Privacy Policy

    Last updated: 1 January 2026

    1. Who We Are

    Legacy Lines is a professional will writing and estate planning service based in Tonbridge, Kent. Our registered address is 25 Chichester Rd, Tonbridge, Kent TN9 2TL. You can contact us at info@legacy-lines.com or by telephone on 07944 205 553.

    We are the data controller for the personal information we hold about you. This policy explains how we collect, use, share, and protect that information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

    2. Information We Collect

    We may collect and process the following personal data:

    • Identity data: name, date of birth, relationship status.
    • Contact data: postal address, email address, telephone number.
    • Financial data: information about your assets, property, and estate (needed to draft your will or lasting power of attorney).
    • Special category data: health information where relevant to an LPA or capacity assessment, with your explicit consent.
    • Usage data: information about how you use our website, collected via cookies and analytics tools.
    • Communications data: the content of enquiries, emails, and messages you send us.

    3. How We Use Your Information

    We use your personal data to:

    • Provide will writing, LPA, trust, and estate planning services you have requested.
    • Communicate with you about your instructions and appointments.
    • Send service-related notifications and reminders (e.g. will review reminders).
    • Comply with our legal and regulatory obligations.
    • Improve our website and services using anonymised analytics data.
    • Respond to enquiries submitted through our contact form.

    4. Legal Basis for Processing

    We process your personal data on the following legal bases:

    • Contract performance: to deliver the services you have instructed us to carry out.
    • Legal obligation: to comply with anti-money laundering regulations (including identity verification) and other legal requirements.
    • Legitimate interests: to improve our services and maintain business records, where your interests and rights do not override ours.
    • Consent: for marketing communications and for processing special category data, where required.

    5. Data Sharing

    We do not sell your personal data. We may share it with:

    • Service providers: trusted third parties who help us deliver services (e.g. secure document storage, identity verification), under strict data processing agreements.
    • Professional advisers: solicitors, accountants, or other professionals where needed to complete your instructions.
    • Regulatory bodies: where required by law (e.g. HMRC, the Office of the Public Guardian).
    • Successors: if Legacy Lines is acquired or merged, your data may be transferred to the new owner with notice to you.

    6. Data Retention

    We retain client files — including wills and LPAs — for a minimum of 6 years after the last service was provided, in line with professional best practice and potential legal liability periods. Some documents (such as original wills held in storage) are retained indefinitely or until collected.

    Enquiry data from non-clients is deleted after 12 months if no instructions are received.

    7. Your Rights

    Under UK GDPR, you have the right to:

    • Access the personal data we hold about you (subject access request).
    • Rectification of inaccurate or incomplete data.
    • Erasure ("right to be forgotten"), where applicable.
    • Restriction of processing in certain circumstances.
    • Data portability where processing is automated and based on consent or contract.
    • Object to processing based on legitimate interests.
    • Withdraw consent at any time where processing is consent-based.

    To exercise any of these rights, please contact us at info@legacy-lines.com. We will respond within one calendar month.

    8. Cookies

    Our website uses cookies to improve your experience and to analyse site traffic. Please see our Cookie Policy for full details.

    9. Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. These include encrypted communications (HTTPS), access controls, and secure document storage.

    10. Complaints

    If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

    We would, however, appreciate the opportunity to address your concern directly before you contact the ICO.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our services after any update constitutes acceptance of the revised policy.