1. About this Cookie Policy

This policy explains cookies, local storage and the optional KSEP Analytics system used with this website. Read it with the Privacy Policy for the wider estate-planning service and your data-protection rights. Cookies are small browser records; similar storage technologies can also save or read information on a device. Calling something “cookieless” does not by itself take it outside privacy rules. King Street Estate Planning (KSEP) is the trading name used for this service. The legal operator and data controller is: King Street Estate Planners Ltd Company / LLP registration number: 169646516 167 London Road, Leicester, LE1 2EG Privacy enquiries and data-protection complaints: enquiries@kingstep.co.uk. Telephone: 0330 6518 818 VAT registration number: 5189419874

2. Your choices

You do not need to accept optional marketing or analytics to use an account or request an estate-planning service. Necessary service processing is separate. The actual controls, providers, browser-specific choices and storage duration for this website are set out below. Essential cookies required for security, authentication, account operation and requested website functions may operate where legally permitted without optional consent. Non-essential analytics, advertising or similar technologies must not be activated until the required consent has been obtained. Cookie choices must be capable of being accepted, refused and changed without making access to ordinary services conditional on accepting optional tracking. The website must provide an accessible Cookie Settings control through which a visitor can review or change their choices. Consent choices and their version/evidence are retained for an appropriate period and renewed where required by law, a material change in purpose/provider occurs, or the recorded consent is no longer reliable. The Cookie Policy identifies the currently approved providers, purposes and durations.

3. Technology categories

The audited technology register identifies necessary, analytics, functional and marketing technologies actually used. A category name does not make a technology necessary or establish permission to use it. Installing the legal-page renderer does not install a cookie banner, tracker or advertising integration.

4. Configured technology register

This is the operator-reviewed register of actual cookies and similar technologies, including provider, purpose, category and browser duration. It is not an automatic scan of every plugin, embed or hosting feature. KSEP maintains an auditable technology register for every material third-party or internally operated service that processes personal data. For each technology the register records: service name; provider; business purpose; personal-data categories; data subjects affected; lawful basis where relevant; hosting/processing location; international-transfer mechanism where applicable; access permissions; retention or provider-storage duration; security and contractual safeguards; sub-processors where material; review date; owner; and current approval status. A technology that has not completed the required review must not be treated as approved for production personal-data processing.

5. What analytics observes

KSEP currently uses website analytics to understand website usage, page performance and technical behaviour. Analytics must be limited to information necessary for those purposes and must follow the applicable cookie/consent rules. Anonymous or aggregated website analytics must not automatically be converted into identifiable client-profile information. Where KSEP later links an analytics event to a registered account, the purpose, lawful basis, data fields, retention period and client transparency must be documented before that linkage is enabled. Marketing profiling must not be inferred from ordinary service or account activity without the appropriate lawful basis and, where required, consent. Account and document processing, server requests and security logs are separate from optional analytics. The Privacy Policy describes the wider processing.

6. Changing or withdrawing permission

Essential cookies required for security, authentication, account operation and requested website functions may operate where legally permitted without optional consent. Non-essential analytics, advertising or similar technologies must not be activated until the required consent has been obtained. Cookie choices must be capable of being accepted, refused and changed without making access to ordinary services conditional on accepting optional tracking. The website must provide an accessible Cookie Settings control through which a visitor can review or change their choices. Consent choices and their version/evidence are retained for an appropriate period and renewed where required by law, a material change in purpose/provider occurs, or the recorded consent is no longer reliable. The Cookie Policy identifies the currently approved providers, purposes and durations. Withdrawing optional permission does not by itself close your account or erase earlier lawful service records. Browser settings can remove or block storage; blocking necessary storage may affect requested account functions. Save any unsaved work before changing controls which reload a page. A legal notice does not gate third-party scripts. The operator must audit and configure the tools, including scripts, embeds and tag managers outside the KSEP plugin.

7. Server-side retention and security

Analytics, security and server records are retained only for the operational period required for measurement, troubleshooting, fraud prevention, security monitoring and evidential purposes. KSEP does not treat technical logs as permanent client records. Identifiable technical information should be minimised, access restricted and deleted or anonymised when it is no longer required. Different records may have different retention periods according to purpose. The approved technology and retention registers must record the current period for each analytics, security, mail and server-log source. Changing a provider or retention setting requires the register and relevant privacy information to be reviewed. Hosting security, necessary account operations, backups and their retention arrangements are disclosed separately in the Privacy Policy.

8. Policy changes and questions

Review the policy when technologies, suppliers or purposes change. A revised page does not itself collect a fresh cookie choice or retrospectively authorise a new use of data. Any required new choice must be handled by the actual consent system. For questions or a data-protection complaint, contact enquiries@kingstep.co.uk. See the Privacy Policy for your rights and the complaints route.