Privacy & Data Protection Policy
Document Version: 2.1.0 (Last Updated: May 8, 2026)
Summary of Sections
- 1. Data Controller Info
- 2. Special Category Data Warning
- 3. AI Provider & Model Training
- 4. Retention Periods
- 5. Payment & Dispute Data
- 6. Fraud Prevention Logs
- 7. Processor Categories
- 8. International Transfers
- 9. Your Deletion Rights
- 10. Contact Information
1. Data Controller
RIDGWELL SERVICES LIMITED (Company No. 16277582), registered in England and Wales, is the data controller for all personal data collected via legendspeak.net.
2. Special Category Data Warning
While Legend Speak is an educational and historical simulation tool, your interactions with the AI may involve sharing sensitive personal details, including political opinions, philosophical beliefs, or other "Special Category Data" as defined by the GDPR.
Consent: By voluntarily inputting such information into the chat interface, you provide explicit consent for us to process this data solely for the purpose of providing the historical simulation service.
3. AI Provider Disclosure & Model Training
Third-Party AI: We utilize Large Language Models provided by world-class third-party processors (such as OpenAI, Anthropic, or Google).
Model Training: We do not use your personal chat history to train the underlying public models of our AI providers. De-identified logs may be analyzed by our internal safety team to ensure responses remain historically accurate and safe for all users.
4. Data Retention Periods
We retain data only as long as necessary for the following purposes:
- Account Data: Retained for the duration of your active membership plus 6 years to satisfy legal and financial reporting obligations.
- Chat Interaction Logs: Retained for 2 years from the date of the conversation to facilitate continuity within the digital archive, unless you request deletion.
- Technical Logs: Retained for 90 days for security and server performance auditing.
5. Payment & Dispute Data Retention
Financial records (transaction amount, ID, and last 4 card digits) are retained for 7 years to comply with UK HMRC regulations and to manage potential billing inquiries or refund requests. Your full card details are handled exclusively by our PCI-DSS compliant processors and are never stored on our servers.
6. Fraud Prevention Logs
In our legitimate interest to prevent financial crime and platform abuse, we maintain logs of Technical and Transactional Data. These are used to detect card testing and unauthorized chargebacks, protecting the integrity of the Legend Speak platform.
7. Processor & Sub-Processor Categories
We share data with the following categories of partners:
- Hosting Providers: To maintain the website and archive database.
- AI Service Providers: To generate the simulation text.
- Payment Processors: To handle one-time transactions (e.g., Stripe, PayPal).
- Security Services: To protect the site from bots and malicious attacks.
8. International Data Transfers
Data may be processed in jurisdictions outside the UK or the EEA, primarily the United States. We ensure such transfers are governed by Standard Contractual Clauses (SCCs) to maintain a level of data protection equivalent to UK law.
9. Your Rights: Access & Deletion
Under the UK GDPR, you have the right to:
- Request Access: Obtain a copy of your stored personal data.
- Right to be Forgotten: Request the deletion of your account and chat logs. (Certain records may be kept for legal/tax compliance).
- Data Rectification: Update incorrect or incomplete information.
10. Contact Information
RIDGWELL SERVICES LIMITED
85 Great Portland Street, First Floor, London, England, W1W 7LT
Email: help@speaktoheaven.com