Privacy Policy

Last updated 15 June 2026

1. Who I am

This privacy policy explains how I, as a sole trader based in the United Kingdom, collect, use, and protect your personal information when you use my website or engage my end-of-life planning services.

Contact details:

Fiona Ward
Totnes, Devon, UK
fionawardwright@gmail.com
07922 165564

2. What Information I Collect

Online (via my website)

When you contact me through the enquiry form on my website, I collect:

Your name
Your email address
Your phone number (optional)
Any message or information you choose to include in your enquiry

Offline (in the course of providing my services)

When you engage me to assist with your end-of-life planning, I will collect and hold more sensitive personal information, including:

Personal identification details (such as date of birth, address, and next of kin)
Your wishes, preferences, and instructions regarding your future care
End-of-life planning documents and related records you share with me

This offline information is collected directly from you as part of delivering my services to you.

3. Special Category (Sensitive) Personal Data

Some information I collect in connection with end-of-life planning may constitute "special category" data under UK data protection law — for example, information relating to your health or medical wishes. I handle such data with the highest level of care and only process it with your explicit consent and to fulfil the services you have engaged me to provide.

4. How I Use Your Information

I use the information I collect for the following purposes:

To respond to your enquiry and communicate with you about my services
To provide and deliver the end-of-life planning services you have requested
To prepare, store, and manage the documents and records that form part of your end-of-life plan
To comply with any legal or regulatory obligations

I will not use your information for marketing purposes without your explicit consent, and I will never sell your personal data to third parties.

5. Legal Basis for Processing

Under UK GDPR, I rely on the following lawful bases for processing your personal data:

Contract: processing is necessary to provide the services you have requested or to take steps before entering into a contract with you.
Legitimate interests: for example, responding to your enquiry via the website contact form.
Explicit consent: for processing special category data (such as health-related information or sensitive personal wishes).
Legal obligation: where I am required to process data to comply with applicable law.

6. How I Store Your Information

Website enquiries

Information submitted through my website contact form is received by me via email and stored securely within my email account.

Offline client documents

Documents, records, and information relating to your end-of-life plan are stored securely in Google Drive (Google LLC), a cloud storage service. Google Drive provides industry-standard security, including encryption at rest and in transit. Google LLC may process your data on servers outside the United Kingdom. Where this occurs, I rely on standard contractual clauses and adequacy decisions as permitted under UK GDPR to ensure your data is protected to an equivalent standard. For more information on how Google protects your data, please visit: https://policies.google.com/privacy

7. Who I Share Your Information With

Your personal information is not shared with any third parties other than:

Google LLC, as the provider of cloud storage for your documents (see Section 6 above).
Any person or organisation you explicitly ask me to share information with (for example, a family member, solicitor, or healthcare professional, where you have provided your written consent).
Any authority or body where I am legally required to disclose information.

I will never share your information with other businesses, marketers, or any other third party without your explicit consent.

8. How Long I Keep Your Information

I retain your personal information only for as long as necessary:

Website enquiry data: retained for up to 12 months from your last contact, after which it is securely deleted.
Client documents and end-of-life planning records: retained for the duration of our working relationship and for a reasonable period afterwards (typically 7 years) to fulfil any legal obligations or to deal with any queries that may arise. You may request earlier deletion — please see Section 9.

9. Your Rights

Under UK data protection law, you have the following rights:

Right of access — to request a copy of the personal data I hold about you.
Right to rectification — to ask me to correct inaccurate or incomplete data.
Right to erasure — to ask me to delete your personal data in certain circumstances.
Right to restriction — to ask me to restrict how I use your data.
Right to object — to object to my processing of your data where I rely on legitimate interests.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to withdraw consent — where I rely on your consent to process data, you may withdraw it at any time without affecting the lawfulness of earlier processing.

To exercise any of these rights, please contact me using the details in Section 1. I will respond within two weeks of receiving your request.

10. Cookies

My website may use essential cookies to ensure it functions correctly. If I use any analytics or non-essential cookies, I will request your consent before placing them. You can control cookies through your browser settings at any time.

11. How to Make a Complaint

If you are unhappy with how I handle your personal data, please contact me in the first instance so I can try to resolve your concern.

You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO):

Website: www.ico.org.uk
Helpline: 0303 123 1113

12. Changes to This Privacy Policy

I may update this privacy policy from time to time. Any changes will be published on my website with a revised "Last updated" date. I encourage you to review this policy periodically.

This document is intended as a starting point. You may wish to seek independent legal advice to ensure full compliance with UK GDPR and the Data Protection Act 2018.