Privacy notice

Legacy Compass Ltd (“we”, “us”) is the data controller for the information described here. We are registered in England and Wales, company number 15085572, registered office 86-90 Paul Street, London, EC2A 4NE.

Our registration with the Information Commissioner's Office is in progress. You can reach us about anything on this page at data@legacycompass.net.

Depending on how you use Legacy Compass, we may hold:

• Your name and email address, from when you sign up.
• The audio, and in some cases video, of your call, and a written transcript of it.
• What you tell us on the call about your family: their care, money matters such as wills and power of attorney, and the people involved. Because this can include information about health, it is treated as special category data.
• Your family resilience plan, built from what you said.
• If you buy the full plan, what you tell us on your follow-up call, and any corrections you make to what you told us before.
• If you share your plan or invite a relative, a record of each link you made, when, and whether it has been used or switched off. We store a scrambled form of the link, not the link itself.
• A record of your consent and of any terms you accepted, with the date and the version.
• If you buy a paid tier, a record of the payment. Your card details are handled by our payment provider and never reach our servers.
• Basic technical information needed to run the site, such as what a small number of functional cookies store. See our cookie policy.

Under the UK GDPR we rely on these lawful bases:

• Your explicit consent (Article 9(2)(a)) for the recording and transcript of your call and the health information in it. This is the consent you give on the screen before a call begins. You can withdraw it at any time.
• Performing our contract with you (Article 6(1)(b)) to give you the plan, the calls, and any paid tier you buy.
• Our legitimate interests (Article 6(1)(f)) to keep the service secure and working, and to understand, using information with names and identifying details removed, what families need so we can improve it. Where you consented to that analysis on the call, that consent covers it too.
• Legal obligations (Article 6(1)(c)) where we must keep certain records, for example for tax on a payment.

We do not sell your information, and we never contact the family members you mention. To run the service we use a small number of trusted providers who process information on our instructions:

• Hosting and our database, so the service can run and your data can be stored.
• Live audio and video for the call itself.
• Speech-to-text, to turn what is said into a transcript.
• Text-to-speech, so the assistant on an automated call can speak.
• A large-language-model provider, to draft notes and your plan from what you said.
• A payment provider, to take payment for a paid tier.
• Email delivery, to send you your plan link.
• Scheduling, if you book a time for a call.

Some of these providers may process data outside the UK. Where they do, we rely on the safeguards the law requires, such as the UK International Data Transfer Agreement or an adequacy decision. Ask us at data@legacycompass.net for the current list of providers.

We email you your plan and anything you buy. After your call we may also send two or three short research emails, for example asking whether you have talked with your family and how it went. We send these whether or not you paid, because comparing the two helps us learn what genuinely helps. These emails never try to sell you anything.

What we keep. Your answers, whether you have talked with your family, and whether you used a link we sent you to answer a question. We do not track whether you open our emails.

Why we can. Our legitimate interests (Article 6(1)(f)) in finding out whether the service genuinely helps families, balanced against yours: the emails are few, short and easy to stop, and we ask you not to include health details in your answers.

Stopping them. Every research email has a link to stop them, which works in one click, or you can email us. Stopping them changes nothing else: your plan stays where it is, and we still send anything you ask for. You have the right to object to this use at any time.

How long. Survey answers and email records are kept for 12 months, like the rest of your information. If you stop our emails, or ask us to delete your information, we keep a scrambled note of your email address so that we do not email you again. It cannot be turned back into your address.

When you talk about your parent or other relatives, we hold that information too, including health details. We use it only to write your plan, and we never contact them. If a relative asks, we will tell them what we hold about them and delete it on request.

If you buy the full plan, our AI guide reads back, to you only, the main things you told us on your first call, so you can check and correct them. Anything you correct replaces what we had. We ask for your consent to this separately, before the call, and your full plan is written from both conversations. The follow-up call is only ever started from your own plan page or the link we email you, never from someone typing your email address.

Your plan page has a private address. If you choose to share your full plan, we make a separate read-only link, and only after you confirm that anyone holding it can read your plan, including what it says about your parent’s health. That copy never includes the personal reflections drawn from your own words. You can switch a link off at any time.

Where we offer invites, a relative you invite can read your shared plan and take a short call of their own. They sign up, and give their own consent, for themselves; we never contact them unless they do. Their call is not given your answers, only what your shared plan shows. What they say comes back to you only if they tick to allow it.

We keep your recording, transcript, and plan for 12 months, then delete them. You can ask us to delete everything sooner, at any time, and we will do it and confirm. Share and invite link records, and what you tell us on a follow-up call, are kept for the same 12 months and deleted with the rest. We keep payment records for as long as the law requires.

You have the right to:

• ask for a copy of the information we hold about you;
• ask us to correct anything that is wrong;
• ask us to delete your information;
• withdraw your consent at any time, which stops future processing;
• object to, or ask us to restrict, certain uses;
• ask for your information in a portable form.

To use any of these, email data@legacycompass.net. If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk, though we would rather you told us first so we can put it right.

An assistant helps draft your plan and, on an automated call, runs the conversation. It does not make any decision that has a legal or similarly significant effect on you. An automated check compares the plan with what you said and removes anything it cannot match. If that check finds a problem, a person at Legacy Compass Ltd looks at the plan before it is sent to you. People at Legacy Compass Ltd can read conversations and plans to check quality and improve the service.

If we change this notice we will update the date and version at the top. This version is 2026-10-29.v3.