1. Who We Are
Wills Assured operates the website willsassured.co.uk (the "Service"). We are committed to protecting your personal data and complying with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
If you have any questions about this policy or how we handle your data, please contact us at: info@willsassured.co.uk
2. What Personal Data We Collect
We collect the following categories of personal data when you use our Service:
- Account information: your full name and email address when you register
- Payment information: billing details processed securely through Stripe (we do not store card details ourselves)
- Will questionnaire data: personal details including date of birth, address, details of your estate, names and details of beneficiaries, executors, and guardians
- Generated will documents: the completed will text produced from your questionnaire answers
- Usage data: pages visited and actions taken on our website
3. How We Use Your Data
We use your personal data for the following purposes:
- To create and manage your account
- To process your payment and provide the service you have purchased
- To generate your will document based on your questionnaire answers
- To communicate with you about your account or service updates
- To comply with our legal obligations
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR:
- Contract performance: processing necessary to provide the will-writing service you have purchased
- Legal obligation: where we are required to process data to comply with UK law
- Legitimate interests: to improve our service and prevent fraud
5. Third Parties We Share Data With
We use the following trusted third-party services to operate our platform:
- Supabase — our database and authentication provider, used to store your account, questionnaire answers, and generated wills securely
- Stripe — our payment processor, who handles all card transactions on our behalf
- Anthropic — the AI provider whose technology generates your will document from your questionnaire answers. Your personal data is transmitted to Anthropic solely for this purpose
We do not sell your personal data to any third party.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it by law.
7. Your Rights
Under UK GDPR, you have the following rights:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate data
- Right to erasure: request deletion of your personal data
- Right to restrict processing: request that we limit how we use your data
- Right to data portability: request a copy of your data in a machine-readable format
- Right to object: object to processing based on legitimate interests
To exercise any of these rights, please contact us at info@willsassured.co.uk. We will respond within 30 days.
8. Cookies
Our website uses cookies and similar technologies to operate the Service. The cookies we use are:
- Strictly necessary cookies: used for authentication and keeping you logged in (Supabase session cookies). These cannot be disabled as they are essential for the Service to function.
- Payment cookies: set by Stripe during the checkout process
We do not use advertising or tracking cookies.
9. Data Security
We take the security of your data seriously. All data is transmitted over HTTPS. Your data is stored in Supabase with row-level security policies ensuring you can only access your own data. Payments are handled entirely by Stripe and we never store payment card details.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any significant changes by email or by posting a notice on our website. The date at the top of this page indicates when it was last updated.
11. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.