Privacy Policy

1. Information About Us

Legacy Shield Ltd, a company registered in England & Wales under Company Number 16536098, whose registered office is at 124 City Road, London EC1V 2NX.  VAT number is.

Email address: admin@legacy-shield.co.uk

Telephone number: 0203 693 3916

Postal address: 124 City Road, London EC1V 2NX

2. Definitions and Interpretation

In this Privacy Notice, the following terms shall have the meanings set out below:

“Personal data”
Personal data is defined under applicable Data Protection Legislation (including the Data Protection Act 2018 and the UK General Data Protection Regulation (“UK GDPR”)) as:

Any information relating to an identifiable individual who can be directly or indirectly identified, in particular by reference to an identifier.

In simpler terms, personal data means any information about you that enables you to be identified. This includes obvious identifiers such as your name and contact details, as well as less obvious data such as identification numbers, electronic location data, and other online identifiers.

The types of personal data we collect and use are outlined in Clause 5 below.

3. What Does This Notice Cover?

This Privacy Notice applies solely to your use of Our Site.

Please be aware that Our Site may contain links to external websites. We have no control over how your personal data is collected, stored, or used by these third-party websites. We strongly recommend that you review the privacy policies of any such websites before providing any personal data to them.

4. Your Rights

Under the Data Protection Legislation, you have the following rights, which we are committed to upholding:

a) The right to be informed about our collection and use of your personal data. This Privacy Notice is intended to tell you everything you need to know, but you can always contact us to find out more or ask any questions using the details in Clause 13.

b) The right to access the personal data we hold about you. See Clause 12 for details on how to do this.

c) The right to have your personal data rectified if it is inaccurate or incomplete. Please contact us using the details in Clause 13.

d) The right to be forgotten – that is, the right to ask us to delete or otherwise dispose of any personal data we hold about you. Please contact us using the details in Clause 13.

e) The right to restrict (i.e., prevent) the processing of your personal data.

f) The right to object to our use of your personal data for specific purposes.

g) The right to withdraw consent. If we are using your personal data based on your consent, you may withdraw that consent at any time.

h) The right to data portability. If you have provided personal data to us directly, and we are processing it on the basis of your consent or the performance of a contract, and the processing is carried out by automated means, you may request a copy of that data for use with another service or organisation.

i) Rights related to automated decision-making and profiling. We do not use your personal data in this way.

For more information about our use of your personal data, or to exercise any of your rights, please contact us using the details in Clause 13.

It is important that the personal data we hold about you is accurate and up to date. Please let us know if your personal data changes during the period we retain it.

Further information about your rights can be obtained from the Information Commissioner’s Office (ICO) or your local Citizens Advice Bureau.

If you have concerns about how we use your personal data, you have the right to lodge a complaint with the ICO. However, we would appreciate the opportunity to resolve your concerns directly, so please contact us first using the details in Clause 13.

5. What Data Do We Collect?

Depending on your use of our website or your reason for supplying (or consenting to us receiving) your data, we may collect some or all of the following personal and non-personal data:

• Name

• Contact details (e.g. email address, telephone number, postal address)

• Date of birth

• Gender

• Financial information

• Employment details

• Information about your assets and estate

• IP address

• Browser type and version

• Operating system

• A list of URLs starting with a referring site, your activity on Our Site, and the site you exit to

• Any other personal information you choose to provide

In addition, we may receive your data from trusted data supply companies or partners. These third parties will have either:

• Obtained your consent to share your data with us; or

• Provided your data under a lawful basis, such as legitimate interest, in compliance with applicable data protection laws.

We ensure that all companies and partners we work with uphold the same high standards of GDPR compliance as we do. Wherever possible, we take reasonable steps to verify that they have obtained and processed your data lawfully.

6. How Do We Use Your Data?

6.1 All personal data is processed and stored securely and only for as long as is necessary for the purposes for which it was first collected. We will always comply with our obligations and safeguard your rights under the Data Protection Act 2018, UK GDPR, and any subsequent legislation. For further details on data security, please see Section 7, below.

6.2 Our use of your personal data will always be based on a lawful basis, which may include:

• The performance of a contract with you;

• Your consent (e.g. for receiving marketing communications); or

• Our legitimate interests (provided that such interests do not override your fundamental rights and freedoms).

