Privacy Policy

Effective Date: March 2026 | Last Updated: March 2026

Who We Are

Legacy Workforce Solutions, LLC ("we," "us," or "our") is a staffing agency headquartered in Alabama. We connect workers with employers across Northern Alabama for temporary, temp-to-hire, and direct placement positions in industrial, warehouse, and light manufacturing environments.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our services, website (legacyworksal.com), web applications, and SMS communications.

Information We Collect

Information You Provide

Category	Examples	Purpose
Identity	Full name, date of birth, Social Security Number	Employment verification, payroll, tax reporting, I-9 compliance
Contact	Phone number, email address, mailing address	Shift notifications, onboarding, account access
Employment	Work history, skills, certifications, resume, education	Job matching, candidate qualification
Financial	Bank routing/account numbers, tax filing status (W-4)	Payroll direct deposit, tax withholding
Identity Documents	Driver's license, passport, work authorization documents	I-9 verification, E-Verify, background checks
Emergency	Emergency contact name and phone number	Workplace safety, emergency notification

Information Collected Automatically

• Device and usage data — IP address, browser type, pages visited, time spent on our website
• Location data — GPS coordinates when using the clock-in/clock-out feature on our worker portal (with your permission)
• Communication records — SMS messages sent and received through our platform, email correspondence

How We Use Your Information

• Employment services — Match you with job opportunities, process your application, verify qualifications
• Payroll and benefits — Calculate wages, withhold taxes, process direct deposits, generate pay stubs and W-2s
• Compliance — Meet federal and Alabama state employment law requirements (I-9, E-Verify, OSHA, new hire reporting, workers' compensation)
• Communications — Send shift notifications, interview reminders, onboarding instructions, and availability check-ins via SMS and email
• Safety — Track workplace incidents, verify clock-in locations via geofence, maintain OSHA records
• Improvement — Analyze workforce trends, improve our matching algorithms, conduct satisfaction surveys

How We Protect Your Information

• Encryption at rest — Sensitive data including Social Security Numbers, bank account numbers, routing numbers, and dates of birth are encrypted using AES-256 (Fernet) encryption before storage
• Data masking — SSNs are displayed as XXX-XX-1234 (last four only) in the application. Bank account and routing numbers are similarly masked
• Access logging — Every access to encrypted personal data is logged with the user, timestamp, and purpose
• Role-based access — Staff access is restricted by role. Only authorized personnel can view sensitive information
• Hardware security keys — Financial and banking operations require hardware security key (YubiKey/FIDO2) authentication in addition to standard login
• Secure transmission — All data is transmitted over HTTPS/TLS. SMTP communications use SSL/TLS encryption
• Document integrity — Submitted compliance forms are cryptographically hashed (SHA-256) and locked after submission to prevent tampering

Who We Share Information With

We do not sell your personal information. We share information only as necessary for our staffing services:

Recipient	What We Share	Why
Client companies	Name, skills, certifications, availability	Job placement and scheduling (no SSN, DOB, or financial info shared)
Payroll processors	Name, SSN, bank details, tax info	Wage payment and tax filing
Background check providers	Name, SSN, DOB	Pre-employment screening (with your written consent)
Government agencies	As required by law	I-9/E-Verify, new hire reporting, OSHA, tax authorities, workers' comp
Insurance carriers	Incident details, injury reports	Workers' compensation claims
Communication providers	Phone number, message content	SMS delivery via Twilio (our messaging provider)

Your Rights

You have the right to:

• Access — Request a copy of the personal information we hold about you
• Correction — Request that we correct inaccurate or incomplete information
• Deletion — Request deletion of your personal information, subject to legal retention requirements (we must retain certain employment and tax records as required by law)
• Opt-out of SMS — Reply STOP to any text message to immediately stop receiving SMS communications
• Withdraw consent — Withdraw consent for non-essential data processing at any time

To exercise any of these rights, contact us at admin@legacyworksal.com or call (256) 384-3310.

Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Active workers — Information retained for the duration of your employment relationship plus applicable retention periods
• Tax records (W-2, W-4, payroll) — Retained for 7 years per IRS requirements
• I-9 forms — Retained for 3 years after hire date or 1 year after termination, whichever is later (per USCIS requirements)
• OSHA records — Retained for 5 years per OSHA recordkeeping requirements
• Workers' compensation records — Retained per Alabama Code §25-5-78 requirements
• Candidate profiles — Retained for 2 years after last activity unless you request deletion
• SMS/communication logs — Retained for 1 year

Cookies and Tracking

Our website uses minimal cookies necessary for functionality:

• Authentication tokens — To keep you logged into the worker or client portal
• Session preferences — Language selection, form progress

We do not use advertising cookies, third-party tracking pixels, or sell browsing data. We do not participate in ad networks.

Children's Privacy

Our services are intended for individuals 18 years of age and older. We do not knowingly collect information from anyone under 18. If we learn that we have collected information from a minor, we will delete it promptly.

SMS Communications

For details about our text messaging program, including message types, frequency, consent, and opt-out instructions, please see our SMS Terms & Conditions.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. For material changes, we will notify affected individuals via email or SMS.

Contact Us

Last updated: March 2026