Privacy Policy
Your privacy is our priority. Learn how we protect and handle your personal information.
1. Overview
What This Policy Covers
This Privacy Policy explains how UK Prenup ("we," "our," or "us") collects, uses, protects, and shares your personal information when you use our prenuptial agreement services. We are committed to protecting your privacy and complying with all applicable UK data protection laws, including the UK GDPR and the Data Protection Act 2018.
About UK Prenup
UK Prenup provides a prenuptial agreement service in England & Wales. We help couples document how their assets and debts will be divided before they marry, through our secure online platform, preparing professionally drafted prenuptial agreement documents. UK Prenup is not a law firm and does not provide legal advice; both parties should consider independent legal advice before signing.
Company Details
- Legal Entity / Data Controller: Custom Coded Websites Ltd
- Trading Name: UK Prenup
- Service: Prenuptial Agreement Services
- Website: ukprenup.com
- Email: mail@ukprenup.com
- Registered Office: Office 14883, 182-184 High Street North, East Ham, London, E6 2JA
- ICO Registration Number: ZC087180
Compliance Standards
- UK GDPR Compliant
- Data Protection Act 2018
We comply with the requirements of the UK GDPR and the Data Protection Act 2018. Payment processing is handled securely by our third-party payment providers who are PCI DSS compliant.
2. Information We Collect
We collect the following information to prepare prenuptial agreement documents, provide our services, and comply with legal requirements:
Personal Information
- Full name of each partner
- Date of birth
- Email address (to send documents and service communications)
- Home address (for document preparation and delivery, if selected)
- Phone number (optional, for contact if needed)
- Digital signature (used solely to generate the prenuptial agreement)
Both Partners' & Financial Data
When preparing a prenuptial agreement, we collect:
- Each partner's full name, date of birth, and address
- Financial disclosure details, including assets, debts, and income, that each partner chooses to include
- Witness details (if required) – you must ensure the witness has consented to their data being shared with us
- Details of any intended date of marriage or other supporting information, where applicable
Payment Information
- Billing address
- Transaction records
- Payment method type (e.g. credit/debit card, PayPal)
- Invoice information
Technical Information
- IP address and general location
- Browser type, device, and operating system
- Website usage and session data (e.g. pages visited, time spent)
- Cookies and user preferences (see our Cookies section for more detail)
3. Financial Disclosure Data
We take special care when handling the financial disclosure information that each partner shares as part of a prenuptial agreement. This section explains how we collect, use, and protect this data when providing our prenuptial agreement service.
What Data We Collect
- Each Partner's Information: Full name, date of birth, and address
- Financial Details: Assets, debts, income, and property each partner chooses to disclose
- Signatures: The signature of each partner
- Supporting Records: Documentation each partner provides to support their disclosure
- Witness Information: Details of witnesses (when required). You must ensure your chosen witness has consented to their details being provided to us.
Who Provides the Data
- Each partner provides their own information and the disclosure they choose to make.
- Both partners confirm and sign the agreement before marriage.
- Witnesses provide their own details when acting in that role.
- In some cases, information may also come via an independent legal adviser instructed by a partner.
Information You Provide About Your Partner
Because the agreement covers both partners, the person completing the form may enter their partner's details — including their name, date of birth, address, email, occupation, income, and the assets and debts attributed to them. Where you provide information about your partner:
- We process it to create the prenuptial agreement you have both decided to enter into (performance of a contract and our legitimate interest in providing the service).
- By submitting it, you confirm that your partner is aware you are creating the agreement and agrees to their details being used for it.
- The completed agreement contains both partners' details and is provided to both of you (including by email, where an address is given) so each partner has a copy to review and sign.
- Your partner is a data subject in their own right and may contact us at any time to access, correct, or request erasure of their information, or to object to its processing.
