Privacy Policy

Company Details

• Legal Entity / Data Controller: Custom Coded Websites Ltd
• Trading Name: UK Prenup
• Service: Prenuptial Agreement Services
• Website: ukprenup.com
• Email: contact@ukprenup.com
• Registered Office: Office 14883, 182-184 High Street North, East Ham, London, E6 2JA
• ICO Registration Number: ZC087180

Compliance Standards

• UK GDPR Compliant
• Data Protection Act 2018

We comply with the requirements of the UK GDPR and the Data Protection Act 2018. Payment processing is handled securely by our third-party payment providers who are PCI DSS compliant.

Personal Information

• Full name of each partner
• Date of birth
• Email address (to send documents and service communications)
• Home address (for document preparation and delivery, if selected)
• Phone number (optional, for contact if needed)
• The dates you record for signing your agreement, and the version you signed (you sign the printed agreement yourselves; we do not collect your signatures or hold a copy of your signed agreement)

Both Partners' & Financial Data

When preparing a prenuptial agreement, we collect:

• Each partner's full name, date of birth, and address
• Financial disclosure details, including assets, debts, and income, that each partner chooses to include
• Witness details (if required) – you must ensure the witness has consented to their data being shared with us
• Details of any intended date of marriage or other supporting information, where applicable

Payment Information

• Billing address
• Transaction records
• Payment method type (e.g. credit/debit card, PayPal)
• Invoice information

Technical Information

• IP address and general location
• Browser type, device, and operating system
• Website usage and session data (e.g. pages visited, time spent)
• Cookies and user preferences (see our Cookies section for more detail)

What Data We Collect

• Each Partner's Information: Full name, date of birth, and address
• Financial Details: Assets, debts, income, and property each partner chooses to disclose
• Signing records: The signing dates each partner records, and the version of the agreement they record signing. We do not hold a copy of your signed agreement.
• Supporting Records: Documentation each partner provides to support their disclosure
• Witness Information: Details of witnesses (when required). You must ensure your chosen witness has consented to their details being provided to us.

Who Provides the Data

• Each partner provides their own information and the disclosure they choose to make.
• Both partners confirm and sign the agreement before marriage.
• Witnesses provide their own details when acting in that role.
• The solicitor advising a partner records their advice session with us (when it was held, and whether they certified the agreement), and may give that partner an advice letter through us.
• In some cases, information may also come via an independent legal adviser instructed by a partner.

Information You Provide About Your Partner

The person who starts the agreement (Party 1) gives us only three things about their partner (Party 2): their name, the email address their invitation goes to, and their date of birth, which we ask Party 2 for again when they set up their login, to check the invitation reached the right person. Party 1 does not give us Party 2's address, occupation, income, assets or debts: Party 2 adds those themselves, from their own login. Where you provide information about your partner:

• We process it to create the prenuptial agreement you have both decided to enter into, and to invite your partner (performance of a contract and our legitimate interest in providing the service).
• By submitting it, you confirm that your partner is aware you are creating the agreement and agrees to you giving us their name, email address and date of birth.
• The completed agreement contains both partners' details and is made available to both of you, each in your own account, so each partner has a copy to review and sign. Your partner is told what you gave us about them, and can check and correct it. The independent solicitor firms advising you and your partner receive it too (see section 6).
• Your partner is a data subject in their own right and may contact us at any time to access, correct, or request erasure of their information, or to object to its processing.

The Record of Each Step

Each of you takes the important steps from your own login: your partner sets up their login from their invitation and accepts their own terms, and either of you may confirm the agreement, ask for changes, record your own legal advice or a decision not to take it, invite your partner or record a signing. For each step we keep a record of:

• the date and time, and how recently that login signed in;
• the login that took it, and the email address it had then;
• the IP address and the browser (user-agent) details of the device used;
• the version of the agreement and the wording shown; and
• what was given at that step, such as the confirmations ticked or the terms version accepted.

