Privacy Policy

01

Who We Are

Legacy Academy and SifuAcademy.com are owned and operated by Alan Baker Consultations, Inc., a Georgia corporation, referred to in this Privacy Policy as the “Company,” “Legacy Academy,” “we,” “us,” or “our.”

Legacy Academy is a specialized martial arts learning environment within the Capability Academy digital campus.

For purposes of applicable privacy and data-protection laws, Alan Baker Consultations, Inc. is the business or data controller responsible for the personal information described in this Policy.

Privacy questions and requests may be submitted to [email protected].

02

Scope of This Privacy Policy

This Policy applies to information collected through:

• SifuAcademy.com and related pages or subdomains.
• Legacy Academy online martial arts memberships.
• Individual-system and All Access Academy subscriptions.
• MemberPress accounts and protected course content.
• Legacy Jeet Kune Do training.
• Filipino and Indonesian Martial Arts training.
• Legacy Wing Chun training.
• Lethwei and Thai Boxing training.
• Chinese Boxing and related fields of study.
• Legacy Summit, seminars, camps, workshops, and live training.
• Contact forms, student questions, email subscriptions, and support communications.
• Purchases, registrations, payments, and refund requests.

This Policy does not govern independent instructors, academies, event hosts, training partners, social-media platforms, or external websites. Those parties are responsible for their own privacy practices.

03

Personal Information We Collect

The information collected depends on how you interact with Legacy Academy. We may collect the following categories:

Identity and Contact Information

• Name, email address, telephone number, and general location.
• Username, account identifier, display name, and login information.
• Age or confirmation that you meet the applicable age requirement.
• Parent or legal guardian information for teenage students.
• Photograph, biography, or profile information you choose to provide.

Membership and Academy Information

• Membership plan, selected system, and All Access status.
• Monthly or annual billing selection.
• Registration date, renewal date, cancellation, and membership status.
• Course enrollment, lesson access, progress, and completion information.
• Training interests, experience level, and learning preferences.
• Student questions, support requests, and curriculum feedback.

Transaction Information

• Memberships, events, courses, services, or products purchased.
• Payment date, amount, status, refunds, and transaction identifiers.
• Limited billing information provided by the payment processor.

We do not ordinarily receive or store complete payment-card numbers. Payment credentials are processed by the payment provider identified during checkout.

Live-Event Information

• Legacy Summit, seminar, workshop, camp, or event registration.
• Attendance, ticket type, payment status, and participation history.
• Emergency contact or accommodation information when requested.
• Signed participant agreements, releases, or liability waivers.
• Training photographs, audio, or video where a separate release or other lawful basis permits their use.

Website and Technical Information

• IP address, browser, operating system, device type, and language.
• Pages viewed, links selected, referral sources, and visit duration.
• Login activity, device access, security events, and suspected account sharing.
• Cookie identifiers, analytics information, and approximate geographic information.
• Error reports, website-performance information, and security logs.

Communications and Submitted Content

• Emails, contact forms, student questions, and support communications.
• Newsletter preferences, consent, and unsubscribe records.
• Feedback, testimonials, survey responses, photographs, and video submitted with permission.

Safety Information

We may receive information concerning an injury, training incident, safety concern, complaint, accommodation request, or legal claim involving Legacy Academy training or events.

We do not ordinarily request detailed medical records. If you voluntarily provide health-related information, we will use it only as reasonably necessary for safety, accommodation, incident response, legal compliance, or the purpose for which it was submitted.

04

Sources of Personal Information

We may collect personal information:

• Directly from you through registrations, purchases, forms, and communications.
• From a parent or legal guardian managing a teenage student’s account.
• Automatically through cookies, analytics, account systems, and security technologies.
• From Legacy Academy instructors, staff members, and event personnel.
• From membership, payment, email, video-hosting, and technical providers.
• From event hosts or training partners when necessary to administer an event.

05

How We Use Personal Information

We may use personal information to:

• Create and administer Legacy Academy accounts.
• Provide access to purchased systems and All Access curriculum.
• Manage monthly and annual memberships.
• Process purchases, registrations, renewals, cancellations, and refunds.
• Track course access, lesson progress, and curriculum updates.
• Answer student questions and provide account or training support.
• Administer Legacy Summit, seminars, camps, workshops, and live events.
• Communicate account, curriculum, safety, event, and policy updates.
• Send educational and marketing communications when permitted.
• Improve the Academy, curriculum organization, website, and member experience.
• Detect account sharing, fraud, unauthorized access, and content misuse.
• Protect members, instructors, the Company, and Legacy Academy intellectual property.
• Investigate safety incidents, complaints, or agreement violations.
• Meet tax, accounting, insurance, contractual, and legal obligations.

06

Individual-System and All Access Memberships

Legacy Academy offers memberships providing access to individual martial arts systems or the complete multi-system training library.