Legal Basis for Processing
- Performance of a Contract – to provide the prenuptial agreement service you request
- Legal Obligation – to comply with applicable record-keeping laws
- Consent – clear consent from each partner to process their financial disclosure information
How We Use Financial Disclosure Data
- To prepare prenuptial agreement documents for both partners
- To reflect each partner's disclosure accurately in the agreement
- To confirm each partner's identity and eligibility
- To communicate with both partners about the service
- To maintain legal and administrative records
Safeguards
- Financial disclosure data is encrypted in transit and at rest
- Access is restricted to designated staff only
- Data is not used for marketing or profiling purposes
- Financial disclosure data is securely deleted once no longer required
Data Retention
We retain prenuptial agreement records only for as long as necessary to provide the service and meet our legal obligations. Typically, this means up to 6 years after completion of the service, unless a longer period is legally required.
Your Rights
Each partner may exercise their data rights in relation to their own information, including the rights of access, rectification, erasure, restriction, and objection. Each partner retains direct control over their personal data.
4. How We Use Your Information
We use your personal information only for the purposes listed below, and always in accordance with applicable UK data protection laws:
Service Delivery (Legal Basis: Contract)
- Create and process your prenuptial agreement document
- Verify your identity and eligibility
- Process payments securely via our third-party payment provider
- Provide customer support related to the service
- Send service updates and confirmations
- Manage your account preferences
Legal Compliance (Legal Basis: Legal Obligation)
- Meet UK legal and regulatory requirements
- Prevent fraud and verify identity
- Maintain legally required records
- Respond to legal requests or lawful inquiries
- Ensure document authenticity and validity
Service Improvement (Legal Basis: Legitimate Interests / Contract)
- Analyse website usage patterns to enhance functionality
- Improve user experience and interface design
- Develop new features or services
- Monitor service quality and perform security assessments
Note: All analysis is conducted on anonymised or aggregated data wherever possible.
Communications
- Order confirmations, service updates, and important announcements
- Customer service communications related to your requests
- Marketing emails and satisfaction surveys, only where you have provided explicit consent
You may unsubscribe from marketing communications at any time.
5. Legal Basis for Processing
Under UK GDPR, we must have a legal basis for processing your personal data. Here are the legal bases we rely on:
| Processing Purpose | Legal Basis | GDPR Article | Details |
|---|---|---|---|
| Prenuptial Agreement Creation | Contract Performance | Article 6(1)(b) | Necessary to prepare and deliver your prenuptial agreement documents |
| Identity Verification | Legal Obligation | Article 6(1)(c) | Required to verify identity and prevent fraud related to prenuptial agreement documents |
| Record Keeping | Legal Obligation | Article 6(1)(c) | Maintaining legally required records for prenuptial agreement authenticity and compliance |
| Marketing Communications | Consent | Article 6(1)(a) | Only with your explicit consent; you may withdraw consent at any time |
| Service Improvement | Legitimate Interest | Article 6(1)(f) | Anonymised/aggregated analytics to improve services and user experience |
| Security Monitoring | Legitimate Interest | Article 6(1)(f) | Protect systems, prevent fraud, and monitor service security |
6. Information Sharing
Our Privacy Commitment
We do not sell, rent, or trade your personal information to third parties for marketing purposes. We only share your information in the limited circumstances described below, and always with appropriate safeguards in place.
Trusted Service Partners
Payment Processing
- Stripe: Secure payment processing, PCI DSS Level 1 compliant, end-to-end encryption. No card data is stored by us.
Technical Services
- Cloud Hosting: Secure data storage
- Email Services: Sending transactional emails
- Analytics Providers: Website performance monitoring (all analytics data is anonymised where possible)
Some providers — for example analytics and advertising services from Google and Microsoft — process data outside the UK and EU, including in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or adequacy regulations.
Legal Requirements
We may disclose your information when required by law or to protect our legal rights, including:
- In response to valid court orders or legal processes
- To comply with regulatory investigations
- To prevent fraud or illegal activities
- To protect the safety of our users or the public
- To defend our legal rights and interests
Third-Party Safeguards
All service providers we work with are required to:
- Maintain appropriate security measures
- Use your data only for the specified purposes
- Comply with UK/EU data protection laws
- Sign comprehensive data processing agreements
Financial Disclosure Data
Financial disclosure data is only shared with trusted service providers necessary to deliver the prenuptial agreement service. It is never shared for marketing purposes or analytics beyond anonymised or aggregated reporting.
