Privacy policy
Last updated 3 November 2026
Making a will or a lasting power of attorney means telling us about yourself, your family and what you own. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have over it. We've tried to keep it plain; if anything isn't clear, ask us.
1. Who we are
Larktree Ltd ("Larktree", "we", "us") is the controller of the personal information described here. We're a company registered in England and Wales (number [COMPANY NUMBER]), with our registered office at [REGISTERED ADDRESS], and we're registered with the Information Commissioner's Office (ICO) under number [ICO REGISTRATION NUMBER].
For anything about your personal information, email [PRIVACY EMAIL], write to us at [POSTAL ADDRESS], or call 0800 123 4567.
2. What we collect
We only ask for what the service you're using needs. Depending on what you do with us, that can include:
- Contact and account details: your name, email address, phone number and postal address, your password (stored only as a one-way hash, never readable by us) and your sign-in history.
- Details for your will: your full name, any other names, date of birth, address and relationship status; the people in your life (partner, children, stepchildren and others) with their relationship to you, dates of birth and whether they depend on you; your executors' and guardians' contact details; what you own, in broad bands (we never ask for account, sort code or policy numbers); the gifts you want to leave and to whom, including charities; your funeral wishes, pets and digital assets.
- Details for your lasting powers of attorney: your details as the donor, and the names, dates of birth, addresses and email addresses of your attorneys, replacements, certificate provider and the people to tell; your choices about how decisions are made; your preferences and instructions; and how you'll pay the registration fee, including whether you're applying for a reduced fee.
- Answers to our short questions before you start (for example, whether you live in England or Wales, or own a business), which decide whether our online service suits you.
- Your profile: details you've told us once, such as your name, date of birth, address and phone number, kept so we don't ask you again.
- Requests for a call: your name, phone number, email, what it's about and when suits you.
- Legacy: the letters, photos, voice recordings and documents you add to your Legacy page, the names and email addresses of the people you share them with, and when they should receive them.
- Payments: what you bought and when. Card details are taken by Stripe, our payment provider; we never see or store your full card number.
- Messages: emails and texts we send you, and messages between you and our specialists about your documents.
- Technical information: the IP address and browser details of signed-in sessions, which we use to keep accounts secure and to limit misuse. We don't use analytics or advertising trackers (see our cookie policy).
Sensitive information
Some of what you tell us can reveal sensitive ("special category") information, for example health details in an LPA's preferences or instructions, religious beliefs in funeral wishes, or that you receive benefits when you apply for a reduced LPA fee. We only use it to prepare your documents, and we ask for your explicit consent when you choose to give it. You can leave it out, though it may mean we can't include that wish in your document.
Information about other people
Your will, LPAs and Legacy page name other people, such as your family, executors, attorneys and the people you share with. Please only give us their details if you're entitled to and it's needed, and let them know you've done so (your attorneys and certificate provider will see their details on the forms they sign). We use their information only to prepare your documents and, where the service needs it, to contact them: for example, inviting your partner to make a mirror will, or sending a Legacy item to someone you chose.
If someone has named you in their will, LPA or Legacy page and you'd like to know what we hold about you, contact us. We may not be able to share the document itself, as it belongs to the person who made it.
3. Why we use it, and our lawful basis
Data protection law says we need a lawful basis for each use of your information. Ours are:
| What we do | Our lawful basis |
|---|---|
| Prepare your will, mirror wills, LPAs or Legacy page, store your signed will, and provide the service you've chosen | Contract: we need it to do what you've asked us to |
| Use sensitive information you give us in your documents | Your explicit consent, which you can withdraw (we then remove it from documents not yet finalised) |
| Take payment, renew subscriptions you've chosen, send receipts and keep financial records | Contract, and legal obligation (tax and accounting records) |
| Send service messages: sign-in and reset links, a link back to a saved draft, updates on your documents, renewal reminders | Contract, and our legitimate interest in keeping you informed about a service you've started |
| Call you back when you ask us to, and have a specialist review your documents if your package includes it | Contract, or steps you've asked us to take before entering one |
| Send news and offers by email, and reminders to finish a will you've started | Your consent, or for customers our legitimate interest in telling you about similar services (you can opt out at any time) |
| Release Legacy items after your death, once we've confirmed it | Contract: it's what you've asked us to do |
| Keep accounts secure, prevent fraud and misuse, limit repeated attempts, and record which staff opened your case | Our legitimate interest in protecting you, our customers and our service |
| Understand, in broad bands, the kinds of estates our customers have (for example whether they own a home or have young children) so we can offer relevant services | Our legitimate interest in running and improving our business |
| Deal with complaints and legal claims, and answer lawful requests from regulators or the police | Legal obligation, and our legitimate interest in defending ourselves |
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. Our short questions may suggest that a specialist would be better placed to help (for example, if you have assets abroad); a person then calls you, and you can always ask to speak to someone.
