GDPR Policy
Last updated: 12 September 2026
This Privacy Policy explains how Spanish Wills LTD collects, uses, stores and protects personal data.
Spanish Wills LTD is a UK limited company registered in England and Wales under company number 16488581. Our registered business address is:
Spanish Wills LTD
Unit A, 82 James Carter Road
Mildenhall
IP28 7DE
United Kingdom
Website: www.spanishwills.es
We provide administrative document-preparation services for Spanish and United Kingdom wills. We are not a law firm and do not provide legal advice.
1. Data controller
Spanish Wills LTD is the data controller responsible for personal data processed in connection with this website and our services.
If another organisation, such as a funeral-plan provider, receives your information and uses it for its own purposes, that organisation may become a separate data controller. It should provide you with its own privacy information and explain how it uses your information.
For privacy enquiries or to exercise your rights, you may contact us by email to - support@spanishwills.es
2. Personal data we collect
Depending on how you interact with us, we may collect:
Identity and contact information
Name and title;
Date of birth;
Postal address;
Email address;
Telephone or mobile number;
Nationality;
Passport, identity-card, NIE or other identification details where needed for document preparation;
Details of a representative or authorised contact.
Will and estate information
Instructions for a Spanish or UK will;
Information about assets and liabilities;
Property ownership and property details;
Bank accounts, vehicles, utilities and other estate information;
Beneficiary, substitute-beneficiary and executor information;
Guardian and trustee information;
Family, relationship and succession information;
Details of intended gifts, legacies and specific bequests;
Information needed for probate or estate administration.
Service and communication information
Records of enquiries and instructions;
Draft documents and amendments;
Client approvals;
Correspondence, telephone-call records and other communications;
Payments, invoices and transaction information;
Information about complaints, requests and preferences.
Marketing and consent information
Whether you have opted in to marketing;
The date, time and method of your consent;
The wording shown to you when consent was collected;
The communication channels covered by your consent;
Any withdrawal of consent, objection or marketing preference.
Technical and website information
IP address;
Browser and device information;
Website usage information;
Cookie and similar-technology information;
Security and access logs.
We do not generally seek special-category data. However, information you provide about health, disability, family circumstances or other sensitive matters may occasionally appear in instructions or correspondence. Where this occurs, we will process it only where necessary and where an appropriate UK GDPR and Data Protection Act 2018 condition applies.
3. How we collect information
We may collect personal data:
Directly from you through website forms, email, telephone, written correspondence or our client portal;
When you request a free will or another service;
During the preparation, review and amendment of documents;
When you make a payment or contact us about an account;
From a person you authorise to act for you;
From professional advisers, notaries, solicitors, probate providers or other representatives where this is necessary and lawful;
Automatically through website technologies such as cookies and server logs.
You should only provide personal data about another person where you are authorised to do so or where you have another lawful basis for providing it.
4. How we use personal data
We may use personal data to:
Respond to enquiries and requests;
Provide administrative document-preparation services;
Prepare, format, translate and amend draft Spanish and UK wills;
Communicate with you about your instructions, documents, payments and appointments;
Arrange or support review, certification, signing or execution by a notary, solicitor or other appropriate professional;
Provide probate, estate-administration or related administrative services where separately agreed;
Verify identity and maintain accurate records;
Process payments, issue invoices and manage accounts;
Manage complaints, disputes and legal claims;
Protect our website, systems, clients and business from fraud, misuse and security threats;
Comply with legal, regulatory, accounting and insurance requirements;
Contact you about your free will request and other services where you have provided valid marketing consent;
Share limited information with trusted partners where you have consented to that sharing and the disclosure is needed to help arrange the relevant service;
Maintain records of marketing consent, withdrawal and suppression requests; and
Improve our services, website and administrative processes.
Spanish Wills LTD provides document preparation and administrative assistance only. Information supplied through our services is not legal advice and should not be treated as a substitute for advice from a qualified solicitor, abogado, notary or other appropriate professional.
5. Lawful bases for processing
We process personal data only where a lawful basis applies.
Where we rely on legitimate interests, we consider whether those interests are proportionate and whether they are overridden by your rights and freedoms.
6. Consent and marketing
6.1 The free will request form
The free will request form uses a positive opt-in consent box. The box must be unchecked by default.
The exact wording is:
> Tick here to give us permission to contact you about your request and put forward services we think may be helpful based on your circumstances.