7. Data Security
We implement comprehensive security measures to protect your personal information from unlawful access, alteration, disclosure, or destruction.
Technical Safeguards
- TLS 1.3 encryption for data transmission
- AES-256 encryption for data at rest
- Multi-factor authentication for sensitive systems
- Regular security updates and patches
- Intrusion detection and monitoring
- Automated backup systems in secure locations
Access Controls
- Role-based access and principle of least privilege
- Regular access reviews
- Employee security training
- Secure development practices and data breach response procedures
Compliance & Auditing
- Periodic security assessments, penetration testing, and vulnerability scanning
- Security incident logging and monitoring
- Compliance monitoring and third-party security audits where applicable
Data Protection
- Secure cloud infrastructure with geographically distributed backups
- Data loss prevention and secure data disposal procedures
- Privacy by design and data minimisation principles
Financial Disclosure Data
Financial disclosure data shared by each partner is subject to the same technical and organisational safeguards as all other personal data.
Security Breach Notification
In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify affected users without undue delay, and in any case within 72 hours where required by UK GDPR. We will also notify the Information Commissioner's Office (ICO) as legally required.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy and to comply with legal obligations.
| Data Type | Retention Period | Reason for Retention |
|---|---|---|
| Prenuptial Agreement Records | 6 years after service completion | Legal requirement for document authenticity and potential future verification needs |
| Payment Records | 7 years | HMRC requirements for tax and accounting purposes |
| Account Information | 3 years after last login | To maintain account access and provide ongoing support |
| Website Analytics | 26 months | Standard Google Analytics retention for service improvement |
| Support Communications | 3 years | Quality assurance and training purposes |
| Marketing Consent | Until withdrawn | To honour your communication preferences and consent choices |
Automatic Deletion
We have automated systems in place to delete personal data once retention periods expire. You can also request early deletion by contacting us, subject to any legal obligations that may require longer retention.
9. Your Rights
Under UK GDPR, you have several important rights regarding your personal data. You can exercise these rights at any time by contacting us.
Right of Access
Request a copy of all personal data we hold about you, including how we use it and who we share it with.
- Free of charge
- Response within 1 month
- Secure delivery method (identity verification may be required)
Right of Rectification
Ask us to correct any inaccurate or incomplete personal information.
- Immediate correction of records
- Notification to third parties where relevant
Right to Erasure
Request deletion of your personal data in certain circumstances.
- Subject to legal obligations (some data may be retained for legal, tax, or fraud prevention purposes)
- Secure data destruction
- Confirmation of deletion
Right to Restrict Processing
Request limitation on how we use your personal data in specific situations, such as verifying accuracy.
- Limited processing only
- Storage continues
- Notification to you when restriction lifted
Right to Data Portability
Receive your data in a structured, commonly used, machine-readable format.
- Transfer to another service provider
- No charge applied
Right to Object
Object to processing based on legitimate interests (e.g., analytics) or direct marketing.
- Marketing communications will stop immediately upon objection
- Processing review performed if based on legitimate interests
Both Partners' Rights
- Each partner may exercise the rights above in relation to their own personal data
- Each partner retains direct control over the financial disclosure information they provide
How to Exercise Your Rights
To exercise any of these rights, contact us at mail@ukprenup.com or use our contact form. We will respond within one month.
Right to Complain
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK's data protection authority:
Information Commissioner's Office (ICO)
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF
Contact Our Privacy Team
Have questions about this privacy policy or how we handle your data? We're here to help!
mail@ukprenup.com
Registered Office
Custom Coded Websites Ltd
(trading as UK Prenup)
Office 14883
182-184 High Street North
East Ham, London
E6 2JA
Response Time
Within 24 hours
Data Subject Requests
Processed within 1 month