Legal

Privacy Policy

This policy explains what personal information Legacy Secured Exit collects, why, how it is used, and the rights you have under UK data-protection law. It is written in plain English.

Last updated: 27 August 2026

On this page
  1. 1Who we are
  2. 2Scope of this policy
  3. 3Information we collect
  4. 4Purposes and lawful bases
  5. 5Assessment privacy
  6. 6Contact form and confidentiality
  7. 7Direct marketing
  8. 8Cookies, local storage and similar technologies
  9. 9Service providers and data sharing
  10. 10International transfers
  11. 11Retention
  12. 12Security
  13. 13Your UK data-protection rights
  14. 14Automated decision-making
  15. 15Children
  16. 16Changes to this policy

Who we are

Legacy Secured Exit (legacysecuredexit.com) is a brand and platform operated by THINKERZ LTD, a private limited company registered in Scotland under company number SC778478. THINKERZ LTD is the operator of this website and the data controller responsible for personal data processed through it.

"Thinkerz Publishing" is the publishing imprint/brand used for the Legacy Secured Exit book; it is not a separate legal entity.

Registered office: Clyde Offices, 2nd Floor, 48 West George Street, Glasgow, G2 1BP, Scotland.

You can contact us about this policy or your personal data through our contact form.

Scope of this policy

This policy applies to the Legacy Secured Exit website at legacysecuredexit.com, including its interactive assessments and calculators (the Exit Readiness Assessment, Freedom Number Calculator and Owner Reliance Audit), downloadable resources (worksheets, checklists and printable reports), and communications sent through the website contact form.

It does not apply to other websites or services we link to (for example ValuBase or ValuBridge), which have their own privacy notices and are responsible for your information once you leave this site. It also does not apply to any separate advisory or consulting engagement, which would be governed by its own engagement terms.

Information we collect

Information you provide

When you choose to contact us through the website form, you may provide:

  • your name;
  • your email address;
  • (optionally) your company or business name;
  • (optionally) a short description of where you are in your thinking; and
  • your message.

We also retain any correspondence that follows from your enquiry, such as replies you send us.

Tool and assessment information

The interactive tools — the Exit Readiness Assessment, Freedom Number Calculator and Owner Reliance Audit — are designed to run entirely in your browser. Your responses are held only in your browser's memory for the duration of your visit and are used to generate your results on your device. They are not transmitted to our servers or backend, and are not retained after you close or refresh the page. Any report you print or save is produced by your own browser and remains on your device.

No account is needed to use the tools, and your answers are not stored in any user profile held by us.

Technical and security information

When you visit the site, the hosting platform and its infrastructure automatically generate standard technical information, including:

  • IP address;
  • browser type and device information;
  • the date and time of requests;
  • the URLs requested and referring pages; and
  • similar server, application and security log information.

This is generated as part of operating, securing and maintaining the website. We do not use it to build an individual profile of you for advertising.

Usage and statistical information

We do not operate third-party web-analytics, advertising pixels or cross-site tracking on this site. The hosting platform may produce aggregate, operational telemetry as part of providing and securing the service, but we do not run individual-level analytics on visitors.

Purposes and lawful bases

We use personal information only for the purposes set out below, on the lawful bases indicated:

PurposeInformation usedLawful basis
Delivering and securing the websiteTechnical and security informationLegitimate interests — operating and securing the site
Responding to your enquiry and corresponding with youInformation you provide via the contact form, and subsequent correspondenceLegitimate interests — taking steps at your request, and responding to your enquiry
Keeping reasonable records of enquiries and responsesContact information and correspondenceLegitimate interests — maintaining ordinary business correspondence records
Protecting the site against misuse, abuse and security incidentsTechnical and security informationLegitimate interests — network, information and system security; preventing fraud and abuse
Meeting legal obligationsRelevant records where requiredLegal obligation

The interactive tool answers are processed locally in your browser and are not personal data we process, so no lawful basis is needed for them.

Where we rely on legitimate interests, those interests are: operating and securing the website; responding to enquiries from people who contact us; preventing fraud, abuse and security incidents; and keeping reasonable business correspondence records. We have balanced these interests against your rights and would not process your data where that balance fell against you.

Assessment privacy

The trust proposition of Legacy Secured Exit depends on the tools being genuinely private. After audit of the live implementation:

  • no account is required;
  • assessment answers are processed locally in your browser;
  • your business-readiness answers are not stored in a user profile held by us;
  • no assessment result is sold or used for advertising; and
  • printing or saving a report uses your own browser and device.

