Privacy notice

Last updated: October 2026 · DRAFT for review. Details in [brackets] are placeholders.

1. Who we are

Legatee Limited (company number [pending incorporation]) is the controller of the personal data described in this notice. Our registered office is [to be confirmed]. You can contact us at hello@legatee.co.uk or at [registered office].

Until the company is incorporated, the data controller is the individual or entity operating this website, and this notice will be updated with the final details.

2. What we collect

Enquiries you send through this website or by email: your name, email address, phone number (if you give it), and whatever you tell us about the estate or legal matter, including the firm of solicitors acting.
Correspondence between us, and between us and your solicitor, where you ask us to deal with them.
Information we need to assess a matter: documents about the estate or claim you or your solicitor provide, and public records such as Companies House filings.
Basic technical records from our hosting (Cloudflare): IP address, browser type and timestamps, kept for a short period for security.

We do not run credit checks and we do not obtain your credit file.

3. Why we use it, and our lawful basis

To answer your enquiry and tell you whether we can help: legitimate interests, or steps preparatory to entering a contract with you.
To assess and administer any funding we provide: the contract between us, and compliance with legal obligations.
To keep records of our dealings: legal obligations and our legitimate interests in defending claims.

4. Who we share it with

Service providers: our website host (Cloudflare) and email provider (Microsoft 365).
Your own solicitors or other advisers, where you ask us to deal with them.
Our professional advisers, such as solicitors and accountants, where needed.
Anyone we are required to inform by law.

We do not sell your data and we do not add you to marketing lists.

5. Where it is processed

Your data is mainly processed in the United Kingdom. Where a provider processes data outside the UK, we only permit it with appropriate safeguards, such as the UK Addendum to the standard contractual clauses or the UK IDTA.

6. How long we keep it

Enquiries that do not lead anywhere: up to 12 months, then deleted.
Matters we fund: for the life of the funding and afterwards for as long as we may need it for legal claims or regulatory obligations, typically six years.

7. Your rights

You can ask us for a copy of your data, ask us to correct or delete it, restrict or object to our use of it, or ask us to transfer it to someone else. We may need to confirm your identity first. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk.

To exercise any right, email hello@legatee.co.uk.

8. Cookies

This website does not use advertising or analytics cookies. See our cookie notice.

9. Changes

We will update this notice when our practices change and revise the date above.