Last Updated: October 16, 2025

At Solutas Legacy Ltd (“we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, share, and safeguard your personal information when you engage with our trust and estate planning services, including Wills, Lasting Powers of Attorney (LPAs), Business Lasting Powers of Attorney (BLPAs), and specialized trusts (Flexible Life Investment Trusts, Property Trusts, and Discretionary Trusts). We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our website (www.solutaslegacy.co.uk), contacting us, or accessing our services, you agree to the practices described in this policy.

1. Who We Are

Solutas Legacy Ltd is a UK-based trust and estate planning firm, registered in England and Wales with company number 16640349. Our registered office is at Genesis Centre, Innovation Way, Stoke-on-Trent, ST6 4BF. As the “data controller,” we are responsible for your personal data.

Data Protection Contact: For questions or concerns about your data, please contact Richard Hollington at:
 Email: info@solutas.co.uk
 Address: Genesis Centre, Innovation Way, Stoke-on-Trent, ST6 4BF
 Phone: 01782 366175

2. What Personal Data We Collect

We collect and process the following types of personal data, depending on your interaction with us:

• Identity and Contact Data: Name, email address, phone number, postal address, date of birth, or other identifiers provided when booking consultations, requesting services, or signing up for updates.
  
  
• Financial and Estate Data: Information about your assets, investments, property, or family structure needed to prepare Wills, LPAs, BLPAs, or trusts (e.g., FLiT, Property Trusts, or Discretionary Trusts).
  
  
• Transaction Data: Details of payments or services purchased, such as consultation fees or trust setup costs.
  
  
• Technical Data: IP address, browser type, device information, and usage data when you visit our website (www.solutaslegacy.co.uk).
  
  
• Marketing and Communication Data: Your preferences for receiving newsletters, updates, or promotional materials about estate planning.
  
  
• Other Data: Feedback, survey responses, or inquiries you provide voluntarily.
  
  

We may collect special categories of personal data (e.g., health data for LPAs or family details for trusts) only with your explicit consent and where necessary for our services.

3. How We Collect Your Data

We collect personal data through:

• Direct Interactions: When you contact us via email, phone, website forms, or in-person consultations to discuss Wills, LPAs, BLPAs, or trusts.
  
  
• Automated Technologies: When you visit our website, we may collect technical data via cookies or analytics tools (see our Cookie Policy for details).
  
  
• Third Parties: We may receive data from service providers, such as payment processors (e.g., Stripe) or the Office of the Public Guardian for LPA registration, or from publicly available sources like Companies House for business clients.
  
  

4. How We Use Your Data

We use your personal data for the following purposes, based on lawful bases under the UK GDPR:

We only use your data for the purposes for which it was collected, unless we reasonably need it for another compatible purpose (e.g., updating your trust based on new tax laws).

5. Sharing Your Data

We may share your personal data with:

• Service Providers: Third parties who support our operations, such as payment processors (e.g., Stripe), website hosting providers, or software for managing client data (e.g., CRM systems).
  
  
• Professional Advisors: Solicitors, accountants, or auditors to ensure compliance with legal or regulatory requirements.
  
  
• Authorities: Government bodies like the Office of the Public Guardian (for LPA/BLPA registration) or HMRC, when required by law.
  
  
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to a new entity.
  
  

All third parties are required to respect your data and comply with UK data protection laws.

6. International Data Transfers

If we transfer your data outside the UK (e.g., to cloud storage providers in the US), we use appropriate safeguards, such as Standard Contractual Clauses (SCCs) or ensuring the recipient is in a country with a UK adequacy decision.

7. Data Security

We use robust technical and organizational measures, including encryption, secure servers, and access controls, to protect your data. While we strive to ensure security, no system is 100% secure, and we cannot guarantee absolute protection.

8. Data Retention

We keep your personal data only as long as necessary for the purposes outlined (e.g., during the provision of services or for ongoing trust administration). We retain data to comply with legal obligations, such as tax records (6 years) or LPA registration requirements. When no longer needed, we securely delete or anonymize it.

9. Your Rights

Under the UK GDPR, you have the following rights:

• Access: Request a copy of your data.
  
  
• Rectification: Correct inaccurate or incomplete data.
  
  
• Erasure: Request deletion of your data (where applicable).
  
  
• Restriction: Limit how we process your data.
  
  
• Objection: Object to processing for marketing or legitimate interests.
  
  
• Data Portability: Receive your data in a structured, machine-readable format.
  
  
• Withdraw Consent: Withdraw consent at any time (e.g., for marketing).
  
  

To exercise these rights, contact Richard Hollington at info@solutas.co.uk. We’ll respond within one month, though complex requests may take longer. You can also lodge a complaint with the Information Commissioner’s Office (ICO):
 ICO Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
 Website: www.ico.org.uk
 Phone: 0303 123 1113

10. Cookies

Our website uses cookies to improve functionality and user experience. See our Cookie Policy for more details.

11. Third-Party Links

Our website may include links to third-party sites (e.g., the Office of the Public Guardian). We are not responsible for their privacy practices, so please review their policies.

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Significant changes will be communicated via our website or by email to clients.