1. Introduction

153 CM Ltd trading as Legacy Tax Relief Solutions ("we", "us", or "our") is a professional services firm based in the United Kingdom. We are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant UK data protection laws.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website www.legacytaxrelief.co.uk (the "Website"), engage our services, or otherwise interact with us. It applies to all personal data we process about you as a data controller.

If you have any questions about this policy or our data practices, please contact us using the details in Section 12 below.

This policy was last updated on 23 September 2025.

2. Information We Collect

We collect personal information that you voluntarily provide to us and information that is automatically collected when you use our Website or services.

2.1 Voluntarily Provided Information

This includes data you provide when:

Inquiring about or engaging our professional services (e.g., estate planning, financial advice).
Filling out contact forms, subscribing to newsletters, or registering for events.
Communicating with us via email, phone, or other channels.

Examples of personal information may include:

Contact details: Name, email address, phone number, postal address.
Professional details: Job title, company name, financial information relevant to our services (e.g., assets, tax details).
Sensitive data: In limited cases, with your explicit consent, we may collect special categories of data (e.g., health information if relevant to estate planning).

2.2 Automatically Collected InformationWhen you visit our Website, we may automatically collect:

Device and usage data: IP address, browser type, operating system, pages visited, time and date of visit, referring/exit pages.
Cookies and tracking technologies: See Section 10 for details.

We do not intentionally collect personal data from children under 16 without parental consent.

3. How We Collect Information

Directly from you: Through forms, consultations, or communications.
Automatically: Via cookies, web beacons, and server logs.
From third parties: Such as business partners, referral sources, or public databases, where lawful.

4. Legal Bases for Processing Your Personal Information

We process your personal data only where we have a lawful basis under UK GDPR, including:

Consent: Where you have given clear consent (e.g., for marketing).
Contract: To perform a contract with you or take steps at your request prior to entering a contract (e.g., providing services).
Legitimate interests: For our business purposes, such as improving services, provided your rights do not override these interests.
Legal obligation: To comply with laws (e.g., tax reporting).
Vital interests: In rare cases, to protect life.

For special category data, we rely on explicit consent or other specific bases.

5. Use of Your Personal Information

We use your personal data for the following purposes:

To provide, manage, and improve our professional services.
To communicate with you, respond to inquiries, and send service-related updates.
For billing, payment processing, and financial administration.
To conduct marketing and promotional activities (with your consent where required).
For analytics, research, and Website optimization.
To comply with legal and regulatory requirements.
To prevent fraud, ensure security, and enforce our terms.

We will not use your data for purposes incompatible with those outlined here without notifying you.

6. Disclosure of Your Personal Information

We may share your personal data with:

Service providers: Such as IT support, payment processors, or legal advisors, under strict confidentiality agreements.
Professional partners: If necessary for delivering services (e.g., accountants, solicitors).
Regulatory authorities: To comply with legal obligations (e.g., HMRC).
Business transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell your personal data to third parties.

7. Security of Your Personal Information

We implement appropriate technical and organizational measures to protect your data from unauthorized access, loss, or breach, including encryption, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security.In the event of a data breach, we will notify you and the ICO where required by law.

8. Retention of Your Personal Information

We retain personal data only as long as necessary for the purposes outlined, or as required by law. For example:

Service-related data: Up to 7 years after the end of our relationship for tax and legal purposes.
Marketing data: Until you withdraw consent.

After this period, data is securely deleted or anonymized.

9. International Transfers

If we transfer your data outside the UK, we ensure adequate safeguards are in place, such as UK International Data Transfer Agreements (IDTAs) or adequacy decisions. For transfers to the EEA, we rely on the UK's adequacy recognition of EU standards.

10. Cookies and Tracking Technologies

Our Website uses cookies to enhance user experience, analyze traffic, and for advertising. Cookies are small files stored on your device.

Essential cookies: Necessary for Website functionality.
Analytics cookies: To understand usage (e.g., Google Analytics).
Marketing cookies: For targeted ads.

You can manage cookies via your browser settings. For more details, see our Cookie Policy [link if separate].

11. Your Data Protection Rights

Under UK GDPR, you have rights including:

Access: Request a copy of your data.
Rectification: Correct inaccurate data.
Erasure: Request deletion in certain circumstances.
Restriction: Limit processing.
Objection: Object to processing based on legitimate interests or for marketing.
Portability: Receive data in a portable format.
Withdraw consent: At any time, where processing relies on consent.

To exercise these rights, contact us (see Section 12). We respond within one month. You can also complain to the ICO (www.ico.org.uk) (www.ico.org.uk).

12. Changes to This Policy

We may update this policy to reflect changes in our practices or law. Updates will be posted on our Website with the effective date. Continued use after changes constitutes acceptance.

13. Contact Us

For questions or to exercise rights:

Email: enquiries@legacytaxrelief.co.uk