§1 Who we are
The End of Life Planner is sold by Joel Patterson, a sole trader in London, England trading as Standard Index Group and as Valoren. We decide how the information below is used, and we are responsible for it.
Business address: 128 Blindmans Lane, Cheshunt, Waltham Cross EN8 9DN, England
Email: support@theendoflifeplanner.com
Phone: +44 20 3996 2682 (a number in England; a message left there reaches us by email)
§2 What we collect
Only what the order form asks, and nothing it does not:
Your state.
The state the planner is bought for, chosen from the states on sale. The companion guide that comes with it, "What Happens Next", is the same for every buyer and takes nothing from the form.
Your household.
The household's name, as you want it printed on the cover and at the head of each section. This is the one free-text box on the form; please put nothing else in it.
The month.
We do not ask for it. The cover prints the month of your order, so your family can see when the planner was started.
Delivery.
Your email address, the moment you accepted the terms and the version you accepted.
Marketing.
Whether you ticked the separate box for marketing email. It is unticked unless you tick it.
The device.
The internet address and browser type of the device that placed the order, kept with the order to detect misuse of the form.
Payment.
Stripe takes your card details on its own pages. We never see them. Stripe tells us that the payment succeeded, the amount, and a reference.
Health information.
None. The form asks no question about health, medication, care or any medical matter, and our system refuses any field that would carry such an answer. The planner itself has no place for medical details. The form does not read the words you type into the household name, so please do not type medical details, or anything else, there: it is printed exactly as you gave it.
§3 What you write in the planner never reaches us
The planner is a PDF you fill in on your own computer or by hand after it arrives. Nothing you type into its fields, and nothing you write on its pages, is sent to us or to anyone else by the file. Account names, policy numbers, the first-call person's name and number, and the letters you fill in stay with you. We hold only what section 2 lists.
§4 Why
- To prepare your planner and email it to you.
- To send it again, within 12 months, if you ask.
- To answer you when you write to us.
- To keep a record of the sale, which UK tax law requires of us.
- To detect misuse of the order form.
- To send you marketing email, only if you ticked the box for it.
Nothing else. We do not sell your information, we do not share it for advertising, and nothing you type is used to train an AI system.
§5 Marketing email: the separate box
The order form has one box for marketing email. It is unticked when the form opens; nothing you do to buy the planner ticks it. If you leave it unticked, the only email you get from us is the delivery email and any reply to something you asked.
If you tick it, we may email you, from time to time, about this planner and about other things we publish for families. Every such email carries a link that stops them in one click, and you can also email us to stop. We stop at once, and in any case within 10 business days. Stopping marketing email does not affect your order or the delivery email.
§6 Who handles it, and where
Our primary store for US planner orders is Supabase in London, England. Your information is disclosed to the providers named here only for the purposes stated, and to no one else.
Supabase (London, England). Stores your order and the details you gave at checkout. Kept as section 7 says.
Stripe (United States; Stripe says it may transfer data to other countries, including India). Takes your card payment on its own pages and holds the payment record under its own privacy policy. Receives your email address, the amount, your state, our reference for your order, and the planner's name and a description that names your state; we never receive your card details.
DocRaptor (United States). Receives the pages of your planner, including the household name and the month of your order, to turn them into the two planner PDF files, and the pages of the companion guide, which carry nothing of yours, to make the third. Deletes the pages as soon as they have been used, and the PDF files within 15 minutes at the latest.
Postmark (United States). Sends the delivery email with the three PDFs attached, and any marketing email you asked for. Keeps the delivery email, including the attachments, for 45 days, then deletes it. If your address bounces, the address stays on Postmark's bounce list.
Cloudflare (United States; it stores information mainly in the United States and the European Economic Area, and runs servers around the world). Runs this website and the order service. It carries the form's contents to our store and keeps its standard connection logs. It also counts visits to this site without cookies or any personal identifier: the page, the referring site, the country and the type of device.
