Privacy Policy
Last updated June 3, 2026
Introduction and Scope
Marshall’s Legacy LLC (“Marshall’s Legacy,” “we,” “us,” or “our”) operates the online educational platform available at marshallslegacy.com. This Privacy Policy describes how we collect, use, store, share, and protect information about individuals (“you” or “users”) who visit our website, enroll in our programs, or otherwise interact with our services.
Marshall’s Legacy is an educational course platform. It is not a licensed clinical therapy practice and does not provide therapy, counseling, or treatment. Our programs — Breaking the Cycle, Finding Solid Ground, and Rebuilding Together — are structured educational courses. This distinction affects how certain health-related laws apply to this platform.
Who This Policy Applies To
This Privacy Policy applies to all visitors to marshallslegacy.com, enrolled members of any Marshall’s Legacy program, subscribers to our email communications, and individuals who contact us for any reason.
Our programs are intended for adults (18 years of age and older). We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us immediately at the address listed in the Contact Information section.
Our programs are intended for adults (18 years of age and older). We do not knowingly collect personal information from individuals under the age of 18. If you believe a minor has submitted information to us, please contact us immediately at the address listed in Section 10.
Information We Collect
Information You Provide Directly
We collect information you provide when you:
Create an account or enroll in a program (name, email address)
Complete course worksheets, exercises, or reflection prompts within the platform
Submit questions through structured clinician-facing submission features within the platform
Contact us by email or through our website
Subscribe to our email communications
Payment Information
Payment transactions are processed by Stripe, Inc. We do not directly collect, store, or have access to full payment card numbers. Stripe collects and processes your payment information directly under its own privacy policy and terms of service, which we encourage you to review at stripe.com/privacy.
Course Engagement and Usage Data
Our course delivery platform (Circle) automatically collects information about how you interact with the platform, including lessons accessed, progress through course content, and dates of activity. This data is used to deliver course content according to your enrollment tier and to support your progress through the program.
Sensitive Information
The content of our programs addresses compulsive sexual behavior and partner betrayal trauma. Information you voluntarily share within the platform — including responses to course exercises, worksheets, and clinician submissions — may relate to your sexual health, mental health, and relationship circumstances. We treat this information with heightened care and do not share it for advertising or marketing purposes.
Because this information falls within sensitive categories of personal data, we ask you to provide your affirmative consent before processing it. At enrollment, you will be asked to confirm your understanding of the nature of the program content and your consent to provide related information through worksheets, exercises, and clinician submissions. You may withdraw this consent at any time by contacting us, though doing so may limit your ability to participate fully in the program. Where required by applicable law, we rely on your explicit consent as the basis for processing this category of information.
Email Communications Data
Our course and membership platform (Circle) includes a built-in email hub that we use to send program-related and marketing communications. Circle collects standard email engagement data, including whether emails are opened and links are clicked. This data is used to manage our communications and improve the relevance of content we send to you.
Automatically Collected Technical Data
When you visit marshallslegacy.com, standard technical information may be automatically collected by our website platform (Squarespace), including IP address, browser type, device type, referring URL, and pages visited. This data is used for website security, analytics, and performance purposes. See the Cookies and Tracking Technologies section below for more detail
How We Use Your Information
We use the information we collect for the following purposes:
To create and manage your account and deliver course content
To process payments and manage your subscription or membership
To send program-related communications, including onboarding, course content reminders, and program updates
To respond to your questions and support requests
To send marketing communications, where you have opted in
To operate and improve our platform and course content
To comply with applicable legal obligations
We do not use your personal information to train artificial intelligence systems. We do not sell your personal information to third parties.
Cookies and Tracking Technology
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device that help a website function, remember your preferences, and understand how the site is used.
We use the following general categories of cookies:
Strictly necessary cookies. These are necessary for the website and platform to operate, including security, login, and checkout functions. They cannot be disabled through a consent tool.
Analytics and performance cookies. These help us understand how visitors use our website so we can improve performance and content.
Third-party cookies. Our platform providers (Squarespace, Stripe, and Circle) may set their own cookies in connection with the services they provide. Each operates under its own privacy and cookie practices.
Where required by applicable law, we will request your consent before placing non-essential cookies, and you may withdraw or change your cookie preferences at any time through the cookie controls provided on our website. You can also manage cookies through your browser settings, though disabling certain cookies may affect how the website functions.
