Privacy Policy

About This Privacy Policy

Last Updated: 31/10/2025

Our Privacy Policy sets out how we will use and share the information that you give us. The General Data Protection Regulation (GDPR) describes how organisations must collect, handle, process and store personal information. These rules apply regardless of whether data is stored electronically, on paper or on other materials. To comply with the law, personal information must be collected and used fairly, stored safely and not disclosed unlawfully.

We take your privacy seriously and will only use your personal information in accordance with the law. We will never sell, share or use your personal information other than as described here and/or as explained when we collect your data.

Who We Are And How To Contact Us

One Life Funerals Limited trading as Secure Legacy and Localwillwriter.uk is a Will Writing and Estate Planning company offering services to customers in England and Wales. You can contact us in any of the following ways:

Email: [email protected]
Phone: 0330 822 8449
Website: https://localwillwriter.uk

One Life Funerals Limited is the Data Controller, we are legally responsible for how your information is stored and processed. In some situations, we are Joint Data Controller with our partner. We will ensure that we have appropriate Data Sharing Agreements in place to clearly define roles and responsibilities when processing your data.

Frequently Asked Questions

How will my data be used?

We use your data to contact you about your enquiry, book appointments with a Will Writer, capture the details needed to draft your Will, improve our services, and—if you consent—share your details with trusted marketing partners.

What data will be stored?

We typically store your contact details, service and appointment information, payment details, ID and verification documents, executor/beneficiary details, children’s details (if relevant), call recordings, and technical data such as IP addresses and cookies. We only keep the minimum necessary information, and information about other people (executors, trustees, beneficiaries) is only used for will drafting and estate planning purposes, never marketing.

What data will be shared?

We may share your information with trusted partners to deliver will writing, estate planning, probate, and storage services, as well as with specialist providers like payment processors and IT support. If you opt in, we may share with marketing partners. We may also share data where required by law. All third parties are bound by GDPR-compliant agreements.

How long will you keep my data?

Marketing data is usually kept up to 24 months. Wills and estate planning documents are kept indefinitely or until no longer required. Legal and compliance records are kept as long as necessary. Once expired, data is securely deleted or anonymised.

Who can access my data?

Access is restricted to trained staff, approved service partners, and specialist third-party providers. Access is role-based (only the minimum data necessary is available for each role) and all activity is logged and monitored.

How is my data kept secure?

Your data is stored on secure UK/EU servers with encryption, role-based access controls, monitoring, and regular reviews. Third-party providers must meet the same GDPR security standards. While no system is 100% secure, we continually update and improve our safeguards.

Do you use automated systems?

We may use automated tools and AI voice agents to confirm your details, book appointments, and provide initial information. Profiling may be used to show you relevant services or adverts (if you have consented). We do not use automated systems to make legally or financially significant decisions about you without human involvement.

What rights do I have?

You have the right to access, correct, or delete your data; restrict or object to processing; request data portability; withdraw consent at any time; and request human review of automated decisions. You can also complain to the ICO if you are unhappy with how we handle your data.

What data do we collect?

When you use our website or services, One Life Funerals Limited may collect the following types of information:

Personal information you provide – such as your full name, address, phone number, email, and details about the services you are interested in.
Service-related information – details discussed during your consultation, instructions for drafting your Will, and any related estate planning information.
Payment details – information needed to process payments (we do not store full card or bank details; these are handled securely by our payment provider).
Identification documents – copies of ID and proof of address where required by law or regulation.
Third-party information – details about executors, trustees, beneficiaries, or children that you provide for inclusion in your Will (used only for estate planning purposes, never for marketing).
Communications – call recordings, emails, SMS, chats, and notes from conversations to ensure accuracy and for training/quality monitoring.
Technical information – IP address, browser type, device identifiers, cookies, and website usage data.
Information from third parties – where you’ve expressed interest in our services through partners, advertising platforms, or comparison websites who pass your details to us securely.
Special category data (sensitive information) – on rare occasions, we may collect information about your health, financial circumstances, or family situation where it is directly relevant to preparing your Will or estate plan. This information will only be collected with your explicit consent and handled with additional safeguards.
We will never use sensitive data for marketing or unrelated purposes.

We only collect the minimum information necessary to provide our services and comply with our legal obligations.

Lawful basis: We collect and process this data on the grounds of consent (when you provide your details and agree to be contacted), contract (to prepare and deliver your Will or related services), legal obligation (to meet regulatory or compliance requirements), and legitimate interests (to improve our services and ensure security).

