Privacy Policy

Effective Date: October 2025

1. Introduction

Murphies Law ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy informs you about how we collect, use, and share your personal data when you use our website, purchase a Will, or use our lead referral services.

We are registered with the Information Commissioner's Office (ICO) under registration number: [INSERT YOUR ICO REGISTRATION NUMBER HERE].

2. Contact Details

Data Controller: Murphies Law (Trading as [Insert Full Legal Business Name Here])

Address: [Insert Business Address - Note: This must be an accessible contact point]

Email for all data/privacy queries: [email protected]

3. Personal Data We Collect

Category of Data

Specific Data Points Collected

Why We Collect It

Identity & Contact Data (Lead Capture)

Full Name, Email Address, Phone Number, Postcode.

To communicate with you and market our services (Legitimate Interest/Consent).

Financial & Transaction Data

Card details (processed securely by Stripe/PayPal), Payment History, purchase details.

To process payments and fulfil the contract (Contractual Necessity).

Will Content Data (High Sensitivity)

Full names of Executors and Beneficiaries, address details, marital status, children/dependents' names, specific gift wishes, funeral wishes.

To draft your Will document. (Contractual Necessity).

Qualification Data (High-Value Leads)

Answers to our complexity survey questions (e.g., total assets, IHT needs, foreign property ownership).

To determine service suitability and sell qualified leads (Legitimate Interest/Consent).

Technical Data

IP address, browser type, device details, pages visited.

Website operation and analytics (Legitimate Interest).

4. How We Use Your Data and Our Lawful Basis

We must have a lawful basis under UK GDPR to process your personal data

Purpose of Processing

Lawful Basis for Processing

Data Categories Used

To Provide Will Document

Necessary for the performance of a contract.

Identity, Contact, Will Content, Financial.

To Sell Qualified Leads

Consent/Legitimate Interest to market and introduce you to specialists.

Identity, Contact, Qualification Data.

To Contact You for Marketing

Consent (if opted in) OR Legitimate Interest (for similar services).

Identity, Contact.

To Comply with Law

IP address, browser type, device details, pages visited.

Necessary for compliance with a legal obligation (e.g., HMRC, fraud checks).

5. Disclosure and Sharing of Your Personal Data (CRITICAL - Lead Sales)

We will share your personal data with the following categories of third parties:

Third Party Recipient

Data Shared

Purpose and Legal Basis

Partner Professionals (Lead Buyers)

Identity Data, Contact Data, Qualification Data (including sensitive asset information).

Lead Brokerage: To allow a specialist solicitor, financial advisor, or accountant to contact you regarding your complex needs ($\text{£}500K+$ assets or IHT concerns). This is a primary function of our business.

Payment Processors

Identity Data, Financial Data.

To process your payment securely (Stripe, PayPal, etc.) and fulfil your order.

GHL (GoHighLevel)

All data categories.

Our Customer Relationship Management (CRM) and Website Hosting provider. They process data on our behalf under strict contract terms.

Analytics Providers

Technical Data (IP addresses, cookies).

To monitor website traffic and improve our services (Google Analytics, etc.).

Note on Lead Sales: By completing the qualification survey and proceeding to the guide purchase (Step 3B), you are providing affirmative consent for us to share your details and specific complex needs with one or more Partner Professionals for a fee.

6. International Data Transfers

Your data is stored in the GHL platform. We aim to keep data within the UK/EEA, but some services (like GHL or email marketing platforms) may transfer data outside the UK/EEA.

Where this occurs, we ensure a similar degree of protection is afforded by ensuring appropriate safeguards are in place, such as using Standard Contractual Clauses approved by the ICO.

7. Data Security and Retention

7.1. We have put in place appropriate security measures within our GHL platform to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

7.2. We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for satisfying any legal, accounting, or reporting requirements.

7.3. Will Content Data is retained for a minimum of [Insert Time, e.g., 6 years] to comply with professional negligence liability periods. Unconverted Leads are deleted after [Insert Time, e.g., 18 months].

8. Your Legal Rights (UK GDPR)

Under UK GDPR, you have the right to:

Request access to your personal data (commonly known as a "data subject access request").

Request correction of the personal data that we hold about you.

Request erasure of your personal data (the 'right to be forgotten').

Object to processing of your personal data for direct marketing purposes.

Request restriction of processing your personal data.

Request the transfer of your personal data to you or a third party (data portability).

Withdraw consent at any time where we are relying on consent to process your personal data.

To exercise any of these rights, please contact us by email at [email protected].

9. How to Complain

If you have any concerns about our use of your personal information, you can make a complaint to us at [email protected].