The small print shown directly beneath the box is:
> This may include calling or emailing you about your free will, UK will, funeral plan or other helpful services, sometimes via a trusted partner who can help arrange them. We only share your details where needed; you can opt out at any time.
The tick-box wording and this small print form one combined consent notice. They must remain together on the form and must not be separated, hidden or displayed in a way that prevents a person from seeing both before giving consent.
Consent must be given by a clear positive action. Silence, inactivity or a pre-selected option will not be treated as consent.
Marketing consent should be separate from acceptance of service terms. We will not treat the mere submission of personal information, a request for a free will, or acceptance of non-marketing service terms as marketing consent.
6.2 What marketing may involve
If you consent, Spanish Wills LTD may contact you by email or telephone about:
Your free will request;
UK wills;
Spanish wills and related administrative services;
Funeral plans;
Other services that may reasonably be relevant to your circumstances; and
Other helpful services provided by Spanish Wills LTD or a trusted partner.
Trusted partners may include organisations that help arrange funeral plans and, where relevant and lawfully introduced, other service providers such as energy suppliers or similar providers.
We will not sell your personal data as a standalone data product. We may disclose limited information where it is needed to help arrange a service covered by your consent. We will seek to disclose only the information reasonably necessary for that purpose.
Where a partner will contact you directly, the partner may be an independent data controller and may provide its own privacy notice. We will require appropriate contractual and data-protection arrangements with relevant service providers.
If a proposed future service is materially different from the services reasonably described when consent was obtained, we will review whether fresh or more specific consent is required before using or sharing your information for that purpose.
6.3 Consent records
We will retain an auditable record of marketing consent, including, where available:
The identity or contact details associated with the consent;
The date and time of consent;
The form, webpage or other method through which consent was given;
The wording and information displayed at the time;
The channels covered, such as email or telephone;
Any relevant partner-sharing information; and
The date and method of withdrawal or objection.
6.4 Withdrawing consent
You may withdraw marketing consent at any time and free of charge.
You may do so by:
Using an unsubscribe link in an email;
Replying to a marketing message with a clear request to stop;
Telling a caller that you do not want further marketing contact;
Contacting us through our website; or
Writing to us at the postal address above.
Withdrawal of consent will not affect processing that took place lawfully before consent was withdrawn. It will not affect the provision of a service you have requested unless the processing is necessary to provide that service.
We will maintain a suppression or “do not contact” record where necessary to ensure that your preference is respected. This may contain limited information, such as your name, email address or telephone number.
6.5 Telephone and electronic marketing
We will comply with applicable PECR requirements and relevant direct-marketing rules.
Before making live marketing calls, we will take appropriate steps to screen numbers against applicable Telephone Preference Service or Corporate Telephone Preference Service records, unless a valid and sufficiently specific consent permits the call.
We will not make automated marketing calls unless the required specific consent has been obtained.
Marketing communications should identify Spanish Wills LTD or the relevant partner and provide a practical way to stop further marketing.
7. Sharing personal data
We may share personal data with:
Zoho and other technology, hosting, portal, email and document-management providers;
Payment processors, accountants, auditors, insurers and professional advisers;
Notaries, solicitors, abogados, translators, probate providers and estate-administration partners where necessary to provide a requested service;
IT, cybersecurity, communications and customer-support providers;
Delivery or document-handling providers where necessary;
Regulators, courts, law-enforcement bodies or public authorities where required or permitted by law;
Trusted third-party service partners where you have provided valid consent and the sharing is needed to help arrange the relevant service.
We do not authorise third parties to use your information for unrelated purposes. We do not sell your personal data as a standalone product.
Where a service provider processes data on our instructions, we will seek to use an appropriate data-processing agreement and require the provider to protect the information. Where a partner uses the information for its own purposes, it may act as a separate controller and should provide its own privacy information.
8. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy.
Our usual retention approach is:
Unconverted enquiries and free-will requests: normally up to 12 months after the last meaningful contact, unless a longer period is needed to deal with a complaint, dispute, consent record or legal obligation;
Client service records and document-preparation files: normally for at least six years after completion of the service, or longer where reasonably necessary for legal claims, regulatory requirements, estate administration or the nature of the service;
Financial and accounting records: for the period required by applicable tax and accounting rules;
Marketing consent records: for as long as needed to demonstrate valid consent and manage marketing preferences;
Suppression records: for as long as reasonably necessary to ensure that a withdrawal or objection is respected;
Website and security logs: for periods appropriate to security, troubleshooting, fraud prevention and legal requirements;
Cookies: for the period specified in the cookie settings or relevant cookie information.