Please do not enter confidential transaction data, commercially sensitive documents, personal financial details or special-category personal data into the free-text or contact fields. The tools are designed for your own self-assessment, not for sending us sensitive material.

Contact form and confidentiality

The contact form is intended to begin a confidential conversation, not to function as a secure deal room or document-exchange system. Information you submit is used to respond to your enquiry and to maintain reasonable business correspondence records.

Please do not send highly confidential transaction documents, personal financial records or special-category personal data through the ordinary contact form unless we have arranged a suitable secure method with you.

Submitting the form does not automatically subscribe you to any marketing. Correspondence takes place over standard communications channels, so we do not promise absolute confidentiality or end-to-end encryption — please use the notice above when sharing sensitive material.

Direct marketing

Contacting us or completing a tool does not automatically opt you into marketing. There is no newsletter or marketing system operating on this site at present, and we do not pass your details to third parties for marketing.

If we add direct marketing in the future, we will obtain your permission or another valid lawful basis before sending it, provide a clear way to unsubscribe or object, and update this policy.

Cookies, local storage and similar technologies

The site uses the following browser technologies:

  • Strictly necessary / app functionality: the platform uses your browser's local storage to remember essential application parameters (for example, where a logged-in session applies). This is needed for the site to function and is not used to track you.
  • Assessment and tool state: held only in your browser's memory while you use a tool, and not written to persistent storage or sent anywhere.
  • Security / infrastructure: standard hosting and security mechanisms may use strictly-necessary storage or cookies to protect the site. We do not set advertising or tracking cookies.

We do not rely on third-party analytics or advertising cookies, so no cookie-consent banner is shown. You can clear or block storage through your browser settings at any time; doing so may affect site functionality that depends on it.

Service providers and data sharing

We do not sell personal data to advertisers or data brokers. The categories of third parties with whom personal data may be shared are:

  • Hosting and application platform: Base44, which hosts the website, runs the application and stores contact-form records as our processor.
  • Public file and media delivery: media.base44.com (and the wider Wix static infrastructure) serve the site's PDFs, worksheets and images as public static files.
  • Professional and legal advisers: where needed to advise us, under duties of confidentiality.
  • Public authorities: where we are legally required to disclose information.

External tools such as ValuBase and ValuBridge are separate services; we link to them for convenience but your use of them is governed by their own terms and privacy notices.

International transfers

The website is hosted by Base44, whose infrastructure may process personal data in countries outside the United Kingdom. Where your personal data is transferred outside the UK, this is done under appropriate safeguards recognised by UK data-protection law — for example the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses — or under the UK adequacy regulations where they apply to the destination country.

You can contact us through the contact form for more information about the safeguards used for international transfers and to request a copy where available.

Retention

We keep personal information only as long as needed for the purposes set out above, subject to legal and reasonable business record-keeping requirements:

  • Contact enquiries and correspondence are retained for as long as is needed to respond and to keep reasonable business records, then deleted or anonymised.
  • Technical and security logs are retained as needed to operate, secure and administer the site and to investigate incidents.
  • Assessment answers are not retained by us at all — they exist only in your browser session.
  • Legal and business records are kept where we have a legal or legitimate need to do so.

Where exact periods cannot sensibly be stated, retention is governed by these criteria rather than a fixed date. Information will not be kept longer than is necessary.

Security

We take reasonable technical and organisational measures to protect personal information, including access controls within the hosting platform. No method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security or confidentiality. We do not describe our measures as "bank-grade" or claim zero breach risk, because we have not verified either.

Your UK data-protection rights

Under UK data-protection law you have the right to:

  • be informed about how we use your information (this policy);
  • access a copy of your personal data;
  • have inaccurate data corrected;
  • have personal data erased, subject to exemptions;
  • restrict processing;
  • object to processing carried out under legitimate interests;
  • receive your data in a portable format where this applies; and
  • withdraw consent, where processing is based on consent.

To exercise any right, contact us through the contact form. We may need to verify your identity. A request will not always result in deletion where a lawful exemption or retention requirement applies.

If you are unhappy with how we handle your data, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

Automated decision-making

The site's readiness scores and calculator outputs are informational tool outputs. They do not constitute legally binding decisions about you. No solely automated decision with legal or similarly significant effects is made about you through this website, and no personal profile is created for sale or advertising.

Children

Legacy Secured Exit is intended for business owners, professionals and adults. It is not directed at children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

Changes to this policy

We may update this policy where our services, the law, or our processors change. The date at the top of this page shows when it was last updated. Continued use of the site after changes indicates acceptance of the updated policy.

Legacy Secured Exit is operated by THINKERZ LTD (company no. SC778478), registered in Scotland. Back to top