Privacy Policy

Legacy Family Life LLC Effective Date: May 5, 2026 Last Updated: May 5, 2026

1. Introduction

Legacy Family Life LLC ("Legacy," "Legacy Family Life," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information when you:

visit our websites, including legacyfamilylife.com, compare.legacyfamilylife.com, careers.legacyfamilylife.com, and any related subdomains (the "Sites");

request a quote for a final expense life insurance policy or any other insurance product;

speak with a Legacy licensed agent or customer-care representative by phone, video, or text;

apply to work at Legacy or are employed by Legacy;

become a Legacy policyholder; or

otherwise interact with Legacy Family Life ((collectively, the "Services").

By using the Services, you acknowledge that you have read this Privacy Policy. If you do not agree with our practices, please do not use the Services.

2. Scope

This Privacy Policy applies to personal information collected by Legacy Family Life LLC across all of the channels listed in Section 1. It does not apply to:

third-party websites or services we link to (each has its own privacy policy);

the privacy practices of insurance carriers whose products you may be quoted (each carrier's own privacy notice will be provided to you separately as part of the application process); or

information collected by your wireless carrier or device manufacturer.

3. Information We Collect

We collect personal information directly from you, automatically through your interactions with our Sites and communications, and from third parties.

3.1 Information You Provide Directly

When you request a quote, apply for coverage, communicate with an agent, or fill out any form, we may collect:

Identifiers: full name, mailing address, email address, mobile and landline telephone numbers, date of birth, and Social Security number (collected only at the application stage as required by underwriting).

Demographic information: gender, marital status, household composition, and beneficiary information.

Health information: information about your health history, medications, tobacco use, and conditions you disclose during the underwriting interview. Legacy is not a HIPAA covered entity, but treats this information as sensitive.

Financial information: bank account number, routing number, debit/credit card information, and information used to verify ownership of a bank account (via our third-party verification provider — see Section 5).

Employment information: for job applicants, your résumé, work history, references, and information disclosed during the interview process.

Communications: the contents of voice calls (which may be recorded — see Section 4), text messages, emails, and chat sessions you exchange with Legacy.

Consent records: the exact text of the consent disclosure you saw at the point of opt-in, the timestamp, your IP address, and the user agent of the device you used.

3.2 Information Collected Automatically

When you visit our Sites, we and our service providers automatically collect:

Device and connection data: IP address, browser type and version, operating system, device identifiers, mobile network information, and approximate geolocation derived from IP address.

Usage data: pages viewed, time spent on each page, referring URL, click-stream behavior, form-fill events, and conversion events.

Cookies and similar technologies: see Section 8.

Advertising and attribution data: click identifiers (e.g., Meta fbclid, TikTok ttclid, Google gclid), UTM parameters, and other identifiers used to attribute your visit to a marketing campaign.

3.3 Information from Third Parties

We may receive information about you from:

Lead-generation partners that sell or transfer leads where the consumer has given express written consent for Legacy to contact them.

Insurance carriers, third-party administrators, and underwriters that provide policy status, claims information, and underwriting decisions back to us.

Identity, fraud, and bank-verification providers (such as our bank-account verification partner) for the purpose of verifying the information you provide.

Public and licensed databases (such as state insurance license databases and the National Insurance Producer Registry).

Advertising platforms (Meta, TikTok, Google, others) that report aggregate or hashed data about ad performance back to us via their conversions APIs.

4. Recording and Monitoring of Calls and Messages

All inbound and outbound voice calls between you and Legacy may be monitored, recorded, and transcribed for quality assurance, training, sales coaching, agent licensing compliance, dispute resolution, and legal-compliance purposes. By providing your phone number and consenting to communications from Legacy, you consent to the recording, monitoring, and transcription of those calls and to the storage and processing of the recordings and transcripts.

Text messages, emails, and chat sessions with Legacy are similarly logged and retained.

In states that require all-party consent for call recording, our agents will provide an additional verbal disclosure at the start of the call.

