Privacy Policy

Last updated: January 2026

1. Introduction

myLPA Ltd ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

We are registered with the Information Commissioner's Office (ICO) and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

Personal Information

When you use our services to create a Lasting Power of Attorney, we collect:

  • Full name and date of birth
  • Contact information (address, email, phone number)
  • Information about your attorneys and certificate provider
  • Preferences and instructions for your LPA
  • Payment information (processed securely through our payment provider)

Automatically Collected Information

When you visit our website, we may automatically collect:

  • IP address and browser type
  • Pages visited and time spent on our site
  • Referring website
  • Device information

3. How We Use Your Information

We use your information to:

  • Provide and manage our LPA preparation services
  • Process your payments
  • Communicate with you about your application
  • Send you important updates and notifications
  • Improve our website and services
  • Comply with legal obligations
  • Prevent fraud and ensure security

4. Legal Basis for Processing

We process your personal data under the following legal bases:

  • Contract: Processing necessary to provide our services to you
  • Legal obligation: Processing required by law
  • Legitimate interests: Processing for our legitimate business interests, such as improving our services
  • Consent: Where you have given us specific consent for marketing communications

5. Data Sharing

We may share your information with:

  • Office of the Public Guardian (OPG): To register your LPA
  • Payment processors: To process your payments securely
  • Service providers: Who help us operate our business (e.g., hosting, email services)
  • Legal authorities: When required by law

We do not sell your personal information to third parties.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

  • 256-bit SSL encryption for all data transmission
  • Secure UK-based data centres
  • Regular security audits and updates
  • Access controls and authentication measures
  • Staff training on data protection

7. Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services to you
  • Comply with legal requirements
  • Resolve disputes and enforce our agreements

Typically, we retain LPA-related documents for 7 years after completion of the service, in line with legal requirements.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data (subject to legal requirements)
  • Restriction: Request restriction of processing
  • Portability: Request transfer of your data
  • Object: Object to processing based on legitimate interests
  • Withdraw consent: Where processing is based on consent

To exercise any of these rights, please contact us using the details below.

9. Cookies

We use cookies to improve your experience on our website. For more information, please see our Cookie Policy.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

11. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on our website and updating the "Last updated" date.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):