Privacy Policy

Who We Are

Legacy Ballroom & Events (“Legacy,” “we,” “us,” or “our”) operates the website https://legacy.la/ and provides wedding, banquet, and event venue services at our location in Glendale, California. Our primary location is:

Legacy Ballroom

6410 San Fernando Road, Glendale, CA 91201

Phone: 818.572.0000

Email: info@legacy.la

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website or use our services. Please read this policy carefully. If you disagree with its terms, please discontinue use of our website.

2. Applicable Privacy Laws

As a business operating in California and serving customers across the United States, we comply with the following privacy laws and regulations:

• California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA) — applicable to California residents
• California Online Privacy Protection Act (CalOPPA)
• Children’s Online Privacy Protection Act (COPPA) — our website is not directed at children under 13
• CAN-SPAM Act — governing commercial email communications
• Americans with Disabilities Act (ADA) digital accessibility standards
• General Data Protection principles for any visitors from the European Union or United Kingdom

3. Information We Collect

3.1 Information You Provide Directly

We collect personal information you voluntarily submit, including when you:

• Submit an event inquiry or availability request (name, email, phone, event type, date, guest count)
• Subscribe to our newsletter (name, email address)
• Leave a comment on our blog or pages (name, email, website URL, comment content)
• Create a user account on our website
• Contact us by phone, email, or through our contact form
• Apply for a career opportunity

3.2 Information Collected Automatically

When you visit our website, we automatically collect certain technical information, including:

• IP address and approximate geographic location
• Browser type and version, and user agent string
• Device type and operating system
• Pages visited, referring URLs, and time spent on pages
• Cookies and similar tracking technologies (see Section 6)

3.3 Information from Third Parties

We may receive information about you from third-party platforms such as Instagram, Facebook, Yelp, WeddingWire, and The Knot when you interact with our profiles on those services. We also use Gravatar to display profile images linked to comment accounts.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to your event inquiries and provide our venue and catering services
• To process and manage event bookings and contracts
• To send you marketing communications and newsletters (with your consent)
• To improve our website, content, and customer experience
• To detect, prevent, and respond to fraud, spam, and security threats
• To comply with legal obligations
• To administer user accounts and manage login sessions
• To analyze website traffic and usage patterns via analytics tools
• To communicate important service updates or changes

We will only use your personal information for the purposes for which it was collected unless we reasonably consider that we need to use it for another reason compatible with the original purpose. We will notify you and, where required, seek your consent if we need to use your data for a new purpose.

5. Media and Uploaded Content

If you upload images to our website (for example, when submitting a review or creating an account), you should avoid uploading images that contain embedded location data (EXIF GPS data). Visitors to our website may be able to download and extract any location data embedded in images you post.

We recommend reviewing your device’s photo settings to disable location tagging before uploading images to any website.

6. Cookies and Tracking Technologies

6.1 What Are Cookies

Cookies are small text files stored on your device that help websites remember your preferences and improve your experience. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain for a set period).

6.2 Cookies We Use

• Comment cookies: If you leave a comment, you may opt in to save your name, email, and website URL in cookies for your convenience. These cookies last for one year.
• Session cookies: When you visit our login page, a temporary cookie is set to check whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
• Authentication cookies: When you log in, cookies are set to save your login state (2 days) and screen display preferences (1 year). If you select “Remember Me,” your session persists for two weeks. Login cookies are removed when you log out.
• Editor cookies: If you edit or publish content on our site, a cookie is saved indicating the post ID of the edited article. This contains no personal data and expires after 1 day.
• Analytics cookies: We may use analytics services (such as Google Analytics) that set cookies to help us understand how visitors use our website.

6.3 Your Cookie Choices

You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies or delete cookies already stored. Please note that disabling cookies may affect the functionality of our website. For more information about managing cookies, visit www.allaboutcookies.org.

California residents may also exercise rights under the CCPA (see Section 10) with respect to data collected through cookies.

7. Embedded Content from Other Websites

Pages on our website may include embedded content such as videos, images, or social media posts from third-party platforms (e.g., Instagram, YouTube, Facebook). Embedded content from other websites behaves exactly as if you had visited those websites directly.

These third-party websites may collect data about you, use their own cookies, embed additional tracking technologies, and monitor your interactions with the embedded content, including if you have an account and are logged in to those platforms.