We keep this as evidence of how and when each step was taken, so that either of you can show it later that you acted yourself. The login, IP address and device details stay private to the person who took the step. It does not verify anyone's identity. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): yours, your partner's and ours in a reliable record of the confirmation. We keep it with the prenuptial agreement records, for the same period as the agreement itself (section 8), and never use it for marketing or profiling.

Legal Basis for Processing

• Performance of a Contract – to provide the prenuptial agreement service you request
• Legal Obligation – to comply with applicable record-keeping laws
• Consent – clear consent from each partner to process their financial disclosure information

How We Use Financial Disclosure Data

• To prepare prenuptial agreement documents for both partners
• To reflect each partner's disclosure accurately in the agreement
• To confirm each partner's identity and eligibility
• To communicate with both partners about the service
• To maintain legal and administrative records

Safeguards

• Financial disclosure data is encrypted in transit and at rest
• Access is restricted to designated staff only
• Data is not used for marketing or profiling purposes
• Financial disclosure data is securely deleted once no longer required

Data Retention

We retain prenuptial agreement records only for as long as necessary to provide the service and meet our legal obligations: see section 8. Until our lawyer sets the retention period, we do not delete paid agreements automatically. Before we delete a paid agreement, we will tell both partners and email each of you a final copy of it. We do not hold a copy of your signed agreement, so keep your signed original safe.

Your Rights

Each partner may exercise their data rights in relation to their own information, including the rights of access, rectification, erasure, restriction, and objection. Each partner has their own login, downloads their own information and closes their own account; how the shared agreement affects these rights is explained in section 9.

Service Delivery (Legal Basis: Contract)

• Create and process your prenuptial agreement document
• Verify your identity and eligibility
• Process payments securely via our third-party payment provider
• Provide customer support related to the service
• Send service updates and confirmations
• Manage your account preferences

Legal Compliance (Legal Basis: Legal Obligation)

• Meet UK legal and regulatory requirements
• Prevent fraud and verify identity
• Maintain legally required records
• Respond to legal requests or lawful inquiries
• Ensure document authenticity and validity

Service Improvement (Legal Basis: Legitimate Interests / Contract)

• Analyse website usage patterns to enhance functionality
• Improve user experience and interface design
• Develop new features or services
• Monitor service quality and perform security assessments

Note: All analysis is conducted on anonymised or aggregated data wherever possible.

Communications

• Order confirmations, service updates, and important announcements
• Customer service communications related to your requests
• Reminders and offers (marketing), only as set out below

Service emails about your agreement (invitations, sign-in codes, progress, changes, signing and your final copy) are not marketing and are sent to both partners whatever you choose. Emails to an invited partner never include promotions, discount codes or countdowns.

If you bought, or started to buy, from us (Party 1): we may send you occasional reminders about your prenup, such as a nudge to finish your order, a follow-up after you buy and a request for a review. We rely on the "soft opt-in" in the Privacy and Electronic Communications Regulations: we tell you when you create your account, with a box to say no, and every reminder has a one-click unsubscribe link. You can also stop them in Settings at any time.

If you were invited by your partner (Party 2): we never send you marketing unless you opt in, using a separate box in your Settings that starts unticked. You can change your mind at any time.

We record each choice you make, with the date and time, where you made it and the words you were shown. Staff and panel solicitors are never sent marketing.

Who They Are and What They Receive

Independent legal advice on our packages is given by independent, regulated family-law solicitors on the UK Prenup panel. On the £750 package a panel solicitor advises Party 1; on the £1,300 package a solicitor at a different firm also advises Party 2.

• Each solicitor receives the agreement in each version, both partners' financial disclosure, and both partners' details as the agreement sets them out (names, dates of birth, addresses, occupations and incomes).
• Each solicitor receives their own client's email address and phone number, to arrange the advice session. Party 2's solicitor receives Party 2's only once Party 2 has confirmed their own details.
• A solicitor never receives the other partner's email address or phone number, and never sees the other partner's advice.

