Arvéla – a trading name of Cascade Legal Ltd
Last updated: 5 May 2026
The short version. Our diagnostic tools process your answers entirely in your web browser. We do not collect, store, or transmit your data unless you choose to email your results or make a purchase. Where we do process personal data, we use a small, named set of processors and do not share data beyond them.
This website and the Arvéla tools are provided by Cascade Legal Ltd, a company registered in England and Wales (company number 08645164), with registered office at 8 Eastway, Sale, Cheshire, M33 4DX. Cascade Legal Ltd is the data controller for any personal data collected through this website.
Cascade Legal Ltd is registered with the Information Commissioner's Office, registration number ZA020512.
Cascade Legal Ltd is not an SRA-regulated firm. Where you choose to engage professional legal services, these are delivered through Carbon Law Partners LLP, which is authorised and regulated by the Solicitors Regulation Authority. Carbon is a separate data controller for the information you provide to them in the course of any legal matter.
You can contact us at hello@arvela.uk.
When you use any of our diagnostic tools (the Estate Health Check, the Probate Navigator), you provide information about your personal and financial circumstances. While you are working through the tool, this information is processed entirely within your web browser using client-side code. It is not transmitted to our servers and not accessible to us or any third party.
If you choose to receive a report by email, your answers are then transmitted to our servers so we can compose the personalised report and deliver it to the address you provided. Once the report has been sent, your email address is held for 30 days in a short-lived re-issue log (so we can resend the report if you ask), and a one-way hashed reference plus your anonymised answers are kept as a long-term audit record. After the 30-day window, your email address is permanently deleted and the system holds no way to link the anonymised audit record back to you.
If you close your browser or navigate away before asking for a report, your answers are deleted from your device. We have no ability to retrieve them.
We collect personal data only in the following limited circumstances.
Email address (to receive a report)
If you provide your email address to receive a copy of your diagnostic results, we collect and store that email address for the purpose of sending you the report. We will not use your email address for marketing, add it to a mailing list, or share it with any third party without your explicit consent.
Companion launch waitlist
If you join the Planning Companion launch waitlist, we collect your name and email address for the sole purpose of emailing you once when the Companion launches. We do not add waitlist signups to a mailing list, do not use the address for marketing, and delete waitlist records once the Companion has launched and you have either subscribed or chosen not to. You can ask to be removed from the waitlist at any time by emailing hello@arvela.uk.
Purchases (guides, Companion, Probate Pro)
If you purchase an Arvéla product, payment is processed by Stripe, Inc. We receive confirmation of your purchase, your name, and your email address for the purposes of delivering the product, generating the personalised copy, communicating with you about the purchase, and meeting our tax and accounting obligations. We do not receive or store your payment card details. These are handled entirely by Stripe under Stripe's own privacy policy.
Personalised PDF generation
Each guide is generated as a personalised copy at the point of purchase. Your name and a unique reference code are inserted into the running footer on every page, and hidden identifiers may be embedded within the text. This serves two purposes: it gives you a copy that is clearly yours, and it deters redistribution. The generated copy is stored temporarily in secure object storage and delivered to you through a time-limited download link (valid for 72 hours). The stored copy is deleted after a short retention period once delivery is complete.
Companion and Probate Pro accounts
The Planning Companion is in build and not yet available for purchase. When it launches, the architecture is privacy-by-design: your guide content, workbook entries, asset register, and personal details are stored in your browser only, never on Cascade or sub-processor servers. Your subscription account holds only your email address, a hashed password, and your subscription state (active / lapsed). When the AI assistant answers a question, the system sends only an anonymised context summary plus the relevant guide chunk and your question to the AI provider; names, addresses, account numbers, and provider details are stripped before any network call. The Companion privacy posture is documented in full at arvela.uk/companion and is testable against the architecture spec.
Probate Pro account behaviour will be documented when that product launches in Phase 2.
Consultation bookings
If you choose to book a consultation, you will be directed to a booking system where you will provide your name, email, and telephone number. This information is used to arrange and conduct the consultation and is passed to Carbon Law Partners LLP, who from that point act as a separate data controller for your instruction.
