Privacy Notice

Who we are

Pendragon Legacy Limited, registered in England & Wales, company number 17324285. Registered office: S A1 Accountants Ltd, Unit 3, Rainbow Business Centre, Swansea, West Glamorgan, SA7 9FP.

If you have any question about your information, or want to exercise any of the rights below, call 0800 246 1961 or email hello@pendragonlegacy.co.uk.

What we collect

• Your answers to the questionnaire — including your name, date of birth, address, contact details, marital status, and details of your family, your executors or attorneys, your gifts and your estate. Some of this is detailed information about your personal and family life, and we treat it accordingly.
• A short set of questions about your understanding of the Will you are making, and whether anything — including your health or memory — might affect the decisions in it. Where you tell us about your health, that is information the law treats as especially sensitive, and it is used for one purpose only: deciding whether we can properly prepare the document, or whether you should speak to someone in person first.
• Your contact details when you ask for a call back, book an appointment, use the quiz, or start the questionnaire and do not finish it.
• Records of your consent — what you were told, in the exact words used, and when.
• Payment records. Card details are handled entirely by Stripe and never reach our systems; we hold the amount, the reference and whether payment succeeded.
• Identity verification. Before we prepare a document we confirm who you are: you photograph an identity document and take a selfie, and these are checked by Stripe. The photographs and the face scan are held by Stripe, not by us. What we keep is the outcome — whether the check passed, the name and date of birth on the document, and the type of document used — so that we can show the person who gave us instructions was the person the document is for.
• Website usage — the pages visited and where the visit came from, counted in aggregate, plus the advertising identifiers described in our Cookie Policy.
• Anything you type into the AI adviser, and the answers it gives.

Why we use it, and our lawful basis

• To prepare, check and deliver your documents — because it is necessary to perform our contract with you.
• To answer your enquiry and call you back when you ask — because it is necessary to take steps at your request before entering a contract.
• To keep proper records of the advice-free document preparation we carried out, and to handle complaints — our legitimate interest in running a professional service and defending claims, and in places a legal obligation.
• To send you occasional marketing about our own Wills, LPA and probate services — the soft opt-in in the Privacy and Electronic Communications Regulations, where you gave us your details in the course of enquiring about or buying those services. You can stop this at any time and we make it easy.
• To satisfy ourselves that you understand the Will you are making and are making it freely — whoever prepares a Will has to be able to show this, and a Will made by someone who did not understand it can be set aside after their death. Where those answers touch on your health we rely on your explicit consent, and on the need to establish or defend legal claims. A concern here never means we refuse you: it means a person at the firm reads your document, and may suggest you speak to a doctor or to us first.
• To confirm your identity before preparing a Will, LPA or deed poll — because it is necessary to perform our contract with you, and because a document we prepare has to be capable of being shown to be genuinely yours, sometimes many years later. The face scan is biometric information, which the law treats as a special category: for that part we rely on your explicit consent, which is why you are asked to agree before the check runs, and why declining is a real option rather than a refusal of service.
• To measure our advertising. Anything that identifies you — the advertising identifier from the link that brought you here, a cookie, or a scrambled form of your email address or telephone number — is used only with your consent, given through the cookie banner and withdrawable at any time. Before you answer that banner, Google's tag runs with all of its permissions off and sends only an anonymous note that a page was viewed, which our Cookie Policy describes in full; we rely on our legitimate interest in knowing whether our advertising works, and choosing “Reject all” in cookie settings stops even that.

Marketing, and how to stop it

When you give us your details we tell you what we will use them for and that you can opt out at any time. In full, the notice reads: "We'll use your details to help you complete your Will or LPA, and may send occasional updates about our Wills, LPAs and probate services. You can opt out at any time — every message has an unsubscribe link, and you can reply STOP to any text."

Every marketing email carries an unsubscribe link, and you can reply STOP to any text message. We record the request against the email address or mobile number itself, so it holds even if you later contact us again from the same address — and it takes effect before anything else is sent.

Messages about a document you have actually ordered are not marketing and will still be sent, because you need them.

Your unfinished answers, and where they are kept

The questionnaire is long, and most people do not finish it in one sitting. So it saves as you go, and there are three separate things going on. It is worth setting them out plainly.

First, the working copy. It is held in your own web browser, on your own device, and it is what makes the “continue where you left off” prompt appear the moment you come back. You can prove that to yourself: clear your browsing data for this site and that copy is gone immediately.

Second, once you have given us an email address or a mobile number, we also keep a full copy of your answers on our servers. This is what lets the reminder we send you actually do what it promises: before we kept it, a reminder opened on a phone landed on an empty form, because the answers were still on the laptop you started on. Your answers are encrypted in transit and encrypted at rest. Access is limited to the people who prepare and check your documents. That copy is not shown on any screen our sales or support staff use, it is not searched, and it is not used to decide anything about you.

We keep it for 90 days from your last visit, and then it is deleted automatically. If you go on to buy, it becomes part of your order and is kept with the rest of your file instead. If you would rather we did not hold it at all, tell us and we will delete it.

