Privacy policy
Last updated: 23 October 2026. [Draft template. Please review it before launch and check it matches how you actually work.]
1. Who we are
LPA Direct ("we", "us") provides this website and service. We are the data controller for the personal information described here. Contact: info@lpadirect.co.uk.
2. What we collect
- Enquiry details: your name, phone number, email address, postcode if you give it to us, your preferred time for a call back, and your contact choices.
- Your answers to our online tools: for example rough property, savings and pension values from the inheritance tax checker, or your answers to the LPA and will checks. Some answers may hint at health (for example, if you tell us your health worries you). That is special category data, and we only use it with your explicit consent so we can respond to your enquiry.
- Campaign and technical data: the page you arrived on, the site or advert that referred you (UTM tags and ad click IDs such as gclid or fbclid), and the time of your enquiry.
- If you become a client: the information needed to prepare your will or LPAs, including details about your family, beneficiaries, executors, attorneys, assets and identity checks.
- If you buy the executor pack: the details you choose to give us for your executors, such as bank accounts, insurance policies, pensions and other financial arrangements (provider names, account or policy references and approximate values; we never ask for passwords, PINs or full card numbers), your funeral wishes and personal wishes. Funeral and personal wishes can reveal religious or philosophical beliefs or health information, which is special category data.
3. How we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Phoning, emailing and texting you about your enquiry and calling you back for your free call | Your consent (ticked on our form) and steps taken at your request before entering into a contract |
| Providing our will and LPA services | Contract. Explicit consent for any health information. |
| Preparing your executor pack | Contract. Your explicit consent for any special category data, such as religious beliefs or health in your funeral or personal wishes. You can withdraw it at any time. |
| Occasional marketing emails (only if you opt in) | Consent. You can unsubscribe at any time. |
| Measuring which adverts work (advertising cookies) | Consent through our cookie banner |
| Record-keeping, preventing fraud, legal and insurance requirements | Legal obligation and legitimate interests |
We never sell your details or pass them to other companies for their own marketing. We don't make cold calls or send unsolicited texts or emails.
4. Who we share it with
We use trusted service providers who process data on our behalf under contract: website hosting and enquiry-form handling (Netlify, Inc.), our business email, including the emails we send you about your enquiry (Hostinger), marketing emails and SMS [email platform / SMS provider], will-drafting software [provider], identity verification [provider], and, if you accept advertising cookies, Meta Platforms and Google for ad measurement. We send LPAs to the Office of the Public Guardian when you ask us to. Netlify is based in the United States, so the details you enter in our enquiry form, and technical data such as your IP address when you visit this website, are processed in the US. Netlify is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which UK law recognises as giving an adequate level of protection, and our data processing agreement with Netlify includes the International Data Transfer Addendum approved by the ICO as a fallback. If any other provider processes data outside the UK, we use UK-approved safeguards such as the International Data Transfer Agreement or adequacy regulations.
5. How long we keep it
- Enquiries that don't go ahead: up to [12] months after our last contact, then deleted.
- Client files: for as long as needed to provide the service, and afterwards for [the period you decide, e.g. 15 years after the will is made, or until the estate is administered; check any professional body or insurer requirements once you join].
- Executor pack: we prepare it, send it to you securely, and then delete our working copy within [30] days of you confirming receipt, unless you ask us in writing to keep it. We don't offer a document storage service.
- Marketing preferences: until you unsubscribe. After that we keep a suppression record so we don't contact you again.
6. Your rights
You have the right to access, correct or delete your data, to restrict or object to how we use it, to data portability, and to withdraw consent at any time. Withdrawing consent doesn't affect anything we did before. To use any of these rights, email info@lpadirect.co.uk. You can also stop marketing by replying STOP to any text, or by using the unsubscribe link in any email.
If you're unhappy, please tell us first. You also have the right to complain to the ICO: ico.org.uk/make-a-complaint, or call 0303 123 1113.
7. Security
We use encrypted connections (HTTPS), access-controlled systems and providers with recognised security standards. Executor-pack information is held only in encrypted storage with access limited to the staff preparing it, and is sent to you as a password-protected file, with the password sent separately. [Confirm this matches your actual process before launch.] We don't store signed original documents: you keep your signed originals. We keep secure digital copies of drafts and instructions for the retention period below.
8. Cookies
See our cookie policy.