How do we collect your data?

We collect personal information in the following ways:

Directly from you

When you complete a form on our website to request a Will, estate planning, or related service.
When you speak with us by phone, SMS, email, chat, or AI voice agent.
During your consultation with a Will Writer, when you provide information needed to prepare your Will.
When you respond to surveys, feedback requests, or marketing opt-ins.
When we record calls or communications for accuracy, training, and quality monitoring (you will always be informed when a call is being recorded).

When you provide details about third parties (such as executors, trustees, beneficiaries, or children) for inclusion in your Will. You are responsible for ensuring you are entitled to share this information with us. These details are used only for legal and estate planning purposes and will never be used for marketing.

Automatically

Through cookies, pixels, and similar technologies that record your interactions with our website.
Using analytics tools (such as Google Analytics or Facebook Pixel) to measure site performance and advertising effectiveness.

From third parties

From advertising platforms such as Google, Facebook, Taboola, Outbrain, or comparison websites that direct you to our services.
From trusted affiliate and marketing partners who securely pass us your details where you have expressed an interest in Will writing or estate planning services.

We always ensure that any third party providing us with your information has a lawful basis to do so and that your details are passed securely.

Lawful basis: Consent (when you submit your details, provide third-party information, or agree to call recording), contract (to take steps before preparing your Will), legal obligation (where verification or ID checks are required), and legitimate interests (using cookies, analytics, and call recordings to improve our services and ensure accuracy).

What is the purpose of processing the data?

We use the personal data we collect for the following purposes:

To provide our services – to process your enquiry, book your appointment, draft your Will, and deliver related estate planning services.
To communicate with you – to confirm details, provide updates, answer your questions, and keep records of conversations.
To process payments – to take secure payment for services and maintain financial records.
To provide additional services – where requested, to arrange secure document storage, executor or probate support, or related estate planning products.
To improve our services – to review customer feedback, monitor advertising performance, and enhance the functionality of our website.
For training and quality monitoring – to record calls and communications to ensure accuracy, maintain service standards, and support staff training.
To personalise your experience – to ensure communications and services are relevant to your needs.
To carry out marketing (with your consent) – to send you relevant offers from us or our trusted partners if you have opted in.
To comply with legal and regulatory requirements – including verifying your identity, preventing fraud, and fulfilling our professional obligations.
To process executor, trustee, and beneficiary details – solely for inclusion in your Will or estate planning documents. This information is used only for legal purposes and is never used for marketing.

Lawful basis: Contract (to provide our services and prepare your Will), consent (for marketing, sharing details with partners, and call recordings where required), legal obligation (compliance, fraud prevention, tax and regulatory duties), and legitimate interests (service improvements, training, secure communications, and accurate record-keeping).

What is our lawful basis for processing your data?

Under UK GDPR, we must have a valid legal reason to process your personal data. Depending on the purpose, we rely on one or more of the following lawful bases:

Consent – where you have given clear consent (for example, to receive marketing or to share your details with trusted partners).
Contract – where processing is necessary to prepare your Will, deliver estate planning services, or take steps at your request before entering into a contract.
Legal obligation – where we are required to process or share your data to comply with legal, regulatory, tax, or professional obligations.
Legitimate interests – where processing is necessary for our legitimate business interests (such as improving services, ensuring secure communications, training and quality monitoring), provided your rights and freedoms are not overridden.

For transparency, we have also included a note on the relevant lawful basis at the end of each section in this policy.

How do we use your data?

We use the personal information we collect to:

Lead generation and sales – to connect you with our Will Writers and estate planning team, and to arrange your appointment.
Customer communications – to contact you by phone, SMS, email, chat, or AI voice agents to confirm details, answer queries, provide updates, and keep accurate records of conversations.
Service delivery – to capture the necessary details and draft your Will, and to provide additional services such as probate, executor support, and secure document storage.
Executor, trustee, and beneficiary details – to include their information within your Will or estate planning documents. This information is used solely for legal purposes and is never used for marketing.
Payment processing – to take secure payment for services and maintain financial accounts.
Marketing and retargeting – where you have given consent, to send you relevant offers or show you tailored adverts across platforms like Google or Facebook using cookies and tracking technologies.
Analytics and website improvement – to analyse performance, monitor advertising campaigns, and improve the functionality and user experience of our website.
Training and quality monitoring – to use call recordings and communications to ensure accuracy, improve service quality, and train staff effectively.