Membership records may identify which systems you selected, the courses available to your account, your membership term, and your active or canceled status.

We use this information to provide the correct content, manage subscription access, include curriculum updates, and prevent unauthorized access to protected materials.

A membership provides educational access. Course activity or completion does not by itself establish rank, certification, instructor status, practical proficiency, or authorization to teach Legacy Academy material.

07

MemberPress Accounts and Course Activity

Legacy Academy uses membership and course-management technology, including MemberPress, to administer accounts, memberships, access permissions, lessons, course activity, and protected resources.

We may process account and course activity to:

• Authenticate members and protect accounts.
• Provide access to the appropriate martial arts systems.
• Track lesson and course participation.
• Document acceptance of policies, agreements, and liability waivers.
• Resolve technical, billing, or account-support issues.
• Identify unauthorized account sharing, copying, or access.
• Protect member-only videos, manuals, and curriculum.

You are responsible for protecting your username and password and notifying us promptly if you suspect unauthorized access.

08

Legacy Summit and Live Training Events

When you register for the Legacy Summit or another live event, we may collect information necessary to:

• Process your registration and payment.
• Confirm attendance and provide event information.
• Manage capacity, scheduling, equipment, and participant communications.
• Administer refunds, credits, transfers, or cancellations.
• Provide reasonable accommodations where available.
• Maintain participation agreements, releases, and emergency records.
• Respond to incidents, injuries, insurance matters, or legal obligations.

Event hosts, facilities, instructors, and service providers may receive limited information when reasonably necessary to administer the event.

Live events may be photographed or recorded. Promotional use of an identifiable participant’s image, voice, or likeness will be governed by the applicable event release, posted notice, consent, or other lawful basis.

09

Student Questions, Feedback, and Submitted Content

Students may submit training questions, feedback, testimonials, photographs, or other content through the Academy platform, email, forms, or live events.

We may use questions and feedback to respond to the student, identify areas requiring clarification, improve lessons, develop new educational material, and provide member support.

Do not include confidential client information, private information about another person, payment credentials, account passwords, or sensitive medical or legal information in a training question.

Testimonials, photographs, or identifiable student stories will not be used for public promotion without permission or another lawful basis.

10

Payments, Renewals, and Subscriptions

Legacy Academy offers monthly and annual memberships, individual-system memberships, All Access memberships, and live-event registrations.

Payments may be processed by Stripe or another provider identified during checkout. Payment providers may collect:

• Name and billing information.
• Payment-card or bank information.
• Device and transaction information.
• Authentication and fraud-prevention information.

We generally receive transaction status, amount, date, limited billing details, and transaction identifiers rather than complete payment-card numbers.

Stripe’s practices are described in the Stripe Privacy Policy .

11

Email, Educational, and Administrative Communications

We may use Mailchimp or another communication provider to manage subscriptions, educational journeys, Academy updates, event announcements, and newsletters.

Marketing emails are sent with consent or another lawful basis where permitted. You may unsubscribe using the link included in each marketing email.

Unsubscribing from marketing does not prevent necessary communications concerning:

• Purchases, subscriptions, renewals, cancellations, or payment issues.
• Account access and security.
• Courses, curriculum, or system access.
• Events for which you registered.
• Safety notices or material program changes.
• Changes to agreements, waivers, or privacy practices.

Mailchimp is operated by Intuit. Its practices are described in Intuit’s Global Privacy Statement .

12

Cookies, Analytics, and Similar Technologies

The website may use cookies, local storage, pixels, and similar technologies to operate the Academy, remember preferences, secure accounts, understand website activity, and measure communications or campaigns.

Essential Cookies

Essential cookies support login, account security, checkout, membership access, fraud prevention, saved preferences, and website operation.

Analytics Cookies

We may use Google Analytics to understand how visitors find and use the website. Google Analytics may process device information, IP-derived information, referral information, website activity, and cookie identifiers.

Learn more through Google’s Privacy Policy .

Embedded-Media Cookies

Training videos, audio, maps, forms, and social-media content may set cookies or collect technical and interaction information when loaded or used.

Advertising and Conversion Measurement

If advertising or conversion-measurement services are used, they may process information concerning visits, referral sources, advertisements, and resulting actions. Where required, these technologies will be controlled through an available consent or opt-out mechanism.

You may manage cookies through your browser settings and any cookie controls provided on the website. Disabling essential cookies may prevent account, checkout, course, or membership functions from working.

13

Embedded Training Content and External Platforms

Legacy Academy pages and courses may contain video, audio, maps, forms, payment tools, or other content delivered by external platforms such as YouTube, Vimeo, Google, Mailchimp, or payment providers.

These providers may receive your IP address, device information, cookie identifiers, account information, or interaction data when their services load or when you interact with them.

Their handling of personal information is governed by their respective privacy policies.