We may use your data for the following purposes:

• To contact you by telephone or email regarding our products and services that may be of interest to you;

• To supply our products and/or services to you (please note that we require your personal data to enter into or fulfil a contract with you);

• To personalise and tailor our products and/or services to better meet your needs;

• To respond to your emails or other communications;

• To send you email communications that you have actively opted into (you may unsubscribe at any time via the link in our email footers);

• To conduct market research;

• To analyse usage of Our Site and gather user feedback to help us continually improve our website and services.

6.3 With your permission, and/or where permitted by law, we may use your personal data for marketing purposes. This may include contacting you by email, telephone, SMS, or post with news, updates, and offers about our services. We will not send you any unsolicited marketing communications or spam, and we will take all reasonable steps to ensure your rights are protected. We comply with the Privacy and Electronic Communications (EC Directive) Regulations 2003 in all such communications.

6.4 Third-party services (including but not limited to the BBC Corporation, YouTube, Google, Microsoft, Yahoo, Hotjar, and Tawk.to) whose content appears on Our Site may set cookies or use other tracking technologies. Please refer to our [Cookie Policy] for more information. We do not control the activities of such third parties and recommend that you review their respective privacy policies to understand how they use your data.

6.5 You may withdraw your consent to our use of your personal data at any time. You also have the right to request that we delete your data, subject to any legal or regulatory obligations that may require us to retain it.

6.6 We will not keep your personal data for longer than necessary for the purposes for which it was collected, or as required to comply with our legal, regulatory, or contractual obligations, or to assert or defend against potential legal claims.

We apply the following retention periods:

• Pre-Sale Information: If the data does not lead to a sale, we will retain it for up to 12 months. If you have requested not to be contacted, we may retain minimal contact details in a suppression file to comply with that request.

• Post-Sale Information: Due to the long-term nature of estate planning and the importance of ongoing customer service, we may retain this information indefinitely to ensure continuity and quality of service.                                                                                                                                                                                                                                                                                                                                                                                 7. How and Where Do We Store Your Data?
  7.1 We will only retain your personal data for as long as is necessary for the purposes set out in Section 6, or for as long as we are legally required or permitted to do so. Once data is no longer needed, it will be securely deleted or anonymised.
  7.2 Some or all of your personal data may be stored or transferred outside of the United Kingdom or the European Economic Area (“EEA”) (the EEA includes EU member states plus Norway, Iceland, and Liechtenstein). By using Our Site and submitting your information, you acknowledge and agree to this transfer.
  7.2.1 Where data is transferred outside of the UK or EEA, we will take all reasonable steps to ensure that it is treated securely and in accordance with this Privacy Notice and applicable data protection laws. Such steps may include:

  • Ensuring the destination country is subject to an adequacy decision by the UK Government or European Commission;

  • Implementing standard contractual clauses approved by the Information Commissioner’s Office (ICO) or the European Commission; and/or

  • Using approved mechanisms such as binding corporate rules or appropriate data transfer agreements.

  • 7.3 We take the security of your data very seriously. To protect your personal data, we have implemented robust technical and organisational measures including, but not limited to:

  • 7.3.1 Encryption of data at rest and in transit;

  • 7.3.2 Secure backups to protect against data loss;

  • 7.3.3 Strict access controls to limit access to authorised personnel only;

  • 7.3.4 Regular security audits and reviews of our systems and procedures.
    
    

8. Do We Share Your Data?

8.1 We will not share your personal data with any third parties for any purposes without your consent, unless required to do so by law, as outlined in this clause.

8.2 In certain circumstances, we may be legally required to share your personal data. This may include situations where we are:

• Involved in legal proceedings;

• Complying with statutory obligations;

• Responding to a court order or governmental request.

8.3 We may share your personal data with other companies within our corporate group, the details of which are set out in Schedule Two, for the purposes specified in that schedule.

8.4 In the event that we sell, transfer, or merge parts of our business or assets, your personal data may be transferred to a third party. Any new owner will be permitted to use your personal data only in the same ways set out in this Privacy Policy.