We encourage you to review the privacy policies of any third-party services whose content appears on our website.

8. How We Share Your Data

We do not sell your personal information. We may share your data in the following limited circumstances:

• Service providers: We share information with trusted vendors who assist us in operating our website and delivering our services (e.g., email marketing platforms, spam detection services, payment processors, website hosting providers). These parties are contractually required to keep your information confidential and use it only for the services they provide to us.
• Spam detection: Visitor comments may be checked through automated spam detection services.
• Password reset: If you request a password reset, your IP address will be included in the reset email sent to you.
• Gravatar: An anonymized hash of your email address may be sent to Gravatar (Automattic) to check whether you have a profile picture associated with your account. Automattic’s privacy policy is available at https://automattic.com/privacy/.
• Legal requirements: We may disclose your information if required by law, regulation, or legal process, or to protect the rights, property, or safety of Legacy, our clients, or the public.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change via a prominent notice on our website.

We do not share, rent, or sell personal information to third-party marketers.

9. How Long We Retain Your Data

• Comments and associated metadata are retained indefinitely so that we can recognize and approve follow-up comments without holding them in a moderation queue.
• Registered user account data is retained for as long as your account is active. All users can view, edit, or delete their personal information at any time (except usernames, which cannot be changed). Website administrators can also view and edit this information.
• Event inquiry and booking data is retained for as long as necessary to fulfill our contractual and legal obligations, typically seven (7) years in accordance with California business record-keeping requirements.
• Newsletter subscription data is retained until you unsubscribe.
• Website analytics data is retained in accordance with the retention policies of the analytics provider (typically 26 months for Google Analytics).

When personal data is no longer needed, we securely delete or anonymize it. Certain data may be retained longer when required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

10. Your Rights Under California Law (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources, our purposes for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request that we delete personal information we have collected from you, subject to certain exceptions (e.g., data needed to complete a transaction or comply with a legal obligation).
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising. If this changes, we will update this policy and provide an opt-out mechanism.
• Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use and disclosure of sensitive personal information to what is necessary to perform our services.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a verifiable consumer request, contact us at:

Email: info@legacy.la

Phone: 818.572.0000

Mail: 6410 San Fernando Road, Glendale, CA 91201

We will respond to verifiable requests within 45 days. If we need more time (up to 90 days total), we will notify you of the extension in writing. We may ask you to verify your identity before processing your request. You may designate an authorized agent to submit requests on your behalf.

11. Your Rights Over Your Data (All Users)

Regardless of your location, if you have an account on our website or have left comments, you have the right to:

• Request an exported file of all personal data we hold about you, including data you have provided to us.
• Request that we erase any personal data we hold about you. This does not include data we are legally required to retain for administrative, legal, or security purposes.

To exercise these rights, contact us at info@legacy.la. We will respond within 30 days.

12. Marketing Communications & CAN-SPAM Compliance

If you subscribe to our newsletter or opt in to marketing communications, you consent to receiving promotional emails from us. In compliance with the CAN-SPAM Act:

• We will identify all marketing emails as advertisements.
• We include our physical mailing address in all marketing emails.
• Every marketing email includes a clear and easy unsubscribe link.
• We honor opt-out requests within 10 business days.

To unsubscribe from our marketing emails at any time, click the “Unsubscribe” link at the bottom of any marketing email or contact us at info@legacy.la.

13. Children’s Privacy (COPPA)

Our website is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will delete that information promptly. If you believe we may have inadvertently collected information from a child under 13, please contact us at info@legacy.la.

14. Data Security

We implement reasonable and appropriate technical and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for data transmitted to and from our website, access controls, and secure server infrastructure.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee absolute security. In the event of a data breach affecting your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law.

15. Third-Party Links and Services

Our website contains links to third-party websites including Instagram, Facebook, Yelp, WeddingWire, and The Knot. We are not responsible for the privacy practices of these external sites. We encourage you to review the privacy policies of any third-party websites you visit.

16. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. When we make changes, we will revise the “Effective Date” at the top of this page and, where the changes are significant, we may provide additional notice (such as a banner on our homepage or an email notification).

Your continued use of our website after we post changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Legacy Ballroom & Events

6410 San Fernando Road

Glendale, CA 91201

Phone: 818.572.0000

Email: info@legacy.la

Website: https://legacy.la/