Carla Jordan Estate Planning

Carla Jordan Estate Planning is a professional estate planning service that provides Will writing, Lasting Power of Attorney (LPA) creation, and other associated services. We operate throughout the United Kingdom and are dedicated to supporting clients in planning for the future and protecting their loved ones. Our office is located at Lytchett House, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FA. If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact us at carla@cjestateplanning.co.uk or by calling 07835743667.

Personal data, or personal information, refers to any data about an individual from which that person can be identified. It does not include data where the identity has been removed, also known as anonymous data.

In order to provide high-quality estate planning services, we collect a variety of personal information. This may include your full name, address, phone number, email address, date of birth, National Insurance number, financial details (such as property ownership, bank accounts, pensions, and insurance policies), marital and family details, and information about your wishes for Wills or LPAs. We may also collect identification documents for the purposes of verifying your identity, in line with our legal obligations. This data is collected through our website, direct communications (such as emails, calls, or face-to-face meetings), questionnaires, or referrals from trusted third parties (with your consent).

At Carla Jordan Estate Planning, we may collect, use, store, and transfer different types of personal data about you. We group this data into categories to help explain how and why it is collected:

• Identity Data includes your first name, last name, username or similar identifier, and your date of birth.
• Contact Data includes your billing address, invoicing address, email address, and telephone numbers.
• Transaction Data includes details about payments and services you have ordered or purchased through us. Please note that all payment processing is handled by Stripe, and we do not store any of your payment card information.
• Technical Data includes your internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology used to access our website.
• Profile Data includes your username and password, bookings made by you, preferences, interests, feedback, and survey responses.
• Usage Data includes information about how you use our website and services.
• Marketing and Communications Dataincludes your preferences in receiving marketing communications from us and your communication preferences.
• Interaction Data includes any information you submit through email, phone calls, forms, or online forums (if applicable), as well as data we collect when you complete a questionnaire or meet with us. This may also include information related to your assets, your involvement in someone’s estate, beneficiaries, and family members.
• Cookies Data refers to information collected through the use of cookies on our website. We use cookies to enhance your experience and gather analytics data. You can find more about this in our Cookies Policy.
• Third Party and External Data includes information we receive from third parties such as employers, referrers, sub-contractors, analytics providers, or other partners we work with to provide our services. Where applicable, we will inform you that we have received such data and explain how it will be used.
• Analytics Dataincludes data collected by third-party services (such as Google Analytics) to understand how users interact with our website, track usage patterns, measure performance, and improve site functionality. These services use cookies and other tracking technologies, and by using our website, you consent to this data being collected in the manner described in this policy.

We also collect, use, and share Aggregated Data, such as statistical or demographic information. This may be derived from your personal data but is not considered personal data under the law if it does not directly or indirectly identify you. For example, we may aggregate usage data to determine the percentage of users accessing specific features of our site. If we combine aggregated data with personal data in a way that can identify you, we treat the combined data as personal data.

In some cases, we may need to collect Special Categories of Personal Data. This includes information about your health, race or ethnicity, religious or philosophical beliefs, or biometric data. We will only collect and process this type of data where it is relevant and necessary for providing our services, and we will seek your explicit consent unless another lawful basis applies.

We are committed to processing your personal data lawfully, fairly, and transparently. In accordance with data protection legislation, we will only process your data when one or more of the following legal bases apply:

1. You have given explicit consent for specific purposes;
2. Processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract;
3. Processing is necessary for compliance with a legal obligation to which we are subject;
4. Processing is necessary to protect your vital interests or those of another person;
5. Processing is necessary for tasks carried out in the public interest or in the exercise of official authority;
6. Processing is necessary for our legitimate interests or those of a third party, provided those interests do not override your fundamental rights and freedoms, especially where the data subject is a child.

If we receive personal information about third parties from you in connection with the services we are providing (for example, about a beneficiary or family member), you are responsible for ensuring that the individual has been informed about this Privacy Policy and that you have obtained their permission to share their information with us.

In some cases, we may combine information you provide with other data we hold about you to offer a more personalised service. For example, we may combine your name with your location or your previous enquiry history.

We may also process your data for multiple lawful reasons depending on the specific use. Below, we outline the typical purposes for which we may use your data and the legal basis for doing so:

If you would like more details about how a specific type of data is used, or the lawful ground we are relying on in a given situation, please contact us.

In exceptional circumstances, we’ll use your information to help members of the public resolve any complaint or dispute that they are unable to resolve with you directly.

Your personal data is used for a number of purposes to allow us to deliver our services effectively. These purposes include preparing and drafting Wills, LPAs, and related legal documents; managing your case file; keeping you updated on the progress of your matter; arranging meetings and follow-ups; verifying your identity; and complying with legal or regulatory obligations, such as anti-money laundering checks. We may also use your contact details to send you information about services you have expressed an interest in or updates that are relevant to your estate plan, provided you have consented to receive such communications.

We rely on several legal bases to process your personal information, depending on the circumstances. Most commonly, we process your data because it is necessary for the performance of a contract (to deliver the service you have requested). In other cases, we may be legally obligated to process your data, such as for compliance with anti-money laundering or financial regulations. We may also rely on your consent, particularly in relation to marketing or sharing your information with third parties, and on our legitimate interests in managing and improving our business processes and client experience.

We do not sell or rent your personal data to any third parties. However, in order to provide a seamless service and meet our legal obligations, we may share your data with selected third-party service providers. These may include legal professionals, financial advisers, IT service providers, document storage companies, or regulatory bodies. Where third-party access is necessary, we ensure that appropriate safeguards and data protection agreements are in place to protect your information and limit its use strictly to what is required to perform their duties.

We only retain your personal information for as long as necessary to fulfil the purpose for which it was collected and to meet any legal or regulatory obligations. Typically, we will retain your records for a period of seven years following the conclusion of our services. In cases where we are storing Wills, LPAs, or other documents on your behalf, we may retain relevant data indefinitely or until the documents are returned or destroyed with your consent. At the end of the retention period, your information will be securely deleted or destroyed.We review our data retention obligations to ensure we are not retaining data for longer than we are legally obliged.

You have a number of rights in relation to your personal data under the UK GDPR. These include the right to access the personal data we hold about you, the right to have inaccurate or incomplete data corrected, the right to request erasure of your data where appropriate, and the right to restrict or object to the processing of your data in certain situations. If we are processing your data on the basis of your consent, you have the right to withdraw that consent at any time. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe we have not handled your data appropriately. To exercise any of these rights, please contact us using the details provided in this policy.

We are committed to ensuring the security of your personal data. We have implemented appropriate physical, technical, and organisational measures to prevent unauthorised access, loss, misuse, or alteration of your information. These measures include secure electronic storage, password protection, encryption tools, controlled access to client files, and ongoing staff training in data protection and confidentiality. We also ensure that any third parties who handle your data on our behalf are required to maintain strict security standards.

Our website may use cookies and other tracking technologies to collect information about how visitors use the site. Cookies are small data files stored on your device that help us understand user preferences and improve website functionality. The information collected through cookies is anonymised and is not used to personally identify you. You can control the use of cookies through your browser settings. For more detailed information about our cookie use, please refer to our website’s cookie policy

We may update this Privacy Policy from time to time to reflect changes in our services, the law, or data protection practices. Any updates will be posted on our website, and where significant changes are made, we may notify you directly. We encourage you to review this policy periodically to stay informed about how we are protecting your data.