We use third-party transcription and call-analytics providers (including providers performing AI-based call scoring and analysis) to process recordings on our behalf under written contracts that prohibit those providers from using the recordings for their own purposes.

5. How We Use Your Information

We use personal information for the following purposes:

PurposeExamplesQuote and applicationGenerate a final expense quote, route you to a licensed agent, submit an application to a carrier, complete underwritingCommunicationsPlace phone calls, send SMS/MMS, email, and other messages relating to your quote, application, policy, and customer careMarketing and re-engagementSend promotional and personalized sales messages to consumers who have given express consent (you can opt out at any time — see Section 9)Verification and fraud preventionVerify identity, verify bank account ownership through our verification partner, prevent fraudulent applicationsPolicy servicingRespond to billing inquiries, beneficiary updates, payment-method changes, claimsInternal operationsSite analytics, sales-process improvement, agent training, performance managementAdvertising measurementAttribute conversions to marketing channels via server-side conversions APIs sent to advertising platforms (we share hashed identifiers for measurement, not raw mobile numbers — see Section 6)Recruiting and employmentEvaluate job applicants, administer employment of Legacy team membersLegal and regulatory complianceComply with insurance laws, TCPA and state telemarketing laws, state consumer-protection laws, federal employment laws, court orders, subpoenas, and regulatory requests

We do not use your information to make consequential automated decisions without human involvement. Quotes are generated based on rate tables; underwriting decisions are made by carrier underwriters with human review.

6. How We Share Your Information

6.1 Service Providers and Vendors

We share personal information with vendors who perform services on our behalf and are contractually prohibited from using your information for their own purposes. These include:

communications infrastructure providers (e.g., Twilio, Telnyx);

transcription and call-analytics providers (e.g., providers using Deepgram and similar speech-recognition technology);

customer relationship management and dialer infrastructure (Pulse, our proprietary CRM and dialer platform);

payroll and HR providers (e.g., Justworks);

bank-account verification providers;

identity-verification and fraud-prevention providers;

email and messaging delivery providers;

analytics providers (e.g., Google Analytics, Looker Studio);

advertising-attribution providers and advertising-platform conversions APIs (Meta, TikTok, Google) — we send hashed and pseudonymized identifiers to these platforms for measurement and audience suppression of consumers who have opted out;

cloud-hosting and infrastructure providers; and

legal, accounting, and professional advisors.

6.2 Insurance Carriers and Underwriters

When you apply for a policy, we share the information necessary to process your application with the insurance carrier you have chosen and any third parties involved in underwriting that policy.

6.3 Affiliated Entities and Business Transfers

We may share your information with current or future affiliates and successors. If Legacy is involved in a merger, acquisition, asset sale, financing, or similar transaction, your information may be transferred as part of that transaction, subject to the protections of this Privacy Policy or a successor policy that provides at least equivalent protections.

6.4 Legal Disclosures

We may disclose your information when we believe in good faith that disclosure is necessary to:

comply with a law, regulation, court order, subpoena, or government request;

enforce our Terms & Conditions or other agreements;

protect the rights, property, or safety of Legacy, our customers, our employees, or others; or

investigate, prevent, or take action regarding suspected fraud, security incidents, or violations of policy.

6.5 With Your Consent

We may share your information for purposes not described in this Privacy Policy if you have given us your express consent.

6.6 SMS and Mobile Information — Special Disclosure

Mobile telephone numbers and consent to receive SMS/MMS messages are not shared with, sold to, rented to, or otherwise transferred to any third party for marketing or promotional purposes by any party, with the exception of subcontracted communications providers (such as Twilio) acting on Legacy's behalf to deliver messages you have consented to receive. This restriction also applies to text-message opt-in data and consent records. We do not transfer your mobile number to other "sellers" within the meaning of the TCPA.

7. Advertising and Marketing

7.1 Online Advertising

Legacy advertises on Meta (Facebook and Instagram), TikTok, Google, and other platforms. When you visit our Sites, the following may occur:

Pixels and tags from these platforms may load on the page and observe browser-level events such as page views, form submissions, and conversion events.

