We use a number of third party service providers to help us provide our services. In order to do this, we may have to provide some of your information to them and we will only ever do this to the extent necessary to provide services to you and only when we have contractual provisions in place to ensure your information is securely held and not used for any other purpose.

Where you ask us to provide personal finance technology and open-banking  services we will share your personal data with Moneyhub Financial Technology Limited who will act as an independent data controller. For more information how they will use your information, please see https://www.moneyhub.com/privacy-policy-and-cookies

Where you ask us to provide will/document storage services we will share your personal data with Cleardata UK Ltd who will act as an independent data controller. For more information how they will use your information, please see https://www.cleardatagroup.co.uk/cookie-policy/

Where you ask us to provide will drafting/compiling services we will share your personal data with LegalWills.co.uk (owned by PartingWishes Inc) who will act as an independent data controller. For more information how they will use your information, please see https://www.legalwills.co.uk/Privacy

Where you ask us to provide electronic data storage services we will share your personal data with Legado Technologies Limited who will act as an independent data controller. For more information how they will use your information, please see https://www.joinlegado.com/policies/privacy-policy/

Where you ask us to provide funeral or cremation services we will share your personal data with Dignity plc who will act as an independent data controller. For more information how they will use your information, please see Dignity’s privacy policy.

Where you ask us to provide insurance quotation services we will share your personal data with Moneysupermarket.com Limited who will act as an independent data controller. For more information how they will use your information, please see https://www.moneysupermarket.com/legal/privacy-policy/

We analyse personal data to identify areas so that we can improve our services and we sometimes engage third parties to assist us with this analysis.

Some examples are:

• Recording calls to analyse and improve how we provide our services over the phone.
• Analysing feedback you provide on external review platforms, on our website chat function or in emails and the way you interact with our services.

We will also process your personal data in order to provide you with a more tailored experience when you visit our website. For example, we may use your personal data to tailor our website, make sure it is displayed in the most effective way for the device you are using. We also use various third party cookies to help us improve our website (more details are set out in the sections below) but we will not share your personal data with the third party analytics and search engine providers that assist us in the improvement and optimisation of our website.

We will also process your personal data for the purposes of making our website more secure, and to administer our website and for internal operations, including troubleshooting, data analysis, testing, research and statistical and survey purposes.

The legal basis on which we process your personal data in these circumstances is our legitimate interest to optimise website visitor engagement, inform future content and to ensure that our website is kept secure.

We have a legitimate interest to contact you in relation to your experience of using our products and services. We will use any feedback provided to tailor and improve our services. We may also conduct research to develop new products and services where input from users’ experience would inform our approach.

We may contact you if your past or recent activity suggests you might want to hear from us (for example, you completed one of our reviews or questionnaires or entered one of our promotions, you have used our services or you have an annual subscription with us), unless you have already indicated that you do not wish to receive marketing communications from us.

We process your personal data to form a view on what services, offers or promotions we think you may be interested in.

Our communications always include a link so you can unsubscribe. You can also let us know you would prefer not to be contacted by emailing contact@1legacy.co.uk and clearly stating that you wish to be removed from our marketing list.

We sometimes ask you if you are happy to receive marketing communications from the charities we work with (for example, they have referred you to our services or you have left the charity a gift in your will). If you agree and provide your consent, we send the charity your personal data so they can contact you directly. Where you change your mind and decide you would prefer not to be contacted by the charity, you should let them know (their communication should also contain an unsubscribe link).

Where you do not receive a prompt to ask you for your consent to share your personal data with the charity for their marketing communications, this means that 1Legacy Limited have an agreement with the charity whereby we provide your personal data to them so they can contact you directly (unless you have indicated to us you do not want us to share your personal data for this reason).

We will share some basic information relating to you (name, address, email address, date of birth, phone number), gift type and gift amount bracket (if any), to allow our charity partners to assess and improve their legacy campaigns and update their supporter databases.

Where you have been referred by one of our commercial partners (and/or our Third Party Service Providers) we will share some basic information relating to you (name, address, email address, date of birth, phone number) to allow our commercial partners to attribute referrals. This will be in addition to your communication preferences and this information will not be used for marketing purposes if you have not given consent for that purpose.

Anonymised data is information which cannot be used to identify a living person. It is useful for statistical analysis and identifying general trends. We will convert your personal data into an anonymised format so it can be used for press publication (for instance to show the age range of our customers, or geographical areas where we provide a high volume of service) and to help charity partners raise money through gifts in wills by helping them to evaluate the efficacy of their marketing campaigns. Anonymised data is not personal data.

We may use your personal information to generate aggregated, anonymised data for the purposes of internal reporting, customised marketing content, insight and analysis. This will enable us to improve and personalise our Site, the products we offer and search results for our Site. As part of this we use Google Analytics. For further information, see Google’s Privacy and Terms.

In the event that we buy or sell any business or assets, in which case we will disclose your personal data to the prospective seller or buyer of such business or assets (at all times in accordance with all applicable data protection laws); or if 1Legacy Limited or substantially all of its assets are acquired by a third party, in which case personal data held by 1Legacy Limited about its customers will be one of the assets transferred to the purchaser.

In each case, the legal basis on which we process your personal data in these circumstances is our legitimate interest to ensure our business can be continued by a purchaser. If you object to our use of your personal data in this way, the relevant seller or buyer of our business may not be able to provide services to you.

Where we hold your personal data and are responsible for it, it will be stored for the life of your contract with us and/or our Third Party Service Providers (stored for the life of your contract plus 5 days – as per the Moneyhub data retention policy). Your contract with us would typically expire when you delete your account with us or ask us to delete your account for you. Our databases are backed up but such back-ups are never held for more than 90 days at a time. It is crucial that we hold your personal data in this way because without it, we would not be able to fulfil our contract with you and show you copies of your account information or payment transaction information, when you request/select to see these

Once we (and/or our Third Party Service Providers) have received your information, we (and/or our Third Party Service Providers) will use procedures and security features to try to prevent unauthorised and unlawful access and processing, as well as accidental loss, destruction or damage. We (and/or our Third Party Service Providers) use encryption technology to protect personal data that you submit to us (and/or our Third Party Service Providers) online in order to reduce the risk of your data being intercepted by unauthorised persons during transmission.

We (and/or our Third Party Service Providers) deploy a range of “technical and organisational” measures including physical, electronic, and procedural safeguards to protect information we (and/or our Third Party Service Providers) process and maintain. 

Please be aware that the transmission of information via the internet or mobile networks is not completely secure; we (and/or our Third Party Service Providers) cannot guarantee the security of your data transmitted to or from us and any transmission is at your own risk. 1Legacy (and/or our Third Party Service Providers) may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. It will be clear to you when you click on a link that will take you to a Third Party Member we strongly encourage you to read their privacy policies in detail. We do not control these third-party websites and are not responsible for their content or their privacy statements. 

In the event there is an occasion in future where there is an unauthorised use or breach with respect to personal data, 1Legacy (and/or our Third Party Service Providers) shall comply with GDPR expectations and timelines (including a 72 hour investigation and reporting window) in order to mitigate the risk to any individuals affected.