Lawful basis: Contract (to provide and deliver services), consent (for marketing, tracking, and some communications), legal obligation (for regulatory, tax, and fraud prevention purposes), and legitimate interests (to improve services, train staff, and maintain secure records).

Who do we share your data with?

We may share your personal data with trusted third parties, but only where necessary to provide our services or where you have given consent. This includes:

Will writing & estate planning partners – to deliver services such as drafting Wills, probate, executor support, and secure document storage.
Specialist service providers – for example, payment processors, IT support, CRM systems, cloud storage, and communication platforms.
Marketing partners (with your consent) – if you have opted in, we may share your details with carefully selected marketing partners who provide related products or services.
Regulators, legal bodies, and law enforcement – where we are legally required to share information, or to protect against fraud and misuse.
Executor, trustee, and beneficiary details provided by you are used only for inclusion in your Will or estate planning documents. These details are not shared for marketing purposes.

All third parties are bound by formal Data Sharing Agreements, which require them to process your data securely, in compliance with UK GDPR, and only for the specific purpose of providing their service. They are not permitted to use your data for their own independent purposes.

Lawful basis: Contract (sharing with service partners to deliver your Will or related services), consent (where you have opted into marketing), and legal obligation (when disclosure is required by law or regulation).

Automated Decision-Making & Profiling

As part of our services, some of your personal data may be processed using automated systems:

AI voice agents – we may use automated voice technology to confirm details, provide information about our services, or route your enquiry to the right team.
Automated profiling – we may use information such as your location, browsing behaviour, or the details you submit to:
Match you with the most suitable Will Writer or service partner.
Tailor marketing messages or adverts you see online (only if you have consented to marketing).

We do not:

Make decisions that have a legal or similarly significant effect on you solely through automated means.
Use profiling to assess your financial situation, health, creditworthiness, or eligibility for services.
All significant decisions about your Will, estate planning, or related services are always reviewed and confirmed by a qualified human advisor.

Your rights: You have the right to request human intervention, to express your point of view, and to contest any decisions made through automated processing. See the Your Rights section of this policy for more information.

Lawful basis: Consent (for marketing and profiling), contract (where automation helps us provide your requested service), and legitimate interests (using automation to improve efficiency and customer experience).

What is your Data Retention Period?

We only keep your personal data for as long as necessary to fulfil the purposes for which it was collected, including for legal, regulatory, tax, or reporting requirements.

Wills and estate planning documents – retained indefinitely, or until they are no longer required (for example, when you notify us that a Will has been revoked or replaced, or after your death and completion of any probate/executor services).
Executor, trustee, and beneficiary details – retained alongside the client’s Will or estate planning documents, solely for legal purposes and never for marketing.
Marketing and lead generation data – normally retained for up to 24 months, unless you withdraw consent earlier.
Payment and financial records – retained for up to 7 years, in line with accounting and tax requirements.

Call recordings and communications –

Most call recordings are retained for up to 24 months for accuracy, training, and quality monitoring.

Where a call relates to your Will, estate plan, executor or probate duties, or a legal dispute, we will retain the recording until those matters are resolved (for example, after probate), or for up to 7 years after death or last executor action, whichever is longer.

After this, recordings are securely deleted or anonymised.

Callers are always informed when a call is being recorded, and recordings may be shared with solicitors, executors, or other legal representatives where lawfully required.

Legal, compliance, and dispute records – retained for as long as necessary to comply with legal obligations, resolve disputes, or enforce agreements.

We review our retention periods annually to ensure personal data is not held longer than necessary. Once the relevant retention period has expired, your personal data will be securely deleted or anonymised so it can no longer be associated with you.

Lawful basis: Legal obligation (for accounting, tax, regulatory, probate, or evidentiary requirements)

Contract (to retain Wills and estate planning documents in order to provide services)

Consent (for marketing data and call recording where applicable)

Legitimate interests (to retain call recordings for training, service quality, and accuracy)

What are my rights under GDPR?

Under the UK General Data Protection Regulation (UK GDPR), you have important rights in relation to the personal data we hold about you:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to have any inaccurate or incomplete data corrected.
Right to erasure (“right to be forgotten”) – to ask us to delete your personal data where there is no lawful reason for us to continue holding it.
Right to restriction – to request that we limit the processing of your data in certain circumstances (e.g. while a complaint is being investigated).
Right to data portability – to receive your personal data in a structured, commonly used, machine-readable format, or to have it transferred to another service provider.
Right to object – to object to the processing of your data where we rely on legitimate interests, or to object to direct marketing (including profiling).
Right to withdraw consent – where we rely on your consent (for example, for marketing or profiling), you can withdraw this at any time.
Right to human review of automated decisions – if a decision has been made about you solely by automated means, you can request human intervention, express your views, and contest the decision.

