Privacy Policy#
Effective from: April 2026
1. Who We Are#
openinherit.org is operated by Testate Technologies Ltd (“TT”), the steward of the INHERIT open estate data standard.
Contact: hello@openinherit.org
ICO registration: ZC119967 (view on the ICO register ↗ )
2. What Data We Collect#
Contact Forms (Formspark)#
When you submit a contact form, we collect: name, email address, and your message. This is processed by Formspark ↗ and forwarded to hello@openinherit.org .
Newsletter (Buttondown)#
When you subscribe to the newsletter, we collect your email address. This is processed by Buttondown ↗ with GDPR double opt-in. You can unsubscribe at any time via the link in every email.
Analytics (Plausible)#
We use Plausible Analytics ↗ , a privacy-first analytics service. Plausible does not use cookies, does not collect personal data, and does not track individual visitors. All data is aggregated. Plausible is EU-owned and EU-hosted.
Email Forwarding (ImprovMX)#
Emails to hello@openinherit.org are forwarded by ImprovMX ↗ to our inbox. ImprovMX processes the email in transit but does not store it.
3. Legal Basis#
- Contact forms and newsletter: Consent (you choose to submit or subscribe).
- Analytics: Legitimate interest (understanding how the website is used to improve it). No personal data is collected.
4. Data Processors#
We have Data Processing Agreements in place with all processors listed below. For US-based processors, Standard Contractual Clauses or equivalent transfer safeguards are in place.
| Processor | Purpose | Location | Sub-processors |
|---|---|---|---|
| Formspark ↗ | Contact forms | EU | Formspark GDPR page ↗ |
| Buttondown ↗ | Newsletter | US | Buttondown DPA ↗ |
| Plausible ↗ | Analytics | EU | Plausible DPA ↗ |
| Resend ↗ | Transactional email | US | Resend DPA ↗ |
| ImprovMX ↗ | Email forwarding | EU | ImprovMX GDPR page ↗ |
| Vercel ↗ | Website hosting | US/EU | Vercel DPA ↗ |
5. Data Retention#
- Contact form submissions: Retained in our inbox for a maximum of 90 days after the enquiry is resolved, then permanently deleted.
- Newsletter subscribers: Retained until you unsubscribe. On unsubscription, your email address is deleted within 30 days.
- Analytics: Plausible retains aggregated (non-personal) data indefinitely. No personal data is collected.
- Email forwarding: ImprovMX processes emails in transit and does not retain them.
6. Your Rights (GDPR)#
You have the right to: access your data, rectify inaccuracies, request deletion, restrict processing, data portability, and object to processing. Contact hello@openinherit.org to exercise any of these rights.
7. Cookies#
This site does not use cookies.
Plausible Analytics is cookie-free. Formspark, Buttondown, and the INHERIT Guide do not set cookies. No consent banner is needed.
8. Data Breach Notification#
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Information Commissioner’s Office within 72 hours of becoming aware of the breach, as required by GDPR Article 33. If the breach is likely to result in a high risk to you, we will also notify you directly without undue delay. Notifications will be sent to the email address you provided when contacting us or subscribing to the newsletter.
9. Children#
This website is not directed at children under 16. We do not knowingly collect data from children.
10. Changes#
We may update this policy from time to time. Changes will be posted on this page.