We share only what is reasonably necessary and require suitable confidentiality and data protection arrangements where the recipient processes information for us. Recipients may include:

Some technology providers may process information outside the United Kingdom. Where restricted transfers occur, we use a lawful transfer mechanism, such as UK adequacy regulations, the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses, together with supplementary safeguards where appropriate. You may contact us for more information about the safeguards relevant to your information.

We retain information only for as long as reasonably necessary for the purpose collected, legal and tax duties, professional standards, insurance requirements, and the establishment or defence of claims. Our working retention framework is:

These are general periods, not promises that every record will be kept for exactly that time. We may retain less information or keep a restricted record for longer where justified.

We use proportionate organisational and technical measures designed to protect information from accidental loss, misuse, unauthorised access, alteration or disclosure. Measures include access controls, secure storage, appropriate authentication, confidentiality duties, provider due diligence, backups and incident procedures. No internet or storage system can be guaranteed completely secure.

Depending on the circumstances, you may have the right to be informed; request access; correct inaccurate information; request erasure; restrict or object to processing; receive certain information in a portable format; withdraw consent; and ask for human review of a solely automated decision with legal or similarly significant effects. These rights can be limited by law, legal privilege, third-party rights or overriding lawful grounds.

We do not expect to make solely automated decisions that produce legal or similarly significant effects about clients. To exercise a right, email Deborah@ecargwillsandtrusts.co.uk. We may need to verify your identity and will normally respond within one month, subject to lawful extensions.

We send electronic marketing only where permitted by privacy and electronic communications law. You can unsubscribe using the link in an email or by contacting us. Service messages about an active matter are not marketing and may still be sent where necessary.

Please contact us first at Deborah@ecargwillsandtrusts.co.uk, telephone 07366 123751, or by post to our registered office. We will investigate privacy concerns fairly. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern before you contact the ICO.

We may update this policy to reflect changes in law, guidance, services or technology. The current version and effective date will be published on our website. Material changes will be highlighted where appropriate.