Privacy Policy

1. Who We Are

makewill.co.uk is operated by Calm Ventures Ltd (the "data controller"). We are registered with the Information Commissioner's Office (ICO) under registration number [TBC].

Contact: privacy@makewill.co.uk

2. What Data We Collect

We collect personal data that you provide when creating a will, including:

• Full name, date of birth, address, and marital status of the testator (and partner for mirror wills)
• Names, addresses, and relationships of executors, guardians, and beneficiaries
• Details of specific bequests and estate distribution
• Email address and payment information
• Technical data: IP address, browser type, and usage analytics

We recognise that will data is among the most sensitive personal data possible. We treat it accordingly.

3. Legal Basis for Processing

• Contract: We process your will data to fulfil our contract with you — generating and delivering your will document.
• Legitimate interest: We process technical and usage data to improve our service and prevent fraud.
• Consent: We send marketing communications only with your explicit consent.

4. How We Protect Your Data

• All data is encrypted in transit (TLS) and at rest (AES-256)
• Will data is stored in a secure database with row-level security policies ensuring data isolation
• Payment data is processed by Stripe and never stored on our servers
• Access to personal data is restricted to authorised personnel on a need-to-know basis
• We conduct regular security reviews and testing

5. Data Retention

We retain your will data and account information for the duration of your account plus 7 years, in line with standard legal document retention practice. You may request deletion at any time — see "Your Rights" below.

6. Data Sharing

We share personal data only with:

• Stripe: Payment processing
• Amazon Web Services (SES): Email delivery
• Supabase / hosting providers: Data storage and hosting

We do not sell your data. We do not share your will data with third parties for marketing purposes. If you use our service via a white-label partner, that partner may have access to your name, email, and will completion status (but not the content of your will) as described at the point of entry.

7. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Request erasure of your data (within 30 days, except where we are legally required to retain it)
• Restrict or object to processing
• Data portability
• Lodge a complaint with the ICO (ico.org.uk) if you are dissatisfied with our handling of your data

To exercise any of these rights, contact privacy@makewill.co.uk.

8. Cookies

We use essential cookies required for the service to function (session management, form state). We use analytics cookies only with your consent. You can manage your cookie preferences at any time.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email to registered users. The latest version is always available on this page.