Privacy Notice

Last Updated: 12 June 2026

1. Who We Are

Elephant Legal provides will-writing, estate-planning, and related legal support services within England and Wales.

For the purposes of UK data protection law, Elephant Legal acts as the Data Controller, meaning we decide how and why personal information is processed.

If you have any questions about this Privacy Notice or how your information is handled, please contact:

Richard Burt
Data Protection Lead

Email: admin@elephantlegalservices.co.uk

ICO Registration Number: ZC047142

2. What Information We Collect

The information we collect depends on how you interact with us.

Clients and Prospective Clients

This may include:

  • Name and contact details

  • Date of birth

  • Family and relationship information

  • Information relating to assets and liabilities

  • Instructions relating to wills, estate planning, and associated services

  • Identity verification documents where required

Website Visitors

We may collect limited technical information necessary for the operation, security, and functionality of our website, including IP addresses and essential cookie information.

We do not use cookies for advertising, behavioural tracking, or marketing purposes.

Further information can be found in our Cookies Policy.

General Enquiries

Where you contact us, we may collect:

  • Name

  • Email address

  • Telephone number

  • Any information you choose to provide

We only collect information that is relevant and necessary for the provision of our services or to respond to your enquiry.

3. Why We Use Your Information

We use personal information for the following purposes:

PurposeLegal BasisPreparing wills and estate-planning documentsContractProviding requested servicesContractManaging client relationships and communicationsContractMaintaining business and client recordsLegal Obligation / Legitimate InterestResponding to enquiriesLegitimate InterestMeeting legal and regulatory obligationsLegal ObligationService updates and administrative communicationsLegitimate InterestMarketing communications (where applicable)Consent

We do not sell, rent, trade, or otherwise share personal information for marketing purposes.

4. Who We Share Information With

We only share personal information where necessary for the provision of our services, compliance with legal obligations, or the operation of our business.

Examples may include:

  • Secure IT and cloud-storage providers

  • Accountants and professional advisers

  • Professional indemnity insurers

  • Regulatory or governmental bodies where legally required

  • Service providers supporting the operation of our business

All third parties are expected to maintain appropriate confidentiality and data-protection standards.

5. International Transfers

We aim to keep personal information within the United Kingdom or European Economic Area (EEA) wherever possible.

Where a service provider processes information outside these locations, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other recognised transfer mechanisms permitted under UK data-protection law.

6. How Long We Keep Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to meet legal obligations, or to protect legitimate business interests.

Typical retention periods include:

Record TypeTypical Retention PeriodClient filesSix years after completion of workFinancial recordsAt least six yearsEnquiry records (non-clients)Up to twelve monthsIdentity verification recordsIn accordance with legal and business requirements

Some records may be retained for longer where required by law, regulatory guidance, insurers, or the nature of the service provided.

When information is no longer required, it is securely deleted, destroyed, or anonymised.

7. How We Keep Information Secure

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

  • Secure cloud storage

  • Access controls

  • Password protection

  • Multi-factor authentication

  • Encryption where appropriate

  • Secure disposal procedures

Security arrangements are reviewed periodically to ensure they remain appropriate to the risks involved.

8. Your Rights

Under data-protection law, you have the right to:

  • Request access to your personal information

  • Request correction of inaccurate information

  • Request deletion of information in certain circumstances

  • Restrict processing in certain circumstances

  • Object to certain processing activities

  • Withdraw consent where processing is based on consent

  • Request transfer of your information where applicable

To exercise any of these rights, please contact:

admin@elephantlegalservices.co.uk

We will respond in accordance with applicable data-protection law and normally within one calendar month.

9. Concerns or Complaints

If you have concerns about how your information has been handled, please contact us first so that we can try to resolve the matter.

Email: admin@elephantlegalservices.co.uk

You may also wish to review our Complaints Policy.

If you remain dissatisfied, you have the right to complain to the Information Commissioner's Office (ICO).

Website: www.ico.org.uk
Telephone: 0303 123 1113
ICO Registration Number: ZC047142

10. Related Documents

This Privacy Notice should be read alongside the following documents where relevant:

  • Cookies Policy

  • Complaints Policy

  • Client Care Terms

  • Data Protection Policy & Procedure (available on request)

Contact Us

If you have any questions regarding this Privacy Notice or how Elephant Legal handles personal information, please contact:

Email: admin@elephantlegalservices.co.uk

Thank you for trusting Elephant Legal with your information.