Analytics
We use Plausible Analytics to understand how visitors use this website. Plausible does not use cookies, does not collect personal data, and does not track individual visitors across sites. It provides aggregate data only. Plausible is an EU-based service and processes all data within the European Union. No consent banner is required because no personal data is collected.
For diagnostic-report email delivery, our legal basis is your consent (Article 6(1)(a) UK GDPR), which you provide by submitting your email address. You may withdraw consent at any time.
For purchases, Companion use, and Probate Pro use, our legal basis is the performance of a contract to which you are a party (Article 6(1)(b) UK GDPR).
For fulfilment-related communications, fraud prevention, and limited operational analytics, our legal basis is our legitimate interests in delivering, securing, and improving our products (Article 6(1)(f) UK GDPR), balanced against your rights and reasonable expectations.
For tax and accounting record-keeping, our legal basis is compliance with legal obligation (Article 6(1)(c) UK GDPR).
We do not sell, rent, or trade your personal data. We share data only with the following processors, solely for the purposes described.
| Processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing, subscription billing, fraud prevention, invoicing | United States (with UK / EEA infrastructure) |
| Postmark (ActiveCampaign, LLC) | Transactional email delivery (receipts, download links, account notifications) | United States |
| Cloudflare, Inc. | Website hosting, DNS, content delivery, and object storage for personalised PDFs | Global (with UK and EU data centres) |
| Fly.io (Hydrobyte, Inc.) | Compute hosting for the personalised-PDF generation service | Region-specific (we operate from EU/UK regions where available) |
| Google LLC (Workspace and Apps Script) | Email, internal document storage, and the integration script that routes diagnostic enquiries and forms email confirmations and instructions | United States (with UK / EEA infrastructure) |
| Asana, Inc. | Internal task management for enquiries and consultation requests | United States |
| Plausible Analytics | Aggregate, anonymised website analytics – no personal data | European Union |
Each processor is engaged under a written data-processing agreement that imposes appropriate confidentiality, security, and sub-processor obligations consistent with UK GDPR.
Some of our processors are based in, or may transfer data to, the United States and other countries outside the UK. Where this happens, we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on the UK Extension to the EU–US Data Privacy Framework (where the processor is self-certified). These mechanisms provide an adequate level of protection for your personal data.
Email addresses provided for diagnostic-report delivery are retained for 30 days in a short-lived re-issue log, after which they are permanently deleted. The anonymised audit record of the report itself (no name, no email — only a one-way hashed reference and your answers) is retained long-term for service-improvement analytics.
Purchase records (name, email, order details, VAT information) are retained for 7 years in accordance with UK tax and accounting obligations.
Personalised PDF copies stored for delivery are retained for 90 days and then deleted; the personalised copy held in your confirmation email is yours to keep.
Companion and Probate Pro account data is retained while your account is active and for up to 30 days after you close the account, after which it is permanently deleted. You can export or delete your data at any time.
Under the UK GDPR, you have the right to: access the personal data we hold about you, ask us to correct it if it is inaccurate, ask us to delete it (subject to any legal obligation to retain it), ask us to restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. You may withdraw consent at any time where our processing is based on consent.
To exercise any of these rights, email hello@arvela.uk. We will respond within one month.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We take reasonable technical and organisational measures to protect personal data, including encryption in transit, encryption at rest for stored personalised PDFs, access controls on account data, and the use of reputable processors with their own security certifications. No system is perfectly secure. If you believe your account or purchase has been compromised, please contact us immediately.
Arvéla tools may be made available through partner organisations such as financial advisers and funeral directors. The partner firm does not receive your diagnostic data. If you choose to engage professional services following your use of a white-labelled tool, you will be told at that point how your data will be handled and by whom.
This website and its tools are not directed at individuals under the age of 18. We do not knowingly collect personal data from children.
We may update this privacy policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Material changes will be highlighted on the website.