legacy privacy notice