Privacy Notice
How Legacy Lock collects, uses and protects your personal data.
Who we are
Legacy Lock is a trading name of Legal Advocacy Services Ltd, registered in England & Wales (Company No. 14501419). We are the data controller for personal data collected through this site.
How data is used
We use personal data to:
- respond to enquiries submitted through our Contact form;
- manage the waiting list and send launch and early-access updates where you have consented;
- operate, secure and improve the Legacy Lock service;
- comply with our legal and regulatory obligations.
Lawful bases
We rely on the following lawful bases under UK GDPR: consent (for waiting-list marketing emails — you may withdraw consent and unsubscribe at any time), legitimate interests (for responding to enquiries and securing the service), and legal obligation (where we are required to retain or disclose information by law).
Your rights
You have the right to access, rectify, erase, restrict, port and object to processing of your personal data, and to lodge a complaint with the Information Commissioner's Office.
Special-category data
Some things you may choose to place in your vault (for example health information, religious or funeral wishes, or family details) are special-category data. You upload these voluntarily, and we process them on the basis of your explicit consent. You may remove them at any time.
Your region
Legacy Lock is intended for use in the UK, Europe, the USA, Canada and beyond, and your rights depend on where you live:
- UK: UK GDPR and the Data Protection Act 2018, with complaints to the Information Commissioner's Office.
- Europe (EEA): EU GDPR, including the right to complain to your national supervisory authority. Where required, we will appoint an EU representative and put appropriate safeguards in place for transfers outside the EEA.
- USA: state privacy laws such as the California CCPA/CPRA and equivalents in Virginia, Colorado and other states, including rights to know, delete, correct and opt out of the sale or sharing of personal information. We do not sell personal information.
- Canada: PIPEDA, including access and correction rights and complaints to the Office of the Privacy Commissioner.
Before launch we will complete a Data Protection Impact Assessment, and our Apple Privacy Nutrition Label and Google Play Data Safety disclosures will accurately describe the data the apps collect.
Retention
We retain personal data only for as long as necessary for the purposes set out above, in line with our Data Retention Policy.