WillSafeUK

Privacy Policy

Last updated: 20 June 2026

This policy explains how WillSafe UK (a trading name of WSC Group Ltd, Company No. 17117072, the "data controller") processes your personal data. We comply with the UK GDPR and the Data Protection Act 2018.

What we collect

  • Order data: email address provided at checkout
  • Order data: SKU purchased, amount, order status, Stripe session reference
  • Support correspondence: emails you send us and our replies
  • Technical data: IP address, browser type, pages viewed (collected via privacy-friendly analytics)

What we don't collect: the content of your Will or any personal information you enter into our templates. Our templates are for you to fill in on your own device. We never see what you write.

Why we collect it and our lawful basis

  • To deliver your order. Lawful basis: performance of a contract.
  • To provide re-download access. Lawful basis: performance of a contract.
  • For fraud prevention and security. Lawful basis: legitimate interests.
  • For analytics. Lawful basis: legitimate interests (using a privacy-friendly, cookieless analytics tool).
  • For marketing email. Lawful basis: consent. Only if you opt in at checkout.

Who we share it with

  • Stripe (payments): processes your card details directly; we never see or store them.
  • Supabase (hosting our database): stores your account and order records in the EU region.
  • Resend (email delivery): sends your order confirmation and download-link emails.
  • Vercel (site hosting).

We do not sell your data to anyone, ever.

How long we keep it

  • Order records: 7 years (HMRC tax requirement).
  • Support emails: 2 years after the matter closes.
  • Marketing consent: until you unsubscribe.
  • Marketing consent records: until you unsubscribe or request deletion.

Your rights

You have the right to access, correct, delete, or port your personal data, to object to processing, and to withdraw consent. To exercise any right, email privacy@willsafe.org.uk. We respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.

How to complain about your data

If you believe we have mishandled your personal data, you can raise a formal data-protection complaint. Here is how:

  1. Contact us first. Email privacy@willsafe.org.uk or use our online complaints form. Include your name, contact details, and a description of your concern.
  2. We acknowledge within 5 working days of receiving your complaint, confirming who is handling it and the expected timeline.
  3. We respond within 30 calendar days of receipt. For complex cases we may extend this to 90 days; we will notify you within the original 30-day period if we need to do so.
  4. If you remain dissatisfied, you have the right to escalate to the Information Commissioner's Office (ICO) at any time — ico.org.uk / 0303 123 1113.

Our full Data Protection Complaints Process (v1.0, effective 20 June 2026) sets out the procedure in detail, including how complaints are investigated, escalated, and recorded.

International transfers

Our primary infrastructure is hosted in the UK/EU. Where providers process data in other regions (e.g. Stripe in the US), transfers are protected by Standard Contractual Clauses and each provider's certified transfer mechanism.

Contact

Data controller: WSC Group Ltd (trading as WillSafe UK), Company No. 17117072, ICO registration CSN0004881. Business address: 66 Paul Street, London, EC2A 4NA. Email: richard@willsafe.org.uk.

We are registered with the Information Commissioner's Office (ICO). Registration number: CSN0004881.