Your data, handled with the same care as your records.
Signum holds sensitive household and estate information. This notice explains what we collect, why, who we share it with, and what your rights are under the UK GDPR and DPA 2018.
Last updated: 30 June 2026
Who we are
Standard Index Group is the data controller for all personal data processed through Signum. As controller, we are responsible for deciding how and why your data is used, and for keeping it safe.
What data we collect
From clients
- ✓Name, address, date of birth, contact details
- ✓Estate details — names of deceased and beneficiaries, assets, liabilities
- ✓Financial information needed to scope and price the matter
- ✓Correspondence and instructions throughout the engagement
From panel members
- ✓Name, firm name, and contact details
- ✓Professional registration numbers — SRA, CIOT, FCA and equivalents
- ✓ICO registration reference
- ✓Engagement and fee correspondence
Standard server logs (IP address, browser type, pages visited) are collected for security and performance only. Not linked to your identity. Not shared or sold.
When you book an intake call, we collect your name, email, phone number (optional), the situation you select, and any note you add. We process the enquiry itself under Art.6(1)(b) — steps you've asked us to take before a contract. If what you share includes health information — for example, that a diagnosis has prompted your enquiry — we process that health information only with your explicit consent under Art.9(2)(a), given when you send the form. Used only to arrange, confirm, and prepare for that call. Kept for 6 months if no matter follows.
How and why we use your data
Every processing activity has a lawful basis under UK GDPR — we do not process data on a catch-all basis. We do not use your data for automated decision-making or profiling. Click any item below to see the detail and retention period.
Who we share your data with
We do not sell, rent, or trade your personal data. Sharing is limited to the three categories below, and only ever to the minimum extent necessary for the purpose.
Panel members
Solicitors, chartered tax advisers, financial advisers, and other specialists instructed on your matter. We share only what they need for their specific role. Each panel member has signed a data-sharing agreement before any data reaches them.
Professional advisers
Our own accountants, lawyers, and compliance advisers, where strictly necessary. They operate under equivalent confidentiality obligations and may not use your data for any other purpose.
Regulators and courts
Where we are legally required to disclose — HMRC, the SRA, a court order, or a regulatory authority. We share no more than required and will notify you where we lawfully can.
International transfers
We do not routinely transfer personal data outside the UK. If a transfer is ever necessary — for example, an overseas specialist — we ensure an appropriate safeguard is in place before the transfer occurs.
Safeguards include adequacy decisions, standard contractual clauses, or equivalent UK GDPR mechanisms as recognised by UK law.
How we protect your data
We apply appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. Panel members are contractually required to maintain equivalent standards under their signed data-sharing agreements with Signum.
Your data is never shared with a panel member before their agreement is signed. We do not share first and ask questions later.
Your rights under UK GDPR
You have seven rights over your personal data. To exercise any of them, email joel@valoren.uk. We respond within one calendar month. No fee applies for reasonable requests.
Request a copy of the personal data we hold about you. We will respond within one calendar month.
Ask us to correct data that is inaccurate or incomplete. We act on reasonable requests promptly.
Ask us to delete your data where we no longer need it and no legal obligation requires retention.
Ask us to pause all processing while a dispute or query is being resolved.
Object to processing carried out on the basis of legitimate interests. We must stop unless we can show compelling grounds.
Receive your data in a structured, machine-readable format where the lawful basis is contract or consent.
Where we rely on consent, withdraw it at any time. This does not affect the lawfulness of earlier processing.
Complaints
If you are unhappy with how we have handled your data, contact us first — we want to resolve it directly and quickly.
Email Joel Patterson at joel@valoren.uk. We acknowledge within 2 working days and respond substantively within 14 working days.
If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113 · Wycliffe House, Water Lane, Wilmslow SK9 5AF.
Changes to this notice
We will update this notice when our processing activities change. The "last updated" date at the top reflects the current version. Active clients will be notified by email of any material changes before they take effect.
Want your household estate records built for you?
Signum takes the work off your hands. A guided build session, a complete records dossier, and Stewardship to keep everything current — the ES-2026 standard, done for you.
Signum · Standard Index Group · 1 Mayfair Place, London W1J 8AJ · UK GDPR / DPA 2018 · F16 v1.0 · 2026-06-30