Privacy Policy

1. Who we are

ClearLegacy is a trading name of Kaizen Finance Ltd, a company registered in England and Wales (Company No. 12092327).

For the purposes of UK GDPR and the Data Protection Act 2018, Kaizen Finance Ltd is the data controller of personal information you provide through clearlegacy.co.uk.

Contact us about anything in this policy at hello@clearlegacy.co.uk.

2. What data we collect

We collect different categories of personal information depending on how you interact with us:

Category	Examples	When we collect it
Identity	Full name, date of birth, marital status	When you complete a will or LPA form
Contact	Email, postal address, phone number	When you start a form or contact us
Family & estate	Names of executors, beneficiaries, guardians, partner/spouse details, asset descriptions	When you complete a will form
Payment	Card last four digits and transaction reference (full card details are processed by Stripe and never stored by us)	At checkout
Technical	IP address, browser type, device, pages viewed, referrer	Automatically when you visit
Marketing	Email preferences, campaign source (utm parameters)	If you opt in or arrive via an ad

3. Why we use your data (lawful basis)

We rely on the following lawful bases under UK GDPR Article 6:

• Contract — to prepare your will or LPA documents, take payment, deliver outputs and provide customer support.
• Legal obligation — to keep records for HMRC (six years), comply with anti-money-laundering checks, and respond to lawful information requests.
• Legitimate interests — to operate and improve the website, prevent fraud, measure marketing performance, and contact you about your order.
• Consent — for marketing emails and non-essential cookies (you can withdraw at any time).

4. Who we share your data with

We do not sell your personal information. We share it only with the processors and partners we need to deliver the service:

Processor	Purpose	Location
Stripe Payments Europe Ltd	Payment processing	Ireland / EU
Cloudflare, Inc.	Website hosting, CDN, security, R2 document storage	UK / EU / US (Standard Contractual Clauses)
Google Ireland Ltd	Analytics (GA4) and Google Workspace email	Ireland / EU
Microsoft Ireland Ltd	Bing Ads conversion tracking (UET)	Ireland / EU
Resend / SendGrid	Transactional email delivery	EU / US (SCCs)
Estate planning consultants	Drafting and review of your documents	UK

Where data is transferred outside the UK or EEA, we rely on adequacy decisions or Standard Contractual Clauses approved by the UK ICO.

5. How long we keep your data

• Will and LPA documents — stored securely for 90 days after delivery so you can re-download. After 90 days the digital draft is deleted unless you have requested extended storage.
• Order and payment records — six years from the end of the financial year the transaction relates to (HMRC requirement).
• Marketing data — until you unsubscribe.
• Website analytics — anonymised after 14 months (GA4 default).
• Support correspondence — three years from your last interaction.

6. Cookies and tracking

We use the following cookies and similar technologies:

• Essential — session management, security, payment processing. These cannot be turned off.
• Analytics — Google Analytics 4 to understand which pages perform and how visitors find us.
• Advertising — Microsoft UET and Google Ads conversion tags to measure ad campaign performance.

You can control non-essential cookies through your browser settings or our cookie banner where shown. Blocking analytics cookies will not affect your ability to use the service.

7. Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased (subject to our legal retention obligations)
• Restrict or object to certain types of processing
• Receive your data in a portable format
• Withdraw consent for marketing at any time
• Lodge a complaint with the Information Commissioner's Office

To exercise any of these rights email hello@clearlegacy.co.uk. We will respond within one month.

8. Security

We protect your data with TLS 1.2+ in transit, encryption at rest, access controls limited to a small number of authorised personnel, and regular review of our processors. Card payments are handled exclusively by Stripe and never touch our servers.

9. Children

Our service is intended for adults aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with information, contact us and we will delete it.

10. Complaints

If you are unhappy with how we have handled your personal data, please contact us first at hello@clearlegacy.co.uk so we can put it right. You also have the right to complain to the Information Commissioner's Office at any time.

11. Changes to this policy

We will update this page when our practices change. The date at the top reflects the most recent revision. Material changes will be communicated by email where we hold consent.