8.5 We may engage third-party service providers to deliver services on our behalf. These may include:

• Payment processors;

• Delivery and logistics providers;

• Marketing and advertising services;

• IT service providers (including analytics and search engines).

Where such third parties require access to your personal data, we will ensure that:

• Data is shared only to the extent necessary to fulfil the relevant service;

• Appropriate data protection agreements are in place;

• Your data is handled securely and in accordance with your rights and applicable law.

8.6 We may compile anonymised statistical data about the use of Our Site. This may include traffic patterns, usage behaviour, and demographic information. Such data will not identify you personally and may be shared with trusted third parties such as business partners, affiliates, or advertisers, where lawful.

8.7 Some of our third-party providers may be located outside of the United Kingdom or the European Economic Area (“EEA”). Where your personal data is transferred internationally, we will take all reasonable steps to ensure that it is:

• Stored and processed securely;

• Subject to appropriate safeguards (such as standard contractual clauses or adequacy decisions);

• Compliant with the Data Protection Act 2018 and the UK GDPR, as detailed in Schedule Two.

8.8 As noted in clause 8.2, we may be required to share your personal data by law, including in response to valid legal requests from public authorities.

9. What Happens If Our Business Changes Hands?

9.1 We may, from time to time, expand, reduce, or undergo structural changes to our business. This may involve the sale, transfer, or acquisition of part or all of our assets or business operations. Where personal data that you have provided is relevant to the part of the business being transferred, it may be transferred to the new owner or controlling party as part of that transaction.

9.2 Any such transfer will be conducted in accordance with applicable data protection laws, and the new owner or controller will be permitted to use your personal data only for the purposes for which it was originally collected, as set out in this Privacy Notice.

10. How Can You Control Your Data?

10.1 In addition to your rights set out in Section 4 of this Privacy Notice and under applicable data protection legislation, when you provide personal data via our Site, you may be given options to manage how we use your data. In particular, you will be offered clear choices to control our use of your data for direct marketing purposes. This includes the option to opt out of receiving marketing communications by:

• Clicking the “unsubscribe” link included in all marketing emails we send; or

• Adjusting your preferences at the time you provide your contact details.

10.2 You may also choose to register with one or more of the following UK preference services to further manage unsolicited marketing communications:

• The Telephone Preference Service (TPS)

• The Corporate Telephone Preference Service (CTPS)

• The Mailing Preference Service (MPS)

Please note, however, that registration with these services will not prevent marketing communications where you have actively consented to receiving them from us.

9.3 Where feasible and appropriate, we will notify you of such a change. At that time, you will have the opportunity to:

• Request that your data not be transferred; or

• Request deletion of your personal data, subject to any legal or regulatory obligations we may have.

11. Your Right to Withhold Information

11.1 You may browse certain areas of our Site without providing any personal data. However, access to specific features, content, or services may require you to submit or permit the collection of certain personal data.

12. How Can You Access Your Data?

You have the right to access the personal data we hold about you. This is commonly referred to as a "subject access request."

To make a subject access request, please contact us in writing using the email or postal address provided in Clause 13.

There is normally no charge for making a subject access request. However, if your request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee to cover administrative costs, or we may refuse to comply in such cases.

We aim to respond to all subject access requests within one month of receipt. If your request is particularly complex, or if you have made multiple requests, we may need additional time—up to a maximum of three months. If this is the case, we will inform you and keep you updated throughout the process.

For more information, or to make a request, please email us at hello@legacy-shield.co.uk or use the contact details set out in Clause 13.

13. Contacting Us

If you have any questions about our Site or this Privacy Notice, please get in touch using one of the following methods:

• Email: hello@legacy-shield.co.uk 

• Telephone: 0203 693 3916

• Post: 124 City Road, London EC1V 2NX

If your enquiry relates to the personal data we hold about you (as outlined in Section 12), please be as specific as possible to help us address your request promptly.

14. Changes to Our Privacy Notice

We may update this Privacy Notice from time to time, for example to reflect changes in the law or our data processing practices. Any updates will be posted on our website, and your continued use of the site following any changes will be deemed acceptance of the updated terms.

You may request a copy of the most current version of this Privacy Notice at any time by contacting us using the methods set out in Clause 13 above. We recommend that you review this Notice periodically to stay informed about how we are protecting your information.