Privacy notice

Legacy Compass Ltd (“we”, “us”) is the data controller for the information described here. We are registered in England and Wales, company number 15085572, registered office 86-90 Paul Street, London, EC2A 4NE.

Our registration with the Information Commissioner's Office is in progress. You can reach us about anything on this page at data@legacycompass.net.

Depending on how you use Legacy Compass, we may hold:

• Your name and email address, from when you sign up.
• The audio, and in some cases video, of your call, and a written transcript of it.
• What you tell us on the call about your family: their care, money matters such as wills and power of attorney, and the people involved. Because this can include information about health, it is treated as special category data.
• Your family resilience plan, built from what you said.
• A record of your consent and of any terms you accepted, with the date and the version.
• If you buy a paid tier, a record of the payment. Your card details are handled by our payment provider and never reach our servers.
• Basic technical information needed to run the site, such as what a small number of functional cookies store. See our cookie policy.

Under the UK GDPR we rely on these lawful bases:

• Your explicit consent (Article 9(2)(a)) for the recording and transcript of your call and the health information in it. This is the consent you give on the screen before a call begins. You can withdraw it at any time.
• Performing our contract with you (Article 6(1)(b)) to give you the plan, the calls, and any paid tier you buy.
• Our legitimate interests (Article 6(1)(f)) to keep the service secure and working, and to understand, using information with names and identifying details removed, what families need so we can improve it. Where you consented to that analysis on the call, that consent covers it too.
• Legal obligations (Article 6(1)(c)) where we must keep certain records, for example for tax on a payment.

We do not sell your information, and we never contact the family members you mention. To run the service we use a small number of trusted providers who process information on our instructions:

• Hosting and our database, so the service can run and your data can be stored.
• Live audio and video for the call itself.
• Speech-to-text, to turn what is said into a transcript.
• Text-to-speech, so the assistant on an automated call can speak.
• A large-language-model provider, to draft notes and your plan from what you said.
• A payment provider, to take payment for a paid tier.
• Email delivery, to send you your plan link.
• Scheduling, if you book a time for a call.

Some of these providers may process data outside the UK. Where they do, we rely on the safeguards the law requires, such as the UK International Data Transfer Agreement or an adequacy decision. Ask us at data@legacycompass.net for the current list of providers.

We keep your recording, transcript, and plan for 12 months, then delete them. You can ask us to delete everything sooner, at any time, and we will do it and confirm. We keep payment records for as long as the law requires.

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information;
• withdraw your consent at any time, which stops future processing;
• object to, or ask us to restrict, certain uses;
• ask for your information in a portable form.

To use any of these, email data@legacycompass.net. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

An assistant helps draft your plan and, on an automated call, runs the conversation. It does not make any decision that has a legal or similarly significant effect on you. A person at Legacy Compass Ltd reviews the plan before it is treated as final.

If we change this notice we will update the date and version at the top. This version is 2026-07-28.v1.