Server-side conversion events may be sent from our servers directly to the advertising platforms' Conversions APIs. We send only the data necessary for measurement and we hash personally identifiable identifiers (such as email and phone) before transmission.

Suppression audiences are maintained — when you opt out of marketing or your status changes (e.g., you become a customer, request to be removed, or are flagged as not-eligible), your hashed identifiers are added to suppression lists to prevent further ad targeting.

7.2 Email and SMS Marketing

If you have consented, we send marketing emails and SMS messages. You may opt out at any time:

Email: click the unsubscribe link at the bottom of any marketing email or contact us using the details in Section 16.

SMS: reply STOP to any text message. You will receive a single confirmation message and will not be sent further marketing messages.

7.3 Do Not Track and Global Privacy Control

Our Sites currently respond to the Global Privacy Control (GPC) browser signal as a request to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising under applicable state privacy laws. We do not currently respond to Do Not Track (DNT) browser headers because there is no consensus standard for DNT signals.

8. Cookies and Tracking Technologies

We and our service providers use cookies, pixels, software development kits (SDKs), local storage, and similar technologies to operate the Sites and analyze usage. Categories include:

Strictly necessary cookies — required for the Sites to function (e.g., session management, form-submission protection). These cannot be disabled.

Performance and analytics cookies — Google Analytics 4 and similar tools that help us understand how visitors use the Sites in aggregate.

Advertising and conversion cookies — Meta Pixel, TikTok Pixel, Google Ads tag, and similar tools that record conversion events and enable us to measure the performance of advertising campaigns.

You can manage cookies through your browser settings. Disabling cookies may impair some features of the Sites.

Where required by applicable law, we present a cookie banner allowing you to accept, reject, or customize non-essential cookies.

9. Your Choices and Rights

9.1 Marketing Opt-Out (Available to All Consumers)

Phone calls: ask any Legacy agent to add you to our internal Do Not Call list, or contact us using the details in Section 16. We will honor the request within 10 business days, as required by law. You may also register your number with the National Do Not Call Registry at donotcall.gov.

SMS/MMS: reply STOP to any message.

Email: click the unsubscribe link.

9.2 Revocation of Consent

You may revoke your prior express written consent to receive automated calls or text messages at any time, by any reasonable means — including replying STOP to a text, telling an agent during a call, or contacting us using the details in Section 16. We will honor the request within 10 business days. We may send a single one-time confirmation message to acknowledge the revocation.

9.3 State Privacy Rights

Residents of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, Virginia, and other states with comprehensive privacy laws may have one or more of the following rights, subject to the specifics of their state's law:

Right to know / right to access what personal information we have collected about you.

Right to correct inaccurate personal information.

Right to delete personal information, subject to legal exceptions (we are required to retain records for insurance regulatory and TCPA-compliance purposes).

Right to data portability — to receive a copy of your personal information in a portable format.

Right to opt out of the "sale" or "sharing" of personal information for cross-context behavioral advertising. Legacy does not "sell" personal information for monetary consideration. We do "share" certain identifiers with advertising platforms for measurement and audience-suppression purposes as described in Section 7; you may opt out of this sharing by submitting a request as described in Section 9.5 or by enabling Global Privacy Control in your browser.

Right to opt out of profiling that produces legal or similarly significant effects (we do not engage in such profiling).

Right to limit the use of sensitive personal information (we use sensitive personal information only as necessary to provide the Services you have requested).

Right to non-discrimination — we will not discriminate against you for exercising any of these rights.

9.4 California-Specific Disclosures (CCPA / CPRA)

California residents have the rights described in Section 9.3. In the preceding 12 months, Legacy has collected the categories of personal information described in Section 3 from the sources described in Section 3, used them for the purposes described in Section 5, and disclosed them to the categories of recipients described in Section 6. Legacy does not knowingly sell the personal information of California residents under 16 years of age.