14

When We Disclose Personal Information

We may disclose personal information when reasonably necessary to operate Legacy Academy, including to:

• Website hosting, WordPress, MemberPress, course, security, and technical providers.
• Payment processors, banks, accountants, and financial providers.
• Email, analytics, form, event-registration, and communication providers.
• Legacy Academy instructors, staff members, and event personnel.
• Event facilities, hosts, and training partners when required to administer an event.
• Professional advisers, attorneys, insurers, accountants, and auditors.
• Government, regulatory, law-enforcement, or judicial authorities when legally required.
• A purchaser, successor, or adviser involved in a potential business transaction.

Service providers receive information only as reasonably necessary to perform services, protect security, comply with law, or fulfill the purposes described in this Policy.

15

Sale, Sharing, and Targeted Advertising

We do not sell student lists, email addresses, course records, or personal information for monetary consideration.

Some privacy laws define “sale” or “sharing” broadly enough to include certain advertising, analytics, or cross-context behavioral-advertising technologies, even when money is not exchanged.

If Legacy Academy uses technology subject to these definitions, we will provide any legally required notice and opt-out mechanism.

16

How Long We Retain Information

We retain personal information only as long as reasonably necessary to:

• Provide active memberships and Academy services.
• Maintain course, subscription, purchase, and event records.
• Administer cancellations, refunds, credits, and disputes.
• Maintain transaction, tax, accounting, and insurance records.
• Document acceptance of agreements, policies, and liability waivers.
• Protect accounts, curriculum, and intellectual property.
• Respond to safety incidents, complaints, or legal claims.
• Comply with contractual and legal obligations.

Membership, transaction, event, waiver, and agreement-acceptance records may be retained after access ends because they document purchases, participation, policy acceptance, and legal rights.

Marketing information is retained until you unsubscribe or request deletion, subject to maintaining a limited suppression record to honor your opt-out.

When information is no longer reasonably needed, it may be deleted, anonymized, or securely archived.

17

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

These safeguards may include:

• Account authentication and password protection.
• Encrypted website connections.
• Restricted administrative access.
• Security monitoring, backups, and software updates.
• Payment processing through specialized payment providers.
• Access controls for member-only curriculum.

No online transmission or storage system can guarantee absolute security. Members are responsible for using strong passwords, protecting login credentials, and reporting suspected unauthorized access.

18

Your Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Request access to personal information we maintain about you.
• Request correction of inaccurate information.
• Request deletion of certain information.
• Request restriction of or object to certain processing.
• Request a portable copy of certain information.
• Withdraw consent where processing depends on consent.
• Opt out of marketing communications.
• Opt out of certain sales, sharing, or targeted advertising where applicable.
• Appeal a decision concerning a privacy request where applicable.
• Exercise applicable privacy rights without unlawful discrimination.

Submit privacy requests to [email protected] with the subject line “Legacy Academy Privacy Request.”

We may need to verify your identity before completing a request. Authorized agents may be required to provide evidence of their authority.

Some information may be retained when necessary for transactions, waivers, safety, fraud prevention, intellectual property, accounting, disputes, or legal obligations.

To appeal a privacy-request decision, use the subject line “Legacy Academy Privacy Appeal.”

19

International Visitors and Legal Bases

Legacy Academy is operated from the United States. Personal information may be transferred to and processed in the United States or other locations where our service providers operate.

Where laws such as the General Data Protection Regulation apply, we may rely upon:

• Performance of a contract or steps requested before entering a contract.
• Compliance with legal obligations.
• Our legitimate interests in operating, securing, and improving Legacy Academy.
• Our legitimate interests in administering memberships, events, and intellectual property.
• Your consent where consent is required.
• Protection of vital interests in appropriate safety or emergency circumstances.

International users may have the right to complain to the data-protection authority responsible for their location.

20

Age Requirements and Children’s Privacy

Students 18 and Older

Individuals must be at least 18 years old to establish a Legacy Academy account independently.

Students Ages 13 Through 17

A student between 13 and 17 may participate only through an account established, accepted, and supervised by a parent or legal guardian.

The parent or guardian is responsible for consent, account information, payment, training supervision, and determining whether particular martial arts or weapons-related content is appropriate for the minor.

Children Under 13

Children under 13 may not create accounts, purchase memberships, or submit personal information through Legacy Academy registration systems.

If we learn that personal information was submitted by a child under 13, we will take reasonable steps to delete it. Contact [email protected] if you believe a child has submitted information.

21

External Websites and Training Partners

Legacy Academy may link to independent instructors, academies, event facilities, partners, social-media services, equipment providers, and educational resources.

We do not control and are not responsible for the privacy, content, security, training, or business practices of independent websites or organizations. Review their policies before submitting information.

22

Changes to This Privacy Policy

We may update this Policy to reflect changes in Legacy Academy programs, memberships, technology, service providers, business practices, or legal obligations.

The effective date and version number will be updated when changes are published. Material changes may also be communicated by email, account notice, or renewed acceptance where appropriate.