Legal
Privacy Policy
This policy explains what personal information Legacy Secured Exit collects, why, how it is used, and the rights you have under UK data-protection law. It is written in plain English.
Last updated: 27 August 2026
On this page
- 1Who we are
- 2Scope of this policy
- 3Information we collect
- 4Purposes and lawful bases
- 5Assessment privacy
- 6Contact form and confidentiality
- 7Direct marketing
- 8Cookies, local storage and similar technologies
- 9Service providers and data sharing
- 10International transfers
- 11Retention
- 12Security
- 13Your UK data-protection rights
- 14Automated decision-making
- 15Children
- 16Changes to this policy
Who we are
Legacy Secured Exit (legacysecuredexit.com) is a brand and platform operated by THINKERZ LTD, a private limited company registered in Scotland under company number SC778478. THINKERZ LTD is the operator of this website and the data controller responsible for personal data processed through it.
"Thinkerz Publishing" is the publishing imprint/brand used for the Legacy Secured Exit book; it is not a separate legal entity.
Registered office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP, Scotland.
You can contact us about this policy or your personal data through our contact form.
Scope of this policy
This policy applies to the Legacy Secured Exit website at legacysecuredexit.com, including its interactive assessments and calculators (the Exit Readiness Assessment, Freedom Number Calculator and Owner Reliance Audit), downloadable resources (worksheets, checklists and printable reports), and communications sent through the website contact form.
It does not apply to other websites or services we link to (for example ValuBase or ValuBridge), which have their own privacy notices and are responsible for your information once you leave this site. It also does not apply to any separate advisory or consulting engagement, which would be governed by its own engagement terms.
Information we collect
Information you provide
When you choose to contact us through the website form, you may provide:
- your name;
- your email address;
- (optionally) your company or business name;
- (optionally) a short description of where you are in your thinking; and
- your message.
We also retain any correspondence that follows from your enquiry, such as replies you send us.
Tool and assessment information
The interactive tools — the Exit Readiness Assessment, Freedom Number Calculator and Owner Reliance Audit — are designed to run entirely in your browser. Your responses are held only in your browser's memory for the duration of your visit and are used to generate your results on your device. They are not transmitted to our servers or backend, and are not retained after you close or refresh the page. Any report you print or save is produced by your own browser and remains on your device.
No account is needed to use the tools, and your answers are not stored in any user profile held by us.
Technical and security information
When you visit the site, the hosting platform and its infrastructure automatically generate standard technical information, including:
- IP address;
- browser type and device information;
- the date and time of requests;
- the URLs requested and referring pages; and
- similar server, application and security log information.
This is generated as part of operating, securing and maintaining the website. We do not use it to build an individual profile of you for advertising.
Usage and statistical information
We do not operate third-party web-analytics, advertising pixels or cross-site tracking on this site. The hosting platform may produce aggregate, operational telemetry as part of providing and securing the service, but we do not run individual-level analytics on visitors.
Purposes and lawful bases
We use personal information only for the purposes set out below, on the lawful bases indicated:
| Purpose | Information used | Lawful basis |
|---|---|---|
| Delivering and securing the website | Technical and security information | Legitimate interests — operating and securing the site |
| Responding to your enquiry and corresponding with you | Information you provide via the contact form, and subsequent correspondence | Legitimate interests — taking steps at your request, and responding to your enquiry |
| Keeping reasonable records of enquiries and responses | Contact information and correspondence | Legitimate interests — maintaining ordinary business correspondence records |
| Protecting the site against misuse, abuse and security incidents | Technical and security information | Legitimate interests — network, information and system security; preventing fraud and abuse |
| Meeting legal obligations | Relevant records where required | Legal obligation |
The interactive tool answers are processed locally in your browser and are not personal data we process, so no lawful basis is needed for them.
Where we rely on legitimate interests, those interests are: operating and securing the website; responding to enquiries from people who contact us; preventing fraud, abuse and security incidents; and keeping reasonable business correspondence records. We have balanced these interests against your rights and would not process your data where that balance fell against you.