How We Share Your Information
We do not sell your personal information. We share your information only in the following limited circumstances:
Service Providers
We share information with third-party service providers who assist in operating our platform. These providers are permitted to use your information only as necessary to perform services on our behalf. Our current service providers include:
Stripe, Inc. — payment processing
Circle — course delivery, community, membership management, and email communications
Squarespace — website hosting
Legal Requirements
We may disclose your information if required to do so by law, or in response to a valid legal process, such as a subpoena, court order, or government request.
Business Transfers
In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
With Your Consent
We may share your information for any other purpose with your explicit prior consent.
Data Retention
We retain your personal information for as long as your account is active, as long as necessary to provide you with our services, and as required to comply with our legal obligations. When you cancel your membership, we will retain basic account and transaction records for a period consistent with applicable tax, accounting, and legal requirements.
Your Privacy Rights
All Users — General Rights
Regardless of where you live, all users may:
Opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email
Request deletion of your account by contacting us directly
Update your account information through your account settings or by contacting us
State Privacy Rights (U.S.)
A number of U.S. states have enacted consumer data privacy laws — including, among others, California, Colorado, Connecticut, Virginia, Texas, and Montana — that grant residents certain rights over their personal information. These laws generally apply only to businesses that meet specified size or data-processing thresholds. To the extent any such law applies to us, residents of the relevant state may have the right to:
Confirm whether we process their personal information and access that information
Request correction of inaccurate personal information
Request deletion of personal information they provided or that we collected
Obtain a portable copy of their personal information in a usable format
Opt out of the sale of personal information, targeted advertising, or certain profiling
We do not sell personal information, and we do not use sensitive personal information for targeted advertising. California residents additionally have the right not to receive discriminatory treatment for exercising their privacy rights. To exercise any of these rights, please contact us using the information in the Contact Information section. We will respond to verified requests within the timeframe required by applicable law and will not discriminate against you for making a request.
UK and EU Residents (UK GDPR and EU GDPR)
If you are located in the United Kingdom or the European Economic Area, the UK General Data Protection Regulation and EU General Data Protection Regulation provide you with specific rights, and we process your personal data in accordance with those frameworks where they apply to us.
Legal Bases for Processing
We process your personal data on one or more of the following legal bases:
Performance of a contract — to deliver the courses and services you enroll in and to administer your membership
Consent — for your explicit consent, which we rely on in particular for processing sensitive (special category) data such as information relating to your sexual health, mental health, and relationship circumstances, and for sending marketing communications
Legitimate interests — to operate, secure, and improve our platform, where this is not overridden by your interests and rights
Legal obligation — to comply with applicable laws and lawful requests
Your Rights
Subject to applicable law, you have the right to access, correct, delete, restrict, or object to our processing of your personal data; the right to data portability; the right to withdraw consent at any time (without affecting processing already carried out); and the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office (ICO). To exercise these rights, contact us using the information below.
International Data Transfers
We are based in the United States, and the service providers we use to operate our platform (including Stripe, Circle, and Squarespace) store and process data in the United States and potentially other countries. This means your personal data may be transferred to, and processed in, countries outside the UK and EEA whose data-protection laws may differ from those in your jurisdiction. Where we transfer personal data internationally, we take steps intended to ensure it receives an appropriate level of protection as required by applicable law, such as relying on the providers’ contractual safeguards. By using our services or providing your consent, you understand that your information may be processed in the United States.
Data Security
We take reasonable administrative, technical, and physical measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Payment information is processed by Stripe, which maintains its own security certifications and practices.
No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your information.
Third-Party Services and Links
Our platform integrates with or links to third-party services including Stripe, Circle, and Squarespace. Each of these services operates under its own privacy policy, which governs how they collect and use your information. We encourage you to review the privacy policies of any third-party service you use in connection with our platform.
Contact Information
If you have questions about this Privacy Policy, wish to exercise your privacy rights, or wish to make a complaint, please contact us at:
Marshall's Legacy, LLC
5 W Mendenhall, Ste 202
Bozeman, MT 59715
legal@marshallslegacy.com
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, by email. Your continued use of our platform after the effective date of any changes constitutes your acceptance of the updated policy.