The categories of "sensitive personal information" we collect include Social Security numbers (for underwriting), bank account information, and health-related information you disclose during underwriting. We use this information only as necessary to provide the Services and we do not use it for inferring characteristics about you.

We retain personal information for the periods described in Section 11.

9.5 How to Submit a Privacy Request

To submit a privacy request under Section 9.3, contact us using the details in Section 16, or use any privacy-request submission form posted on our Sites. We will verify your identity using the information we have on file before fulfilling the request, and we will respond within the timeframes required by applicable law (typically 45 days, with one extension permitted where allowed). You may use an authorized agent to submit a request on your behalf, subject to verification.

If we deny your request in whole or in part, we will explain our reason and your right to appeal, where applicable.

10. How We Protect Your Information

We maintain administrative, technical, and physical safeguards intended to protect personal information against unauthorized access, disclosure, alteration, and destruction. These include:

encryption of data in transit (TLS) and at rest where technically appropriate;

access controls limiting employee access to personal information on a need-to-know basis;

secure facilities for any physical records;

vendor due diligence and contractual data-protection obligations;

regular review of our security practices.

No system is perfectly secure, and we cannot guarantee the security of your information. If we experience a security incident affecting your personal information, we will notify you and applicable regulators as required by law.

11. Data Retention

We retain personal information for as long as necessary to provide the Services, to comply with our legal and regulatory obligations, to resolve disputes, and to enforce our agreements. Specific retention periods include:

Consent records (TCPA defense): at least 10 years from the date of consent or last interaction, whichever is later (to comply with the longest applicable state retention rule).

Quote requests that did not become applications: up to 7 years.

Issued policies and underwriting records: for the life of the policy plus the period required by the carrier and applicable state insurance law (typically the policy term plus 7–10 years).

Call recordings and transcripts: typically 7 years, longer where required by law or where relevant to a pending dispute or claim.

Marketing data: until you opt out, plus a reasonable period to operate suppression lists.

Employment records: for the period required by federal and state employment law.

Website analytics data: typically 14–26 months in aggregate or pseudonymized form.

When we no longer need personal information, we securely delete or de-identify it.

12. Children's Privacy

The Services are intended for adults age 18 and older. We do not knowingly collect personal information from children under 13, and we do not knowingly sell or share the personal information of any consumer under 16. If we learn that we have collected personal information from a child under 13, we will delete it. If you believe a child has provided us with personal information, contact us using the details in Section 16.

13. Third-Party Links and Services

Our Sites may contain links to third-party websites and services, including insurance carrier sites, scheduling tools, and partner sites. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policy of any third party before providing them with personal information.

14. International Users

Legacy is based in the United States and the Services are intended for residents of the United States. If you access the Services from outside the United States, your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The "Last Updated" date at the top of the Policy reflects the date of the most recent change. Material changes will be communicated through a prominent notice on our Sites or, where required by law, by direct notice to you. Your continued use of the Services after a change becomes effective constitutes acceptance of the revised Privacy Policy.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise any of the rights described above, please contact us:

Legacy Family Life LLC Attn: Privacy Officer 2345 E Thomas Rd STE 100 #535 Phoenix, AZ 85016 Email: micah@legacyfamilylife.com Phone: 833-865-6700

For SMS-related questions or to confirm an opt-out has been processed, you may also reply HELP to any message.

17. Insurance Producer Disclosures

Legacy Family Life LLC is a licensed insurance producer / agency. State insurance license numbers are available on request and on the carriers' application materials. Legacy is compensated by commission paid by the insurance carriers whose policies we sell. The commission rate may vary by carrier and product. We are obligated by state insurance law to act in good faith with respect to the recommendations we make to you.

This Privacy Policy is intended to comply with the federal Telephone Consumer Protection Act (TCPA), the FTC Act, the Gramm-Leach-Bliley Act and its implementing regulations to the extent applicable, the California Consumer Privacy Act / California Privacy Rights Act, and the comprehensive privacy laws of other states identified above. Where state law provides greater protection than this Policy describes, that state law applies.