Assessment privacy
The trust proposition of Legacy Secured Exit depends on the tools being genuinely private. After audit of the live implementation:
- no account is required;
- assessment answers are processed locally in your browser;
- your business-readiness answers are not stored in a user profile held by us;
- no assessment result is sold or used for advertising; and
- printing or saving a report uses your own browser and device.
Please do not enter confidential transaction data, commercially sensitive documents, personal financial details or special-category personal data into the free-text or contact fields. The tools are designed for your own self-assessment, not for sending us sensitive material.
Contact form and confidentiality
The contact form is intended to begin a confidential conversation, not to function as a secure deal room or document-exchange system. Information you submit is used to respond to your enquiry and to maintain reasonable business correspondence records.
Please do not send highly confidential transaction documents, personal financial records or special-category personal data through the ordinary contact form unless we have arranged a suitable secure method with you.
Submitting the form does not automatically subscribe you to any marketing. Correspondence takes place over standard communications channels, so we do not promise absolute confidentiality or end-to-end encryption — please use the notice above when sharing sensitive material.
Direct marketing
Contacting us or completing a tool does not automatically opt you into marketing. There is no newsletter or marketing system operating on this site at present, and we do not pass your details to third parties for marketing.
If we add direct marketing in the future, we will obtain your permission or another valid lawful basis before sending it, provide a clear way to unsubscribe or object, and update this policy.
Service providers and data sharing
We do not sell personal data to advertisers or data brokers. The categories of third parties with whom personal data may be shared are:
- Hosting and application platform: Base44, which hosts the website, runs the application and stores contact-form records as our processor.
- Public file and media delivery: media.base44.com (and the wider Wix static infrastructure) serve the site's PDFs, worksheets and images as public static files.
- Professional and legal advisers: where needed to advise us, under duties of confidentiality.
- Public authorities: where we are legally required to disclose information.
External tools such as ValuBase and ValuBridge are separate services; we link to them for convenience but your use of them is governed by their own terms and privacy notices.
International transfers
The website is hosted by Base44, whose infrastructure may process personal data in countries outside the United Kingdom. Where your personal data is transferred outside the UK, this is done under appropriate safeguards recognised by UK data-protection law — for example the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses — or under the UK adequacy regulations where they apply to the destination country.
You can contact us through the contact form for more information about the safeguards used for international transfers and to request a copy where available.
Retention
We keep personal information only as long as needed for the purposes set out above, subject to legal and reasonable business record-keeping requirements:
- Contact enquiries and correspondence are retained for as long as is needed to respond and to keep reasonable business records, then deleted or anonymised.
- Technical and security logs are retained as needed to operate, secure and administer the site and to investigate incidents.
- Assessment answers are not retained by us at all — they exist only in your browser session.
- Legal and business records are kept where we have a legal or legitimate need to do so.
Where exact periods cannot sensibly be stated, retention is governed by these criteria rather than a fixed date. Information will not be kept longer than is necessary.
Security
We take reasonable technical and organisational measures to protect personal information, including access controls within the hosting platform. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security or confidentiality. We do not describe our measures as "bank-grade" or claim zero breach risk, because we have not verified either.
Your UK data-protection rights
Under UK data-protection law you have the right to:
- be informed about how we use your information (this policy);
- access a copy of your personal data;
- have inaccurate data corrected;
- have personal data erased, subject to exemptions;
- restrict processing;
- object to processing carried out under legitimate interests;
- receive your data in a portable format where this applies; and
- withdraw consent, where processing is based on consent.
To exercise any right, contact us through the contact form. We may need to verify your identity. A request will not always result in deletion where a lawful exemption or retention requirement applies.
If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
Automated decision-making
The site's readiness scores and calculator outputs are informational tool outputs. They do not constitute legally binding decisions about you. No solely automated decision with legal or similarly significant effects is made about you through this website, and no personal profile is created for sale or advertising.
Children
Legacy Secured Exit is intended for business owners, professionals and adults. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
Changes to this policy
We may update this policy where our services, the law, or our processors change. The date at the top of this page shows when it was last updated. Continued use of the site after changes indicates acceptance of the updated policy.
Legacy Secured Exit is operated by THINKERZ LTD (company no. SC778478), registered in Scotland. Back to top
