Legal
Effective 8 September 2026
This Notice describes how The Beam Legacy Group LLC collects, uses, discloses, and retains personal information in connection with its website and preliminary business communications.
This Privacy Notice (“Notice”) describes the practices of The Beam Legacy Group LLC, an Oregon limited liability company doing business as Beam Legacy Consulting (“Company”, “we”, “us”, or “our”), with respect to personal information collected through beamlegacy.com (the “Site”) and through preliminary business communications with prospective clients.
This Notice does not apply to information processed in the course of delivering professional services to a client. Such information is governed by the applicable engagement agreement and any confidentiality, data processing, or security terms executed with that client, which control in the event of any inconsistency with this Notice. Section 8 describes our general approach to client information for informational purposes only and does not create rights in favor of any third party.
This Notice is provided for transparency. It is not a contract, does not create contractual obligations, and does not confer rights beyond those provided by applicable law.
(a) Information you provide. When you request a consultation through our scheduling provider, you may submit your name, business email address, company website, approximate employee headcount, and free-text responses. When you correspond with us by email, we receive the contents of that correspondence and associated metadata.
(b) Information collected automatically. Our hosting provider generates server logs recording IP address, browser and device characteristics, referring URL, requested resource, and timestamp. Such information is generated by ordinary operation of the Site.
(c) Information from other sources. In preparing for or following a consultation, we may review publicly available information concerning your organization, including public websites, filings, and professional networking profiles.
(d) Categories not collected through the Site. As of the date of this Notice, we do not operate advertising trackers, remarketing pixels, or session-recording technologies on the Site, and we do not purchase contact lists or personal information from data brokers. We do not intentionally solicit through the Site information falling within categories of sensitive personal data as defined under applicable state privacy law.
We process personal information described in Section 2 for the following business purposes:
We do not use personal information collected through the Site to conduct profiling that produces legal or similarly significant effects concerning an individual, or for targeted advertising.
We disclose personal information to service providers that perform functions on our behalf, subject to their respective terms of service. As of the date of this Notice, these include:
We may also disclose personal information where required by law, subpoena, court order, or other legal process; where necessary to protect our legal rights or the safety of any person; or in connection with a merger, acquisition, financing, or sale of assets, in which case the recipient will be bound by terms no less protective than those described here.
This list reflects our arrangements as of the date above and may change. We will update this Notice to reflect material changes to the categories of recipients.
Our professional services include the design and implementation of automated workflows that may employ artificial intelligence services provided by third parties. This Section describes our general practices.
Personal information submitted through the Site or through preliminary correspondence is not used to train artificial intelligence models, and is not submitted to third-party artificial intelligence services for marketing or profiling purposes.
In the course of a client engagement, client information may be processed by third-party artificial intelligence service providers where necessary to perform the engaged services. Our standard practices in such circumstances, subject to the terms of the applicable engagement agreement, are as follows:
Specific obligations regarding artificial intelligence services, subprocessors, and data handling are established in the applicable engagement agreement. Nothing in this Section creates an obligation enforceable by any person other than the client party to such agreement.
We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction, in a manner proportionate to the nature of the information and the scale of our operations. Such measures presently include access controls with multi-factor authentication, device encryption, credential management, and segregation of client environments.
No method of transmission or storage is entirely secure. We do not represent, warrant, or guarantee that personal information will remain free from unauthorized access, and you transmit information to us at your own risk.
In the event of a security incident affecting personal information, we will provide notification to affected persons and to regulators to the extent and within the timeframes required by applicable law.
In performing professional services we may access confidential business information belonging to a client, and personal information relating to that client’s personnel, customers, or counterparties. With respect to such information, the client is the controller and we act as a processor or service provider on the client’s documented instructions.
Our general practices with respect to client confidential information, as further specified in the applicable engagement agreement, are that such information is used solely for the performance of the engaged services; is not disclosed outside the engagement absent client instruction or legal compulsion; is not commingled with or used for the benefit of another client; and that access credentials are revoked upon conclusion of the engagement, subject to records we are required to retain.
Methodologies, techniques, know-how, templates, and general skills developed or improved in the course of an engagement remain our property. Client data, configurations, and work product remain the property of the client, as specified in the engagement agreement.
We retain personal information for the period necessary to fulfill the purposes described in Section 3, unless a longer retention period is required or permitted by law. Business development records are ordinarily retained for approximately three years following last contact. Correspondence is retained in accordance with our records management practices and applicable tax and legal requirements. Server logs are retained by our hosting provider for a limited period determined by that provider. Client records are retained in accordance with the applicable engagement agreement and applicable professional and legal obligations.
We may retain information for longer where necessary to establish, exercise, or defend legal claims, or to comply with legal obligations.
Subject to applicable law and to verification of your identity, you may request that we: confirm whether we process personal information about you; provide access to or a copy of such information; correct inaccurate information; delete such information; or cease sending you communications.
Requests may be submitted to james@beamlegacy.com. We will respond within the period required by applicable law, or where no period is prescribed, within a reasonable time not ordinarily exceeding forty-five days. We may decline a request where an exception applies, including where compliance would compromise obligations of confidentiality owed to a client, would disclose personal information of another individual, or where we are otherwise entitled or required to retain the information.
We do not meet the applicability thresholds of the Oregon Consumer Privacy Act, the California Consumer Privacy Act, or the General Data Protection Regulation, and nothing in this Notice constitutes an admission that any such statute applies to us. We nonetheless endeavor to honor requests of the kinds described above as a matter of practice. We will not discriminate against any individual for submitting a request.
WE DO NOT SELL PERSONAL INFORMATION AND HAVE NOT SOLD PERSONAL INFORMATION. WE DO NOT SHARE PERSONAL INFORMATION FOR CROSS-CONTEXT BEHAVIORAL ADVERTISING.
As of the date of this Notice the Site does not employ advertising or analytics technologies from which an opt-out would be applicable. Should such technologies be introduced, this Notice will be updated and we will honor recognized universal opt-out preference signals, including Global Privacy Control, to the extent required by applicable law.
We are located in the State of Oregon, United States, and information submitted through the Site is stored and processed in the United States. If you access the Site or submit information from outside the United States, you acknowledge that the laws of the United States may differ from those of your jurisdiction and consent to the transfer of your information to, and processing in, the United States.
The Site is directed to businesses and is not intended for individuals under the age of eighteen. We do not knowingly collect personal information from such individuals. If you believe we have inadvertently done so, contact us and we will take reasonable steps to delete it.
The Site may contain links to websites operated by third parties. We do not control such websites and are not responsible for their content, security, or privacy practices. This Notice does not apply to any third-party website, and we encourage you to review the privacy notice of any site you visit.
We may amend this Notice at any time. The effective date appears at the top of this page. Material amendments will be indicated at the top of this page for a reasonable period following the change. Your continued use of the Site following the posting of an amended Notice constitutes acknowledgment of the amendment.
The Beam Legacy Group LLC, doing business as Beam Legacy Consulting
Willamette Valley, Oregon, United States
james@beamlegacy.com
Privacy-related correspondence should be identified as such in the subject line to ensure timely routing.