Pending compliance review. This draft describes how the site works in October 2026. It is not signed-off legal advice and should be checked before it is treated as the live policy.

Privacy Policy

Last updated: October 2026

Who We Are

Modern Legacy Ltd ("we", "our", "us") is a will writing and estate planning business registered in England (Company No. 16648708). Our registered address is available on request. We can be contacted at daniel@modernlegacy.co.uk.

Modern Legacy Ltd is the data controller. We are registered with the Information Commissioner's Office (ICO), registration number ZC036999, and we handle personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

What Data We Collect

When you use our will questionnaire, inheritance checker, contact us, or book a call, we may collect:

• Your name, date of birth, sex, address, postcode, telephone number and email address
• Marital status and details of a spouse or partner
• Children's data: names, dates of birth, sex and addresses of children and other dependants, where you choose to give them
• Details of executors, guardians and beneficiaries you wish to appoint
• Financial information, including property, other assets, liabilities and business interests
• Funeral wishes and any notes you add
• Health information about people who may benefit under your Will, only if you tell us that someone is not in good health. Health data is special-category data. We use it only to draft the documents you have asked for, and only with the consent tick box on the questionnaire
• A record that a payment succeeded. Card numbers are handled by Stripe. We do not store your card details
• Technical data such as your IP address, used for a short time to limit abusive form submissions

How We Use Your Data

• To prepare your Will - your answers are sent to The Will Company, our drafting partner, so they can prepare the documents.
• To email you - confirmation of your questionnaire, a resume link if you click Save, and replies to messages you send us. Email is sent through the business mailbox at daniel@modernlegacy.co.uk.
• To take payment - Stripe confirms that the correct amount was paid. We do not see or store your card number.
• To let you finish later - if you click Save, we keep one copy of your unfinished answers so the link in that email can bring you back. Unfinished forms are deleted after 30 days. The form may also keep a copy in your own browser. That copy is not emailed and is not stored on our servers.
• To arrange a call - Calendly handles booking pages and reminders.
• Optional analytics and ads - Google Analytics and Google Ads run only if you accept optional cookies. Rejecting them does not block the site.
• Optional spreadsheet backup - if we have switched on a Google Sheets backup, a copy of a submitted questionnaire may also be written to a private Google Sheet that only we can open.

Legal Basis for Processing

• Consent - the tick box on the questionnaire, including explicit consent for any health details you choose to give. Optional analytics and advertising cookies are a separate choice on the cookie banner.
• Contract - drafting your Will, taking payment and sending you the documents you asked for.
• Legitimate interests - a short reminder if you saved an unfinished form, keeping the site secure, and answering enquiries. You can ask us to stop reminder emails.
• Legal obligation - keeping payment records for tax.

Who We Share Your Data With

We share personal data only as far as we need to in order to provide the service:

• The Will Company (The Strategic Alliance Group Ltd) - prepares the legal documents.
• Stripe - takes the card payment. stripe.com/privacy.
• Calendly - appointment booking. calendly.com/privacy.
• Netlify - hosts the website and stores saved questionnaires and rate-limit records.
• Our email provider - the service that sends mail from daniel@modernlegacy.co.uk (this may be Google Workspace or another business email host).
• Google Analytics and Google Ads - only if you accept optional cookies. policies.google.com/privacy.
• Google Sheets - only if the optional backup is switched on.

We do not sell your data.

International Transfers

Some of these providers store or process data outside the United Kingdom, including in the United States (Stripe, Google, Calendly and Netlify). Where that happens we rely on the provider's UK transfer arrangements, such as the UK International Data Transfer Agreement or the UK extension to the EU-US Data Privacy Framework, together with their contract terms. You can ask us which arrangement applies to a particular provider.

How Long We Keep Your Data

• Completed questionnaires - for the business relationship and for 6 years afterwards.
• Unfinished saved forms - deleted after 30 days. A browser-only draft stays on your device until you clear it, submit the form, or it is older than 7 days.
• Payment records - 6 years, for HMRC.
• Email correspondence - for the relationship and a reasonable period afterwards.

Your Rights

Under UK GDPR you can ask to access, correct, delete or restrict your data, to receive a portable copy, and to withdraw consent. Withdrawing consent does not undo processing that has already happened. To use any of these rights, email daniel@modernlegacy.co.uk. We aim to reply within one month.

If you gave health information, you can withdraw that consent and ask us to delete it, subject to any copy already sent to the drafting partner as part of a Will you asked us to prepare.

Cookies

Essential storage keeps the site working. That includes a cookie-consent choice saved in your browser, a local draft of the questionnaire, and cookies set by Stripe or Calendly when you pay or book a call.

Optional cookies are Google Analytics and Google Ads. They stay off until you press "Accept optional cookies". "Reject optional cookies" is the same kind of button and the site still works in full if you reject them. You can change your mind by clearing this site's data in your browser and choosing again.

Data Security

Pages are served over TLS. Card payments are taken by Stripe, a PCI-DSS Level 1 provider. Saved questionnaires are stored with a long random link, not an easy-to-guess address. Access to mailbox and hosting accounts is limited to people who need them for the service.

Complaints

If you are unhappy with how we have handled your data, email daniel@modernlegacy.co.uk. You can also complain to the Information Commissioner's Office at ico.org.uk.

Changes to This Policy

We will post changes on this page and change the "last updated" date.