4. Marketing, and saying no
When you give us your email address, you can tick the box to say you don't want news and offers from us. If you don't, we may email you about our services, and remind you to finish a will you've started. We only text you marketing if you've turned that on in your account.
Every marketing email has an unsubscribe link that works in one click, and you can change your choices at any time from your account or the preferences page linked in our emails. You can turn texts off in your account settings. Saying no to marketing doesn't stop messages you need about a service you've used, such as a renewal reminder.
We never sell your information or share it with others for their own marketing.
6. Information sent outside the UK
We keep your will, LPA and Legacy content in London. Some of our providers (listed above) process information in the USA or elsewhere. When they do, we make sure it is protected to UK standards: through the UK-US data bridge for certified companies, the UK's adequacy regulations, or the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses. Contact us for a copy of the safeguards that apply.
7. How we protect it
- The contents of your will, LPAs, profile, messages and Legacy page are encrypted in our database with AES-256, on top of the encryption our providers apply, and Legacy files are encrypted before they're stored.
- Passwords are stored only as one-way hashes. Our staff sign in with a second step (an authenticator app or passkey) and can only see what their role needs.
- Every time a member of staff opens your case, it's recorded.
- Our website only works over a secure connection, and our records of what happens to your case never contain your personal details.
No system is perfectly secure. If something goes wrong that puts your information at risk, we'll tell you and the ICO when the law requires it.
8. How long we keep it
We keep information only as long as we need it:
| Information | How long |
|---|---|
| A draft started without an account, never paid for | Deleted automatically 90 days after it was last changed |
| Your account, and wills and LPAs you've paid for | For as long as you have an account and the documents may be needed (a will can be needed decades later), and at least 6 years after we learn of your death or close your account, in case of questions or claims about the estate |
| Signed wills we store | While your storage continues; when it ends, we post the original back to you |
| Legacy pages | While your plan continues. If it lapses we keep the page for a year, warning you at least 30 days before we delete it. After your death, a released page stays up for 5 years |
| Payment and tax records | 6 years after the end of the financial year they relate to |
| Requests for a call | 2 years after we've finished with the request |
| Your marketing choices | For as long as we might contact you, so we respect them |
| Records of staff access and security logs | 6 years |
You can ask us to delete your information sooner (see your rights below). We may need to keep some of it, for example payment records the law requires, or a will you might still need.
9. Your rights
You have the right to:
- see the information we hold about you, and get a copy;
- correct it if it's wrong (you can change most of it yourself in your account);
- delete it, where we no longer need it or you withdraw consent;
- restrict how we use it while a concern is looked into;
- object to us using it for our legitimate interests, and always to direct marketing;
- move information you gave us to another provider, in a common electronic format;
- withdraw consent at any time, where we rely on it (this doesn't affect what we did before).
To use any of these rights, email [PRIVACY EMAIL] or call us. We'll answer within one month, and it's free. We may need to check it's you first: we won't give anyone access to a will or LPA unless we're sure they're entitled to it.
10. Children
Our services are for adults: you must be 18 or over to make a will or LPA with us. We hold information about children only when an adult names them in a document, for example as a beneficiary or with a guardian.
11. Questions and complaints
If you're unhappy with how we've used your information, please tell us first at [PRIVACY EMAIL], and we'll try to put it right. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
For complaints about anything else, see making a complaint.
12. Changes to this policy
We'll update this policy when the way we use information changes, and show the date at the top. If a change matters to you, we'll tell you by email before it takes effect.