Why, and on What Basis

So the solicitor can advise their client on what the agreement means and whether it is in their interests, check their client's identity, and sign the certificate of independent legal advice. Our legal basis is the contract for the service (UK GDPR Article 6(1)(b)) and the legitimate interests of both partners and of UK Prenup in an agreement made with independent advice (Article 6(1)(f)).

Each Firm Is Responsible for What It Receives

Each firm is a separate controller of the information it receives. It must keep its client's affairs confidential under the SRA's rules, uses the information under its own privacy notice and client-care terms, and keeps its own file for as long as its own rules require.

Each partner's advice is private to them and their own solicitor: their bookings, sessions, which solicitor advises them and the outcome. The other partner, and the other partner's solicitor, see at most whether that partner's advice step is complete. The final agreement includes each solicitor's signed certificate, so it shows who advised each of you.

A firm's access to a matter on our adviser site ends 90 days after both partners have recorded signing the agreement, unless it is changed after that.

Payment Processing

• Stripe: Secure payment processing, PCI DSS Level 1 compliant, end-to-end encryption. No card data is stored by us.

Technical Services

• Cloud Hosting: Secure data storage
• Email Services: Sending transactional emails
• Analytics Providers: Website performance monitoring (all analytics data is anonymised where possible)

Some providers, for example analytics and advertising services from Google and Microsoft, process data outside the UK and EU, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations.

Technical Safeguards

• TLS 1.3 encryption for data transmission
• AES-256 encryption for data at rest
• Each partner has their own login, with sign-in by a one-time code sent to their email address; there is no shared login
• A fresh sign-in check before the important steps, if you haven't signed in recently
• Two-step sign-in (an authenticator app) required for the panel solicitors' site
• No email contains a link that opens your agreement without signing in, and every view and download is logged
• Regular security updates and patches
• Intrusion detection and monitoring
• Automated backup systems in secure locations

Access Controls

• Role-based access and principle of least privilege
• Regular access reviews
• Employee security training
• Secure development practices and data breach response procedures

Compliance & Auditing

• Periodic security assessments, penetration testing, and vulnerability scanning
• Security incident logging and monitoring
• Compliance monitoring and third-party security audits where applicable

Data Protection

• Secure cloud infrastructure with geographically distributed backups
• Data loss prevention and secure data disposal procedures
• Privacy by design and data minimisation principles

Right of Access

Request a copy of all personal data we hold about you, including how we use it and who we share it with.

• Free of charge
• Response within 1 month
• Secure delivery method (identity verification may be required)

Right of Rectification

Ask us to correct any inaccurate or incomplete personal information.

• Immediate correction of records
• Notification to third parties where relevant

Right to Erasure

Request deletion of your personal data in certain circumstances.

• Subject to legal obligations (some data may be retained for legal, tax, or fraud prevention purposes)
• Secure data destruction
• Confirmation of deletion

Right to Restrict Processing

Request limitation on how we use your personal data in specific situations, such as verifying accuracy.

• Limited processing only
• Storage continues
• Notification to you when restriction lifted

Right to Data Portability

Receive your data in a structured, commonly used, machine-readable format.

• Transfer to another service provider
• No charge applied

Right to Object

Object to processing based on legitimate interests (e.g., analytics) or direct marketing.

• Marketing communications will stop immediately upon objection
• Processing review performed if based on legitimate interests

Essential Cookies (strictly necessary)

Purpose: Required for basic website functionality

• Session management
• Security features
• Form submission
• User preferences necessary for the site

Analytics Cookies

Purpose: Understand how visitors use our website

• Google Analytics
• Microsoft Clarity (session analytics)
• Google Ads & Microsoft Advertising / Bing UET (advertising measurement)
• Page view tracking
• User journey analysis
• Performance metrics

Marketing Cookies

Purpose: Deliver relevant advertisements and content

• Ad targeting, conversion tracking, retargeting campaigns, social media pixels

Preference Cookies

Purpose: Remember your choices and settings

• Language preferences, theme settings, cookie consent choices, form auto-fill