Sentry (a United States company; this site's reports are stored in Germany). Records an error if a page of this site breaks: the page's web address, cut before any "?", and what failed. It receives none of your details, no names and no replay of what you did.
Google (United States). Supplies the typefaces this site uses: when a page opens, your browser asks Google for them, which tells Google your internet address and browser type. And email you send to support@theendoflifeplanner.com is forwarded to our mailbox at Google (Gmail), where we keep our correspondence.
Nothing else measures what you do here, and the site sets no advertising or analytics cookie.
§7 Where it goes, and for how long
Outside the United States.
Your information leaves the United States. Your order and the details you gave at checkout are stored in London, England. The PDF files, the companion guide among them, are made in the United States by DocRaptor, which deletes them within 15 minutes, and the delivery email with the files attached is held for up to 45 days by Postmark in the United States. Stripe, Cloudflare, Sentry and Google handle what section 6 says, in the United States, the European Economic Area and Germany, and Stripe may also use other countries, including India.
12 months.
We keep the details you gave at checkout for 12 months after your planner is delivered, then delete them automatically. The period is ours, chosen so the planner can be sent again if you ask; no law requires us to keep them that long. If you would like us to keep them longer, email us and say so, and we keep them until you tell us otherwise. We do not keep a copy of your planner as a file: a re-send is prepared again from those details.
Unpaid orders.
Details from an order that was never paid for are deleted from our store after 30 days, with the email address given; Stripe keeps its own record of the unfinished checkout.
Sooner.
The delivery email carries a link to a page that deletes your details from our store at once, with the details of the device that placed the order. It does not reach the copies the providers above were given to make and send your planner: DocRaptor deletes its copy on its own setting (the pages as soon as they are used, the files within 15 minutes of being made), and Postmark keeps the delivery email, with the files attached, until 45 days after it was sent. Our plan with our database provider includes no backups, so we hold no backup copy of your details. After deletion the planner cannot be sent again, and the PDFs you already have are not affected.
What remains.
After deletion we keep the sale record only: your email address, your state, the date, the amount, the payment reference and the version of the terms you accepted. We keep it until 6 years after the end of the UK tax year in which you bought, which covers what UK tax law requires of us, and then delete your email address from it too. Stripe keeps its own payment record. If you ticked the marketing box, your email address and that choice are kept until you stop the emails or ask us to delete it, whichever comes first.
§8 How it is protected
The form and the site run over an encrypted connection. Your details are stored in London, England, and the one person who runs the business is the only person with access to them. The delete link is signed, so it cannot be guessed. Each provider in section 6 acts under contract and for the purpose stated. The order form asks for no account number, no password, no Social Security number and nothing medical. If a breach of our store ever affected you, we would tell you by email, promptly, and tell the authorities the law of your state requires.
§9 Your rights, and how to use them
Whatever state you are in, you can ask what we hold about you, have it corrected, have it deleted, or have a copy, and you can tell us to stop marketing email. Email us from the address your planner was sent to, and we answer within one month. To delete your details at once, use the link in your delivery email. We never treat you differently for using these rights. For the payment record, you can also ask Stripe.
§10 We do not sell your information
We do not sell your personal information, and we do not share it with anyone for advertising, for profiling or for any purpose other than the ones in section 4. The site sets no advertising cookie and runs no advertising network. Because we do none of these things, there is nothing for you to opt out of; the only choice the form offers is the marketing box in section 5, and it is unticked unless you tick it.
§11 Children
This site and the planner are for adults. We do not knowingly collect information from anyone under 13. If you believe a child has given us their details, email us and we delete them.
§12 Complaints
Tell us first, at the address above, and we will try to put it right. You may also contact the Information Commissioner's Office (ICO), the data protection regulator where we are based. Depending on your state and its law, you may also be able to raise the matter with your state's attorney general.
§13 Changes
We may update this notice. The version that applied when you bought is dated at the top, and every version stays published, unchanged, at its own dated address listed at the foot of this page.
Every version of this notice