Privacy Policy

1. Who we are (data controller)

Willdone is an England and Wales will-writing website.

Contact email: hello@willdone.co.uk

2. The personal data we collect

We may collect the following categories of personal data:

2.1 Data you provide to us

• Account and contact details: name, email, phone number (if provided)
• Will questionnaire information: details you enter to generate your will (for example, your address, family relationships, executors, guardians, beneficiaries, gifts, and other instructions)
• Support communications: emails or messages you send us

2.2 Data about other people you include

When you enter details of executors, witnesses, beneficiaries, guardians, or other third parties, you may provide their names and contact details and their relationship to you. You should only provide this information if you have the right to do so, and you should consider telling them you’ve included their details.

2.3 Technical and usage data

• IP address, device and browser information
• pages viewed and actions taken on the website
• cookies and similar technologies (see section 9)

2.4 Payment data

Payments are processed by Stripe. We do not receive or store your full card details. Stripe will process payment information as a separate controller/processor depending on the context. (You should also link to Stripe’s privacy information from your checkout.)

3. How we use your data and our legal bases

UK GDPR requires a “lawful basis” for processing. We typically use the following:

3.1 To provide the service (Contract)

• create and deliver your will documents and related outputs
• provide customer support
• manage your account (if applicable)

Lawful basis: performance of a contract (to provide what you asked for).

3.2 To run and improve the website (Legitimate interests)

• maintain, secure, and troubleshoot the website
• prevent fraud and abuse
• understand how the website is used and improve usability (where this relies on non-essential cookies/analytics, we will ask for consent first)

Lawful basis: legitimate interests (running a safe, reliable service), and/or consent for non-essential cookies.

3.3 To comply with legal obligations (Legal obligation)

• accounting and tax records (e.g., VAT records where applicable)
• responding to lawful requests from authorities

Lawful basis: legal obligation.

3.4 Marketing communications (Consent or legitimate interests)

If you opt in, we may send updates and service information by email. You can unsubscribe at any time via the link in the email or by contacting us.

Lawful basis: consent (where required) or legitimate interests for limited service messages (e.g., transactional emails).

4. Who we share personal data with

We may share personal data with trusted service providers, for example:

• Stripe (payment processing)
• website hosting and infrastructure providers [add provider]
• email or customer support providers [add provider]
• analytics providers (only where you consent to non-essential cookies) [add provider if used]

We share only what is necessary for them to provide their services.

5. International transfers

Some of our service providers may process data outside the UK. Where this happens, we will use appropriate safeguards (for example, adequacy regulations or standard contractual clauses) as required.

[If you know your hosting/email providers, add where they process data and what safeguard applies.]

6. How long we keep your data (retention)

We keep personal data only for as long as necessary for the purposes described in this policy, including:

• while you have an account or active relationship with us
• as needed to provide the service and handle support queries
• to comply with legal, accounting, or tax obligations
• to establish, exercise, or defend legal claims

Typical retention periods: [add your actual periods, e.g., “account data retained for X years after last activity”].

7. Your rights

You have rights under UK data protection law, including:

• access to your personal data
• correction of inaccurate data
• deletion (in some cases)
• restriction of processing (in some cases)
• objection to processing based on legitimate interests
• data portability (in some cases)
• withdraw consent at any time (where we rely on consent)

You can exercise these rights by contacting hello@willdone.co.uk.

8. Complaints

If you’re unhappy with how we handle your data, please contact us first at hello@willdone.co.uk.

You also have the right to complain to the Information Commissioner’s Office (ICO) (the UK regulator for data protection).

9. Cookies and similar technologies

We use cookies and similar technologies. Some are essential for the site to work; others (like analytics) require your consent. UK rules apply to cookies even where data is “anonymous,” and non-essential cookies generally require consent.

See our Cookie Policy.

10. Security

We use reasonable technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure.

11. Children’s privacy

Our services are intended for people aged 18 and over. We do not knowingly collect data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on the website and update the effective date.