Third, and separately, we keep a deliberately limited record of your enquiry — the one our team can actually see and work from. This is so we can pick the conversation back up. It is a short, fixed list, not a copy of your answers:

• It holds: your name, date of birth, postcode and contact details; which product you are buying; how far through you got; and the multiple-choice answers that decide whether your situation is straightforward or needs a person to look at it.
• Anything you write in your own words is not in it. Funeral wishes, instructions to your attorneys, your reasons for leaving someone out and every other free-text box are held only in your browser and in the encrypted copy described above — there so that they can be given back to you, and nowhere that anyone here browses.
• The people you name are not in it. Executors, attorneys, guardians, beneficiaries, people to be notified and your certificate provider never reach that record before you buy; all it holds is how many of them there are. They never visited this site and never agreed to anything, which is why their names are kept out of the record our team works from.
• A new name on a change-of-name deed poll is not in it either. Holding your old and new name side by side in a record staff read would say something about you that is none of our business unless and until you instruct us.

How your information is protected

Once you buy, the full answers do reach us — we cannot draft your document otherwise — and from that point they are treated as the confidential legal records they are.

They are held in an encrypted database hosted in London. It is not reachable from the public internet or from anyone's web browser: every read and write goes through our own server, which checks who is asking first. Access is limited to the people at the firm who need it for your matter — the legal professional who checks your document, and the staff handling your order — and each of them has their own account, with what they can see governed by their role.

Some things never reach us at all, by design. Your card details are handled entirely by Stripe. The photograph of your identity document and your selfie are held by Stripe, not by us; we are told only whether the check passed.

The connection between your browser and this site is encrypted, and the links we email you that lead to a document are single-purpose, unguessable, and expire.

No system is perfect, and we would rather say so than imply otherwise. If something does go wrong and your information is affected, we will tell you and the Information Commissioner's Office as the law requires.

The AI adviser

The chat assistant on this site answers general questions about Wills and LPAs from our own published wording. It does not give legal advice about your circumstances and does not create a solicitor–client relationship.

What you type is sent to Google, who run the model on our behalf, and the conversation is stored so we have a record of what was said. Please do not put anything into it that you would not want recorded — if your question is about your own situation, ask us directly instead.

Some subjects are deliberately passed to a person rather than answered by the assistant.

Proving who you are

A Will or a Lasting Power of Attorney is only worth having if it can be shown to be genuinely yours — usually at a point when you are no longer there to confirm it. So before anything is drafted we check identity: you photograph your passport, driving licence or ID card, and take a selfie. Stripe checks the document is genuine and that the face in front of the camera is the face on it.

Stripe carries out that check and holds the images. We never see or store your photographs, and we do not receive the face scan. What we are told, and what we keep, is the result: whether it passed, the name and date of birth on the document, and which type of document you used. We compare that against the name on your instructions, and if the two do not match we stop and speak to you rather than carrying on.

The face scan is biometric information — a special category under data protection law — and it is used for one purpose only: confirming you are the person named on the document. It is never used for advertising, never shared for anyone else's purposes, and never used to identify you anywhere else.

You do not have to be photographed. If you would rather not, tell us and we will verify you another way, such as a video call or certified copies of your documents. That route takes a little longer and reaches the same result; nobody is refused service for declining a face scan.

Who else sees it

We do not sell your information, and we do not share it for anyone else's marketing.

We use suppliers who process it strictly on our instructions: Supabase (our database, hosted in London), Vercel (website hosting), Stripe (payments, and the identity check described above), Resend (email), Twilio (text messages), Cal.com (appointment booking), Google (the AI adviser, and advertising and website measurement) and Meta (advertising on Facebook and Instagram).

Where we measure advertising, and only if you have consented, we send Google and Meta a one-way scrambled form of your email address or telephone number so they can match a sale to an advert. Neither can read the original from what we send, and we never send either of them the answers you gave in the questionnaire.

We will also disclose information where the law requires it.

Where it is kept

Our database is hosted in London. Some of our suppliers process information outside the UK; where they do, that transfer is covered by the safeguards the law requires, such as the UK addendum to the standard contractual clauses.

How long we keep it

Documents we have prepared for you, and the records that go with them, are kept for as long as we may need to evidence the work — a Will can be relied on decades after it was made.

Detailed retention periods for each category of information are being finalised and will be published here. Enquiry and marketing records are kept for no longer than we need them, and advertising identifiers are removed on a fixed schedule.

Two periods are already fixed, and we would rather state them than wait. The encrypted copy of an unfinished questionnaire is deleted 90 days after your last visit unless you have bought something, in which case it becomes part of your order. Advertising identifiers are removed after 90 days as well.

Your rights

• Ask for a copy of the information we hold about you.
• Ask us to correct anything that is wrong.
• Ask us to delete it, or to restrict what we do with it, where the law allows.
• Object to processing we carry out for our legitimate interests.
• Object to direct marketing at any time — this one is absolute, and we will always act on it.
• Ask us to transfer information you gave us to someone else, where that applies.
• Withdraw a consent you gave, without affecting anything done before you withdrew it.

Complaints

Please tell us first — call 0800 246 1961 or email hello@pendragonlegacy.co.uk — and we will try to put it right.

You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.

Changes to this notice

If we change how we use your information we will update this page. Where the change is significant we will tell you directly.