Privacy Policy

1. Who we are

willsandlpas.com is operated by Westminster Law Guildford Ltd, trading as "Westminster Law" and "Wills & LPAs", a company registered in England & Wales, company number 13728528, registered office Flat 6, 2 Courts Hill Road, Haslemere, Surrey GU27 2EG ("we", "us", "our").

We are the controller of your personal data and are registered with the Information Commissioner's Office (ICO) under number ZB535049.

This policy tells you how we look after your personal data when you visit this Website, submit an enquiry, book a consultation, or become a client for our Will, Lasting Power of Attorney (LPA) and estate planning services. It also explains your rights and how to contact us.

We may update this policy from time to time; please check back periodically.

2. Contact details

• Email: [email protected]

• Post: Flat 6, 2 Courts Hill Road, Haslemere, Surrey GU27 2EG

• Phone: 01483 256625

3. Information we collect

Category	Examples
Identity data	Title, first and last name
Contact data	Email address, phone number, home address
Enquiry / booking data	Preferred meeting type and location, appointment details, information about your family and estate given during a Will/LPA consultation
Technical data	IP address, browser type, device and operating system, generic location
Usage data	How you use our Website and booking system
Meeting recordings and notes	Recordings and notes taken during consultations (see section 5)
Verification data	Identity documents provided for anti-money-laundering and fraud-prevention checks
Marketing preferences	Whether you've opted in or out of receiving updates from us

4. How we use your information and our lawful basis

We use your data to…	Lawful basis
Respond to your enquiry and arrange a consultation	Contract / steps prior to a contract
Provide Will, LPA, probate and estate planning services and produce your documents	Contract
Verify your identity under anti-money-laundering and fraud-prevention rules	Legal obligation
Keep accounting and administrative records	Legal obligation
Improve and secure our Website, and prevent fraud	Legitimate interests
Review and prepare your instructions accurately, including via meeting recordings or transcription tools	Legitimate interests / contract
Send you legal or legislative updates relevant to your existing Will or LPA	Legitimate interests (you can opt out at any time)
Send you marketing about our services	Consent

We will not use your data for a new purpose not listed here without updating this policy and, where required, asking for your consent.

5. Meetings, recordings and technology

Consultations — including those held over Zoom — may be recorded to ensure your instructions are captured accurately, and for training, quality and compliance purposes. Recordings and notes may be processed using secure technology, including transcription or analysis tools, to help us prepare your documents. These tools support our advisers; they do not replace professional judgement. Recordings are stored securely and accessed only by authorised personnel.

6. Who we share your information with

• Our staff and advisers, bound by confidentiality and data protection obligations.

• Service providers who support our business (e.g. document storage, IT, transcription tools), under contracts requiring them to protect your data and use it only as we instruct.

• Regulatory bodies, such as HM Revenue & Customs, and the Society of Will Writers and Estate Planning Practitioners, where required.

• Professional advisers, such as our accountants or legal advisers.

We will not sell your data or pass it to third parties for their own marketing. If we're required to disclose data in response to a court order or legal request, we take legal advice first and consider your rights before responding.

7. Where your data is held

We store personal data on servers in the UK. We only transfer data outside the UK where an approved legal safeguard is in place.

8. How long we keep your information

• Enquiry and booking data from people who don't go on to instruct us is kept only as long as needed to respond to the enquiry, then deleted.

• Client identity, contact and file data is normally kept for 7 years after our relationship ends, in line with our professional indemnity and regulatory obligations.

• Executed Wills, LPAs and related documents we hold in storage are kept for as long as we provide that storage service, or until you ask us to transfer or destroy them.

• If you've asked to hear from us or subscribed to updates, we keep your details until you ask us to stop.

9. Keeping your information safe

We use access controls, authentication, staff training and regular review of our security measures to protect your data against loss, misuse or unauthorised access. If a data breach affects you, we will notify you and the ICO where the law requires it.

10. Your rights

Under UK GDPR, you have the right to:

• Access a copy of your personal data

• Correct inaccurate or incomplete data

• Erase your data, where there's no good reason for us to keep it

• Restrict how we use it

• Object to certain processing

• Port your data to another organisation

To exercise any of these rights, contact us using the details in section 2. We aim to respond within one month. We may ask you to verify your identity first, and may extend the response time for complex requests.

If you're unhappy with how we've handled your data, you can complain to us directly, or to the ICO at ico.org.uk.

11. Marketing

We'll only send you marketing about our services if you've opted in. You can opt out at any time by emailing [email protected] — this won't affect our ability to provide services you've already instructed us for.