Privacy Notice

1. Who We Are

Elephant Legal provides will-writing, estate-planning, and related legal support services within England and Wales.

For the purposes of UK data protection law, Elephant Legal acts as the Data Controller, meaning we decide how and why personal information is processed.

If you have any questions about this Privacy Notice or how your information is handled, please contact:

2. What Information We Collect

The information we collect depends on how you interact with us.

Clients and Prospective Clients

This may include:

• Name and contact details
• Date of birth
• Family and relationship information
• Information relating to assets and liabilities
• Instructions relating to wills, estate planning, and associated services
• Identity verification documents where required

Website Visitors

We may collect limited technical information necessary for the operation, security, and functionality of our website, including IP addresses and essential cookie information.

We do not use cookies for advertising, behavioural tracking, or marketing purposes.

Further information can be found in our Cookies Policy.

General Enquiries

Where you contact us, we may collect:

• Name
• Email address
• Telephone number
• Any information you choose to provide

We only collect information that is relevant and necessary for the provision of our services or to respond to your enquiry.

3. Why We Use Your Information

We use personal information for the following purposes:

We do not sell, rent, trade, or otherwise share personal information for marketing purposes.

4. Who We Share Information With

We only share personal information where necessary for the provision of our services, compliance with legal obligations, or the operation of our business.

Examples may include:

• Secure IT and cloud-storage providers
• Accountants and professional advisers
• Professional indemnity insurers
• Regulatory or governmental bodies where legally required
• Service providers supporting the operation of our business

All third parties are expected to maintain appropriate confidentiality and data-protection standards.

5. International Transfers

We aim to keep personal information within the United Kingdom or European Economic Area (EEA) wherever possible.

Where a service provider processes information outside these locations, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or other recognised transfer mechanisms permitted under UK data-protection law.

6. How Long We Keep Information

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, to meet legal obligations, or to protect legitimate business interests.

Typical retention periods include:

Some records may be retained for longer where required by law, regulatory guidance, insurers, or the nature of the service provided.

When information is no longer required, it is securely deleted, destroyed, or anonymised.

7. How We Keep Information Secure

We take appropriate technical and organisational measures to protect personal information from unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

• Secure cloud storage
• Access controls
• Password protection
• Multi-factor authentication
• Encryption where appropriate
• Secure disposal procedures

Security arrangements are reviewed periodically to ensure they remain appropriate to the risks involved.

8. Your Rights

Under data-protection law, you have the right to:

• Request access to your personal information
• Request correction of inaccurate information
• Request deletion of information in certain circumstances
• Restrict processing in certain circumstances
• Object to certain processing activities
• Withdraw consent where processing is based on consent
• Request transfer of your information where applicable

To exercise any of these rights, please contact:

admin@elephantlegalservices.co.uk

We will respond in accordance with applicable data-protection law and normally within one calendar month.

9. Concerns or Complaints

If you have concerns about how Elephant Legal has collected, used, stored or shared your personal information, please contact us.

You can raise a complaint even if you are not a client. Complaints can be made by email, telephone, post or another accessible method, including verbally.

We normally acknowledge complaints within two working days. Data-protection complaints will be acknowledged within the legally required period of 30 days.

We will investigate concerns fairly, keep you informed of progress and explain our findings and any action taken without undue delay. We normally aim to provide a response within 14 days, although some matters may take longer.

You can read our Complaints Policy for further information.

Website: https://ico.org.uk

Telephone: 0303 123 1113

Elephant Legal ICO registration: ZC047142

10. Related Documents

This Privacy Notice should be read alongside the following documents where relevant: