Legal

How this website uses your information

What this website’s forms, bookings and sign-up do with what you give them, and what your browser keeps. The firm’s privacy notice covers everything else.

LegalLast updated 8 October 2026

In short

This website sets no cookies, and uses no outside analytics or advertising service.
What you send through a form goes to Aaron by email. Aaron keeps a copy of every plan the website emails to you.
Apart from call bookings and a few cases set out below, the website keeps no copy of what you send. If a message cannot be delivered, a copy is kept for 90 days. Call bookings are deleted 90 days after the call.
You join a mailing list only if you tick the box, and you stay on it until you unsubscribe. Every email from the lists has a link to unsubscribe.
Your browser keeps a few things on your device, such as your text size and an unfinished questionnaire. Most go when you close the tab.
Nothing about you is decided automatically.
Who is responsible for your information, and your rights, are set out in the firm’s privacy notice.

This page and the firm’s notice

Safe Harbour Legal is a trading name of MDLS Solicitors Limited. The firm’s privacy notice is at legalstudio.co.uk/privacy-policy (Legal Studio's website). It applies to this website and to the Safe Harbour Legal trading name.

For who is responsible for your information, the legal reasons for using it and your rights, the firm’s notice applies. This page describes what this website itself does.

Questions about something you sent through this website go to Aaron at aaron@safeharbour.legal. Requests about your rights go to the firm’s Data Protection Officer, Matthew Dowell, at matt.dowell@legalstudio.co.uk.

Services that handle your information

Resend

What it does: Sends every email this website sends, to you and to Aaron.
Where: United States
Safeguard: Standard Contractual Clauses with the UK Addendum, in Resend’s data processing agreement
How long: A copy of each email, with its delivery record. Resend’s documentation says it keeps email data for 30 days on its standard plans.

Netlify

What it does: Hosts the website. Holds call bookings, copies of messages that could not be delivered, and the website’s counts. Keeps logs.
Where: United States
Safeguard: The UK Extension to the EU-US Data Privacy Framework, or Standard Contractual Clauses with the UK Addendum, in Netlify’s data processing agreement
How long: Bookings: 90 days after the call.Copies of undelivered messages: 90 days.Counts: see How plans are counted.Logs: Netlify’s documentation says the website’s function logs cover up to 7 days, depending on the plan. Netlify’s own system logs, which can record your IP address, are kept online for 90 days and offline for a year, as its data processing agreement describes.

MailerLite

What it does: Holds the mailing lists.
Where: European Union
Safeguard: The UK treats the EU as giving adequate protection
How long: Until you unsubscribe. Every email from the lists has a link to unsubscribe. See Mailing lists.

Microsoft 365

What it does: Holds Aaron’s two mailboxes, his Legal Studio mailbox and aaron@safeharbour.legal, where your messages arrive. Both are in the firm’s Microsoft 365.
Where: Europe, in Microsoft’s European region
Safeguard: Microsoft’s data protection terms
How long: As the firm’s notice sets out

How your messages reach Aaron

Every form on this website sends an email to Aaron through Resend. Most messages go to two mailboxes, so they still arrive if one fails:

Aaron’s Legal Studio mailbox;
aaron@safeharbour.legal, his Safe Harbour Legal mailbox.

Both mailboxes are in the firm’s Microsoft 365.

Aaron’s email shows what you typed, your contact details and the page you sent it from. It also records the wording of any box you ticked, and when. If Aaron replies, his reply goes to your email address. Once your message reaches Aaron, the firm keeps and uses it as its notice describes.

How enquiries are sorted for Aaron

The website marks each enquiry high, medium or low, mostly by which form it came from and, for a written message, by what you wrote. Questionnaires are also flagged for points to look at first. Examples are urgency, mental capacity, a vulnerable beneficiary or a possible dispute.

These marks appear only in Aaron’s email. You never see them. A flag only prompts Aaron to look more closely. Nothing is decided automatically.

Protection against spam

Hidden field. Each form has a field that people never see. Automated spam programs fill it in, and their messages go nowhere. Nothing from this check is stored.
Sending limit. To stop floods of messages, the website briefly holds your IP address in memory. It is never saved anywhere.
Duplicate check. To stop a message being sent twice, the website keeps a one-way code made from it. This code does not hold your details in readable form. It is deleted after 10 minutes.

If a message cannot be delivered

Sometimes a message cannot be sent in the normal way. These are the cases:

the email to Aaron fails;
the email carrying your plan to you fails;
a call back, message, guide request, plan or questionnaire is sent too many times too quickly;
adding you to a mailing list fails;
saving a call booking fails.

In these cases the website keeps a copy, so your enquiry is not lost. The copy can include full questionnaire answers or the whole plan email. For files, it keeps only each file’s name, size and type. Netlify holds the copy. It is deleted after 90 days.

If the website cannot save that copy, it writes it to the website’s function log instead. See Netlify under Services that handle your information for how long logs are kept.

Call me back

Call back requests can be made on the contact page, a Plan Finder result or the assistant.

What is collected: your name, phone number, the best time to call and the box you ticked. It may also include the topic, the page and your plan. If you already gave your email address on the page, that is included too.
Why: so Aaron can ring you back.
Where it goes: an email to Aaron, as described above. If you gave an email address, you get a short acknowledgement. It does not repeat what you typed.
How long it is kept: the website keeps no copy, except in the cases under If a message cannot be delivered.

Write to Aaron

What is collected: your name, a phone number or email address, a topic, your message and the box you ticked. If you came from a plan or a service page, that is included too.
Why: so Aaron can reply to you.
Where it goes: an email to Aaron. If you gave an email address, you get a short acknowledgement. It does not repeat what you typed.
How long it is kept: the website keeps no copy, except in the cases under If a message cannot be delivered. If you write after choosing one of Legal Studio’s other services on the Other help through the same regulated firm page, your name and any email address you gave are also written to the website’s function log (see Netlify, above).

Guides by email

What is collected: your full name, email address, which guide you asked for and the page you were on. There is an optional box for updates.
Why: to send you the guide.
Where it goes: you get an email with a link to the guide. Aaron gets a copy of your request. If you tick the box, you join a mailing list (see Mailing lists).
How long it is kept: the website keeps no copy, except in the cases under If a message cannot be delivered.

Plan Finder

Email me this plan

What is collected: your email address, and your phone number if you give it. It also includes the plan itself. There are two optional boxes: one for updates and one for a single follow-up.
Why: to send you the plan. Aaron keeps a copy of every plan the website emails.
The follow-up box: if you tick it, Aaron may contact you once about this plan, by email, or by phone if you gave a number.
Where it goes: you get the plan by email. Aaron always gets a copy as well, whether or not you tick a box. His copy shows your email address, any phone number and the whole plan. Nothing else is sent unless you tick a box. If you tick the updates box, you join a mailing list (see Mailing lists).
How long it is kept: the website keeps no copy, except in the cases under If a message cannot be delivered. Aaron’s copy is kept as the firm’s notice describes.

How plans are counted

When a plan is shown, your browser tells the website once in that tab. The website records:

the time;
the plan and its fee;
whether it is for you, a couple, a trust or an estate;
any offer code;
the name of the website that linked you here, if any.

It records no IP address, cookie or other detail about you. If your browser has Do Not Track switched on, it does not send this.

When you act on a plan, the website also counts that, as a number only: the plan emailed, a call back asked for, a message written, a call booked or a questionnaire sent from the plan. Every enquiry is also counted, as a number only, by the form it came from. These numbers do not depend on Do Not Track.

These counts are held by Netlify. They are not deleted automatically at present.

Aaron’s morning summary

Each morning Aaron gets an email with the previous day’s counts. It never includes a name or a message.

The summary also counts security reports. Your browser may report content that the website’s security rules blocked. The website keeps only the rule, the blocked site and the page address. It keeps no IP address and no browser details. These counts are not deleted automatically at present.