How to exercise your rights:

You can exercise any of these rights by contacting us using the details in the Contact Us section of this policy. We will respond to valid requests within one month (or let you know if we need more time).

Security Measures

We take the security of your personal data seriously and use a combination of technical and organisational measures to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These include:

Secure servers in the UK/EU – all personal data is stored on secure servers located within the UK or European Economic Area.
Encryption – data transmitted through our website is protected using SSL (Secure Socket Layer) encryption, and sensitive data is encrypted at rest where appropriate.
Role-based access controls – access to your data is limited to authorised employees and partners who need it to perform their role.
Monitoring and auditing – all access to personal data is logged and monitored to detect and prevent unauthorised use.
Data minimisation – we only collect the information necessary for the purposes set out in this Privacy Policy.
Staff training – employees are regularly trained on data protection and confidentiality.
Third-party security – any service providers we use (such as IT, hosting, or payment processors) are contractually required to apply equivalent security standards.
Regular reviews – our systems and policies are reviewed and updated regularly to ensure ongoing compliance and protection.

While we make every effort to protect your personal data, no method of transmission or storage can be guaranteed 100% secure. We continually assess risks and update our safeguards to reduce them to the lowest possible level.

Lawful basis: Legal obligation (to keep personal data secure under UK GDPR), and legitimate interests (to maintain safe and reliable services).

Cookies & Tracking

Our website uses cookies and similar technologies to improve your experience, analyse performance, and deliver relevant advertising.

What are cookies?

Cookies are small text files placed on your device when you visit our website. They allow us to recognise your browser, store preferences, and understand how you use our site.

Types of cookies we use:

Essential cookies – required for the operation of our website (e.g. enabling form submissions and secure login).
Analytics cookies – help us understand how visitors use our site so we can improve functionality and performance (e.g. Google Analytics).
Advertising & tracking cookies – used to deliver relevant ads and measure their effectiveness, including through third-party platforms such as Google, Facebook, and affiliate networks. These may also be used for retargeting.
Preference cookies – remember your choices, such as language or region settings, to personalise your experience.

How we use tracking technologies

We may use pixels, tags, and scripts (for example, Facebook Pixel, Google Ads tags, or affiliate tracking) to:

Measure how our adverts perform.
Show you relevant offers or reminders online.
Improve our marketing campaigns and website usability.

Lawful basis: Consent (for non-essential cookies such as analytics and advertising) and legitimate interests (for essential website functions).

Source of Data (if not collected directly)

In most cases, we collect personal data directly from you. However, we may also receive information about you from trusted third parties where you have already expressed an interest in Will writing, estate planning, or related services. These sources may include:

Advertising platforms – such as Google, Facebook, Taboola, or Outbrain, where you have clicked on an advert and been directed to our website.
Comparison websites – where you have requested information about estate planning or funeral services and chosen to be referred to us.
Affiliate and marketing partners – who securely pass us your details when you have provided consent to be contacted.
Service partners – for example, companies offering probate, executor, or document storage services who refer you to us with your agreement.

All third-party partners are required to comply with applicable data protection laws and to only share your data with us where they have a lawful basis to do so.

We make every effort to ensure the information provided is accurate and that you are informed about who has passed us your details.

Lawful basis: Consent (where you have agreed to share your details with a partner), contract (if you have requested a service through an introducer), and legitimate interests (where information is shared securely for service fulfilment).

Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, legal requirements, or the services we provide.

When we make significant changes, we will:

Update the “last updated” date at the top of this page.
Where appropriate, notify you by email or by displaying a notice on our website.

We encourage you to review this Privacy Policy periodically to stay informed about how we collect, use, and protect your personal data.

Contacting us, exercising your information rights and Complaints

If you have any questions or comments about this Privacy Policy, wish to exercise your information rights in connection with the personal data you have shared with us or wish to complain, please contact us at One Life Funerals Limited.

Email: [email protected]
Phone: 0330 822 8449
Website: https://localwillwriter.uk

We fully comply with Data Protection legislation and will assist in any investigation or request made by the appropriate authorities.

If you remain dissatisfied then you have the right to apply directly to the Information Commissioner for a decision.

The Information Commissioner can be contacted at:

Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
www.ico.org.uk