Privacy Policy

Account & Identity Information

• Full name, date of birth, and contact details (email address, telephone number, postal address)
• Account login credentials (your password is securely hashed and never stored in plain text)

LPA-Specific Information

• Details of the donor (the person creating the LPA)
• Details of appointed attorneys and replacement attorneys
• Details of certificate providers and people to notify
• Preferences and instructions relating to the LPA
• Information about property, financial affairs, or health and welfare decisions (depending on LPA type)

Payment Information

• Payment card details are processed securely by our third-party payment processor and are not stored on our servers
• We retain transaction records (amount, date, reference) for accounting purposes

Technical & Usage Data

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, and navigation patterns
• Cookies and similar tracking technologies (see Section 9)

• Contract: Processing is necessary to provide you with our LPA preparation service and fulfil our contractual obligations to you.
• Legal Obligation: Processing is necessary to comply with legal requirements, including those under the Mental Capacity Act 2005 and anti-money laundering regulations.
• Legitimate Interest: Processing is necessary for our legitimate business interests, such as improving our service, preventing fraud, and ensuring security.
• Consent: Where you have given consent for specific processing activities, such as receiving marketing communications. You may withdraw consent at any time.

• To prepare and generate your Lasting Power of Attorney documents in accordance with the Mental Capacity Act 2005
• To create and manage your account on our platform
• To process payments for our services
• To communicate with you about your LPA application, including status updates and required actions
• To provide customer support and respond to your enquiries
• To improve our website, services, and user experience
• To comply with legal and regulatory obligations
• To send you marketing communications (only with your explicit consent)

• Office of the Public Guardian (OPG): Your LPA documents are submitted to the OPG for registration as required by law.
• Payment Processors: Secure third-party payment providers who process your transactions.
• Hosting & IT Providers: Trusted service providers who host our platform and support our IT infrastructure, bound by data processing agreements.
• Legal & Regulatory Authorities: Where required by law, regulation, or court order.
• Professional Advisers: Accountants, auditors, or legal advisers where necessary for our business operations.

• Account data: Retained for the lifetime of your account and for up to 12 months after account deletion.
• LPA application data: Retained for 7 years after completion or last activity, in line with legal document retention best practices.
• Payment records: Retained for 7 years as required by HMRC for tax and accounting purposes.
• Marketing preferences: Retained until you withdraw consent or unsubscribe.
• Technical logs: Retained for up to 12 months for security and troubleshooting purposes.

• SSL/TLS encryption for all data transmitted between your browser and our servers
• Encryption of sensitive data at rest
• Secure password hashing using industry-standard algorithms
• Regular security assessments and updates
• Access controls to limit who can view your personal data
• Staff training on data protection and confidentiality

• Strictly Necessary Cookies: Essential for the website to function, including session management and security. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings to enhance your experience.
• Analytics Cookies: Help us understand how visitors use our website so we can improve it. Data is anonymised where possible.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our service.

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data where there is no compelling reason for its continued processing.
• Right to Restrict Processing: Request that we limit how we use your data in certain circumstances.
• Right to Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@uklpa.co.uk. We will respond within one month as required by law.

Information Commissioner's Office

Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

Telephone: 0303 123 1113

Website: ico.org.uk

UKLPA.co.uk

Email: info@uklpa.co.uk

Freephone: 0800 494 7174