Craft My Will
    Start Your Will

    Privacy Policy

    Last Updated: January 2025

    Craft My Will Ltd ("Craft My Will", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our will-writing service.

    1. Information We Collect

    Personal Information You Provide

    When you use our service, you provide personal information including:

    • Full name, date of birth, and address
    • Email address and phone number
    • Information about your family members and beneficiaries
    • Details about your assets and property
    • Information about executors and guardians
    • Payment information (processed securely by Stripe)

    Information Collected Automatically

    When you access our website, we automatically collect:

    • Device information (browser type, operating system)
    • IP address and location data
    • Pages visited and time spent on our site
    • Referring website addresses

    2. How We Use Your Information

    We use the information we collect to:

    • Create and deliver your will document
    • Process your payment
    • Send you your will via email
    • Provide customer support
    • Send service-related communications
    • Improve our service and user experience
    • Comply with legal obligations
    • Prevent fraud and maintain security

    3. Legal Basis for Processing (GDPR)

    Under the UK General Data Protection Regulation (UK GDPR), we process your personal data on the following legal bases:

    • Contract: Processing necessary to provide our will-writing service
    • Legitimate Interest: To improve our service and prevent fraud
    • Legal Obligation: To comply with applicable laws and regulations
    • Consent: For marketing communications (where applicable)

    4. Data Sharing

    We may share your information with:

    • Payment Processors: Stripe processes your payment securely. We do not store your full card details.
    • Cloud Service Providers: We use secure cloud services to host our platform and store data.
    • Analytics Providers: We use anonymised data for website analytics.
    • Legal Authorities: When required by law or to protect our rights.

    We do not sell your personal information to third parties.

    5. Data Security

    We implement appropriate technical and organisational measures to protect your personal data, including:

    • Encryption of data in transit (TLS/SSL) and at rest
    • Secure authentication systems
    • Regular security assessments
    • Access controls and staff training
    • Secure data centres with physical security measures

    6. Data Retention

    We retain your personal data for as long as necessary to:

    • Provide our services and maintain your will documents
    • Comply with legal, accounting, and reporting requirements
    • Resolve disputes and enforce our agreements

    Generally, we retain will-related data for 7 years after your last interaction with our service, unless you request earlier deletion.

    7. Your Rights

    Under UK GDPR, you have the right to:

    • Access: Request a copy of your personal data
    • Rectification: Correct inaccurate or incomplete data
    • Erasure: Request deletion of your data (subject to legal requirements)
    • Restriction: Limit how we process your data
    • Portability: Receive your data in a structured format
    • Objection: Object to certain processing activities
    • Withdraw Consent: Where processing is based on consent

    To exercise these rights, please contact us at privacy@craftmywill.com.

    8. Cookies

    We use cookies and similar technologies to:

    • Keep you signed in
    • Remember your preferences
    • Understand how you use our service
    • Improve our website performance

    You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our service.

    9. International Transfers

    Your data is primarily stored and processed in the United Kingdom. Where data is transferred outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK Information Commissioner.

    10. Children's Privacy

    Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. The "Last Updated" date at the top indicates when this policy was last revised.

    12. Contact Us

    If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

    Data Protection Officer
    Craft My Will Ltd
    Email: privacy@craftmywill.com
    Address: London, United Kingdom

    You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.