Privacy Policy
Updated October 2026
Legacy Spas respects your privacy. This policy explains how information is handled when you use this website or contact our Langley showroom.
Information collected
Our contact form asks for your full name, phone number, optional email address and message. Please do not include payment-card details or other sensitive information. We also receive the page URL, referral and campaign details, browser/device information and the time of your inquiry. First-visit attribution is stored in your browser's local storage, and a session landing page is stored in session storage.
Cloudflare hosts the website and provides Turnstile spam protection. These services process technical information, including IP addresses, to deliver and protect the site. HighLevel stores contact details and inquiry notes and sends an internal notification to our team. Our website support provider, Small World Marketing, operates the site and these integrations for us. Service providers may process information outside Canada.
Website analytics
We use Google Analytics 4 to understand page visits and contact actions. It receives page addresses, browser and device information and interaction events. We do not send form names, phone numbers, email addresses or messages to Google Analytics, and the website strips query strings from the page and referrer addresses it sends. Analytics cookies may be used outside regions where our configuration defaults to denied storage. Advertising storage, Google signals and advertising personalization are disabled. You can allow or decline analytics cookies using the controls on this page; Google may still receive limited measurement signals when storage is denied.
Cloudflare Web Analytics measures visits and page performance without analytics cookies. Google and Cloudflare may process measurement information outside Canada. Their respective privacy policies explain their processing. Browser privacy settings and extensions can also limit analytics.
Advertising measurement
With your permission, Agency Metrics records a pseudonymous visitor identifier, page visits, referral and campaign details, ad click identifiers and contact-link or form interactions. Its visitor cookie lasts up to 90 days; attribution records are retained for up to 180 days. You can allow or decline this measurement using the ad measurement controls, and change your choice on this page. Declining does not prevent you from contacting us.
When you submit a Meta instant form, we use HighLevel and Agency Metrics to record the inquiry and its sales progress. We send matching identifiers and outcomes such as qualification, appointments and completed sales to Meta to measure advertising performance. Email addresses and phone numbers used for Meta matching are hashed. This measurement does not subscribe you to promotional messages. These service providers may process information outside Canada.
How information is used
We use your information to answer your inquiry, discuss products or services, provide quotes and customer support, maintain necessary business records and protect the website from misuse. Campaign and referral information helps us understand where inquiries come from. Sending an inquiry does not subscribe you to promotional email or text messages.
We do not sell contact-form submissions. Information may be shared with service providers for these purposes, where required by law, or as necessary to provide a service you request.
Retention and security
We retain information as needed to respond to your request, support an ongoing customer relationship and meet applicable business or legal requirements. We use reasonable safeguards appropriate to the information. No website or transmission method can guarantee absolute security.
Your choices
You may request access to or correction of your personal information, ask questions about retention, or withdraw consent where applicable. Contact our privacy representative at info@legacyspas.ca, call (778) 907-4153, or write to Legacy Spas, 20679 Langley Bypass, Langley, BC V3A 5E8. We may need to verify your identity before responding.
You can clear browser storage or restrict it in your browser settings. The form can still send an inquiry when attribution storage is unavailable. We may update this policy when our practices change.