Online questionnaires

What is collected: your answers, your contact details and any files you add. The lasting power of attorney and trusts questionnaires ask about health, because the advice depends on it. The wills questionnaire asks for your children’s names and dates of birth, because the will needs them. You tick a box agreeing to your answers being used to prepare and advise on your matter.
Your draft: your answers are saved in this browser tab as you go, with the furthest step you reached. They are deleted when you close the tab. The consent boxes you tick are never saved.
Files: you can add up to 10 files, 4 MB in total and 3 MB each. Accepted types are PDF, JPEG, PNG, HEIC and Word. Each file is checked to make sure it is the type it claims to be.
Why: so Aaron has what he needs to help you.
Where it goes: Aaron gets one email with your answers and your files. A PDF and a data copy of your answers are attached. You get a confirmation with a reference. It does not repeat your answers.
How long it is kept: your files are emailed, not stored on the website. The website keeps no copy of your answers, except in the cases under If a message cannot be delivered.

If you do not finish

This applies only if you tick the box asking Aaron to follow up.

Your browser then holds your name, email address, phone number, the matter and how far you got. It also holds the wording of the box and when you ticked it. This stays in the tab.

If you leave the page or switch tabs, this is sent to Aaron by email. It is sent once only. Without that box ticked, nothing is sent until you press send.

Booking a call

What is collected: your name, phone number and, if you give it, your email address. It also includes phone or video, any notes and your plan, if you have one. The website records the boxes you ticked and when. It also keeps a one-way code made from your IP address. Each change to the booking is recorded, such as confirmed or moved.
Why: to arrange your call and remind you of it. The code made from your IP address is kept only to deal with misuse of the booking page.
Where it goes: the booking is stored by Netlify. Emails go through Resend: request received, confirmation, any change, and reminders. Your emails contain private links to cancel or move the call. If you gave no email address, Aaron gets a reminder to text you instead.
Calendar links: the confirmation offers links to add the call to Google Calendar or Outlook. If you click one, the link passes the call time and, for a phone call, your phone number to Google or Microsoft. Nothing is passed unless you click.
Your choice: if you tick the marketing box, you join a mailing list (see Mailing lists).
How long it is kept: 90 days after the date of the call. It is then deleted automatically.

The assistant

Nothing happens until you tap the assistant. When you open it, the website fetches whether Aaron is taking calls and his current prices. Nothing about you is read or kept for this, apart from the sending limit above.

The assistant does not use AI and has no box for typing. Your choices stay in the page’s memory. They are never saved or sent, except that choosing “Someone has died” sets the bereavement mark described below. Its “Call me back” option is the same form described above.

Offer sign-up

When you see it: it never appears on probate pages, guides, legal pages, questionnaires or booking pages. It does not appear once the bereavement mark is set (see Things that stay on your device).
What is collected: your first name, email address, the boxes you tick and the page you were on.
Why: to send you the offer code.
Where it goes: you get the code by email, whether or not you tick the marketing box. Aaron gets an email with your first name, email address, the page and the time. It also shows the box wording, whether your code was sent and whether you joined the list. Aaron’s email goes to aaron@safeharbour.legal only. If you tick the marketing box, you join a mailing list (see Mailing lists).
On your device: your browser remembers whether you closed the sign-up or completed it. See the table below.
How long it is kept: the website keeps no copy, except in the cases under If a message cannot be delivered.

Mailing lists

You join a mailing list only if you tick the box. The lists are held by MailerLite, in the European Union.

Where you tick	List	When you join
Guides by email	Checklist Downloads	Straight away
Email me this plan	Website Leads	Straight away
Booking a call	Website Leads	Straight away
Offer sign-up	Newsletter	Only once you confirm your email address. Until then nothing is sent to you from the list.

MailerLite receives your email address and first name. It also receives where you signed up, the wording of the box and when you ticked it.

You stay on a list, with the record of the box you ticked, until you unsubscribe. Every email from these lists has a link to unsubscribe. You can also ask Aaron to remove you at any time, by emailing aaron@safeharbour.legal.