When information is no longer required, we will securely delete it, anonymise it or restrict it where deletion is not immediately possible because of legal, technical or archival requirements.
9. International transfers
Some technology and service providers, including providers of cloud, email, hosting and document-management services such as Zoho, may process or store personal data outside the United Kingdom or European Economic Area.
Where a transfer is subject to UK restricted-transfer rules, we will seek to rely on:
UK adequacy regulations;
Appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses; or
Another lawful transfer mechanism permitted under the UK GDPR.
Where appropriate, we will carry out a transfer risk assessment or equivalent data-protection assessment and consider additional technical, contractual or organisational safeguards.
You may contact us to request further information about the safeguards applicable to a particular international transfer, subject to lawful confidentiality restrictions.
10. Data security
We use proportionate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction.
These measures may include:
Access controls and user permissions;
Password protection and authentication;
Secure cloud systems and document portals;
Encryption where appropriate;
Staff and contractor confidentiality obligations;
Backups and recovery procedures;
Security monitoring and access logging;
Data-minimisation procedures; and
Incident-response and breach-management procedures.
No internet transmission or storage system can be guaranteed to be completely secure. You should take reasonable care when sending information to us and should notify us promptly if you believe your account or correspondence has been compromised.
11. Cookies and website technologies
Our website may use cookies and similar technologies.
Essential technologies
These may be needed for:
Website operation;
Security;
Form submission;
Session management;
Accessibility; and
Remembering essential settings.
Optional technologies
Subject to your choices and applicable law, we may use optional technologies for:
Website analytics;
Understanding how visitors use our website;
Improving website performance;
Measuring communications; or
Marketing and advertising.
Where consent is required, optional cookies and similar technologies will not be placed until you have given consent. You may manage your preferences through the website’s cookie controls or your browser settings. Blocking some cookies may affect website functionality.
Further information about the cookies currently used on the website should be provided through the website’s cookie-management tool or separate cookie notice.
12. Your data-protection rights
Subject to legal conditions and exemptions, you may have the right to:
Access your personal data and receive a copy of it;
Rectify inaccurate or incomplete personal data;
Erase your personal data in certain circumstances;
Restrict processing in certain circumstances;
Object to processing based on legitimate interests;
Object at any time to direct marketing, including related profiling;
Withdraw consent where processing relies on consent;
Receive or request transfer of certain data in a structured, commonly used and machine-readable format where the right to data portability applies;
Request information about automated decision-making or profiling; and
Not be subject to a solely automated decision producing legal or similarly significant effects, unless the applicable legal conditions and safeguards are satisfied.
The right to erasure is not absolute. For example, we may need to retain information to comply with a legal obligation, establish or defend legal claims, or complete a requested service.
13. How to exercise your rights
To exercise a right, contact us by post at:
Spanish Wills LTD
Unit A, 82 James Carter Road
Mildenhall
IP28 7DE
United Kingdom
You should state:
Your name and contact details;
The right you wish to exercise;
The information or processing concerned; and
Any details that will help us locate the relevant records.
We may need to verify your identity before responding. We normally respond without undue delay and within one month of receiving a valid request. This period may be extended by up to a further two months where permitted by law because of the complexity or number of requests.
We will not normally charge a fee. We may charge a reasonable fee or refuse a request where it is manifestly unfounded or excessive, as permitted by law.
14. Complaints
If you have concerns about how we use your personal data, please contact us first so that we can investigate and try to resolve the issue.
You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
United Kingdom
Website: www.ico.org.uk
15. Changes to this Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal obligations, data-sharing arrangements or marketing practices.
The current version will be published on www.spanishwills.es with the date of the latest update. Where a change materially affects how we use personal data, we will provide additional information or seek fresh consent where required.
16. Important service disclaimer
Spanish Wills LTD is a document-preparation and administrative-support service, not a law firm. We do not provide legal advice.
Documents are prepared from the information and instructions supplied by the client. Clients should check all names, dates, identification numbers, beneficiaries and other details carefully and obtain independent legal advice where appropriate.
A Spanish will produced through our service must be reviewed and certified for legal compliance by a Spanish Notary at the time of signing. A UK will should be reviewed by a qualified solicitor where the client requires advice about its suitability, tax consequences or wider estate-planning circumstances.
