processor and is never stored by me.
   

6. Third-Party Service Providers
I strive to keep third party access to your Personal Data to a minimum. However, Personal Information provided by you to me may in some circumstances need to be passed to third parties which i use for the running of my business.

​

I may use trusted providers for:

• Payment processing

• Email delivery

• Event logistics

 

Information passed to third parties is used only to the extent required by them to perform the services that I request and I have in place contractual terms to regulate the processing of your Personal Data. Any use for other purposes is strictly prohibited. Furthermore, any data that is processed by third parties for me will be processed within the terms of this Privacy Policy and in accordance with the GDPR.
 

7. Transfers outside the European Economic Area (‘EEA’) 

Some of my third party service providers are located out-with the EEA. Therefore Personal Data which I collect from you may be stored, processed in and transferred to such countries, which may not have as stringent data protection laws as found in the EEA. If I transfer your Personal Data outside the EEA in this way, I will ensure that the third party provider which I use is compliant with the GDPR and that your privacy continues to be protected as outlined in this Privacy Notice. I may use a number of methods to achieve this objective
 

8. Your Rights
You have the right to:

• Access the personal data we hold
   

• Request corrections
   

• Request deletion (where legally permissible)
   

• Withdraw consent for non-essential communications
   

• Lodge a complaint with the ICO (UK Information Commissioner’s Office)
   

9. Data Retention
I retain event-related information only as long as necessary for legal, tax, or operational purposes.

​

10. Your Data Protection Rights Under the GDPR 

You have certain rights as regards the personal data I hold on you. Where you would like to exercise these rights, you can do so by using a Subject Access Request or (‘SAR’).  In a SAR you can ask me if I hold personal data on you, and if so, request a copy of that data. 

I will also give you a description of the data, tell you why I am holding it and tell you who I could have disclosed it to. I do not charge for the provision of this information. 

In brief, you have the following data protection rights: 

•  the right to be informed regarding your data;  

• the right to gain a right of access to your data;  

• the right to ask me to rectify data on you which is incorrect;  

• the right to ask me to delete the data I hold on you;  

• the right to ask me to stop processing data on you;  

• the right to ask me to restrict processing your data;  

• the right to ask me to transfer your data to another Data Controller/provide you with your data in a machine-readable format (data portability); and  

• rights in relation to automated decision-making and profiling. 

 

I will reply to all requests as soon as possible, and in no event later than one month. Not all of these rights may be available to you, and will depend on the lawful basis I process your information. For more information on your rights under the GDPR, please see the website of the Information Commissioner’s Office (‘ICO’). 

​

11. Communications
By registering, you agree to receive event-related communications. You may opt out of promotional emails at any time.

​

12. Event Photography & Media Use

I may capture photos and video during Legacy Foundations for marketing and promotional purposes.

• Each attendee will receive a Media Release Form to confirm whether they consent to being photographed or recorded.
   

• I will only use identifiable images or footage of you if you have given clear consent.
   

• If you decline, we will take reasonable steps to ensure you are not included in identifiable media.
   

• Non-identifiable group or atmosphere shots may be used without additional notice.
   

• You may withdraw consent at any time; this will apply to future use only.

This approach ensures your privacy, comfort, and personal boundaries are respected throughout the event.

 

13. Contact
For privacy enquiries or data requests, contact info@missmcmediator.com or by post at:

Cynthia McFarlane
1 MCB Chambers
3rd Floor
15 New Bridge Street
London
EC4V 6AU