Things that stay on your device

Larger text and higher contrast. Your choice is saved in your browser so it applies on every page.
Email typo hint. If your email address looks mistyped, the form suggests a correction. This check runs in your browser. Nothing is sent.
Filled in from earlier. If you give your name, email address or phone number in one form, the next form you open in the same tab starts with them filled in, with a note to check them and a Clear button. Your browser also notes the page you typed each one on, so they are not filled back into that page. Only your own details are kept, never a tick box and never anyone else’s details. They stay in this tab only and are deleted when you close it. Clear deletes them straight away. They leave your device only in a form you choose to send.
Bereavement mark. This is set if you choose “Someone has died”, plan for an estate or visit a probate page. Offers are then hidden for the rest of your visit. The mark is never sent.
Offer codes. If you copy, follow, apply or sign up for an offer code, your browser remembers it. It is removed once the code is no longer valid. A code you apply becomes part of your plan’s link, so it is counted with the plan.

What your browser stores

“Until you clear it” means until you clear this website’s data in your browser. “Until you close the tab” means the item is deleted when you close that tab.

What your browser keeps	How long	Sent anywhere?
`sh-text`Your text size choice	Until you clear it	No
`sh-contrast`Your contrast choice	Until you clear it	No
`sh-promo`An offer code you copied, followed, applied or signed up for	Until you clear it, or until the code ends	No
`sh-promo-dismissed:<code>`That you closed the offer strip for that code	Until you clear it	No
`sh-signup-dismissed`When you closed the offer sign-up, on an earlier version of this website. It is no longer used.	Deleted the next time the offer sign-up runs in your browser	No
`sh-signup-done`That you completed the offer sign-up	Until you clear it	No
`sh-signup-not-now`That you closed the offer sign-up, so it stays folded away in the corner and does not open by itself	Until you close the tab	No
`shl-carried-contact`Your own name, email address and phone number, as you typed them in a form, and the page you typed each one on. The next form you open in this tab starts filled in, except on that page. Never a tick box, and never anyone else’s details.	Until you close the tab, or until you press Clear beside the filled-in boxes	Only your details, and only in a form you choose to send
`shl-draft-<type>`Your questionnaire answers so far, without the consent boxes	Until you close the tab	No
`shl-started-<type>`Your name, email, phone, the matter, your plan, and the follow-up box wording and time	Until you close the tab	Yes, to Aaron if you leave the page or switch tabs (see If you do not finish)
`shl-step-<type>`The furthest step you reached	Until you close the tab	Only with the item above
`shl-started-sent-<type>`That the follow-up, or the questionnaire itself, has been sent	Until you close the tab	No
`pf-viewed:<plan>`That a plan view has been counted	Until you close the tab	No
`sh-bereaved`The bereavement mark	Until you close the tab	No

The shl-started-<type> item is created only if you tick the follow-up box. shl-step-<type> is kept for every questionnaire in the tab, but it is sent only together with shl-started-<type>.

Cookies

This website sets no cookies. Automated tests check every page template for cookies.

The SRA badge comes from another website, yoshki.com. It set no cookies in testing. The website cannot control it.

Links to other sites

WhatsApp. The contact page and Plan Finder results offer WhatsApp. Nothing is sent to WhatsApp until you click. On a computer, the QR code is made by your own browser. From the contact page, the ready-made message names only your topic. From a plan, it includes your plan’s link. That link contains your Plan Finder answers. Once you open WhatsApp, its own terms apply.
LawConnect. The client portal button is a plain link to LawConnect, the portal the firm uses during a matter. Nothing is sent to LawConnect until you click.
SRA badge. The badge loads from yoshki.com once the page has finished loading and the badge is close to the part of the page on screen. On some pages, such as the home page on a computer and the About page, that happens straight away. You do not need to click. The badge then loads a file from Google, at ajax.googleapis.com. So your browser contacts both yoshki.com and Google. The badge is told only this website’s address, not the page you are on.
Other links. Links to Google Maps, Google reviews and social media are plain links. Nothing is sent until you click.

Ends