Privacy Policy

Last updated: April 2026

This policy explains how WillSafe UK (a trading name of WSC Group Ltd, the "data controller") processes your personal data. We comply with the UK GDPR and the Data Protection Act 2018.

What we collect

• Order data: email address provided at checkout
• Order data: SKU purchased, amount, order status, Stripe session reference
• Support correspondence: emails you send us and our replies
• Technical data: IP address, browser type, pages viewed (collected via privacy-friendly analytics)

What we don't collect: the content of your Will or any personal information you enter into our templates. Our templates are for you to fill in on your own device. We never see what you write.

Why we collect it and our lawful basis

• To deliver your order. Lawful basis: performance of a contract.
• To provide re-download access. Lawful basis: performance of a contract.
• For fraud prevention and security. Lawful basis: legitimate interests.
• For analytics. Lawful basis: legitimate interests (using a privacy-friendly, cookieless analytics tool).
• For marketing email. Lawful basis: consent. Only if you opt in at checkout.

Who we share it with

• Stripe (payments): processes your card details directly; we never see or store them.
• Supabase (hosting our database): stores your account and order records in the EU region.
• Resend (email delivery): sends your order confirmation and download-link emails.
• Vercel (site hosting).

We do not sell your data to anyone, ever.

How long we keep it

• Order records: 7 years (HMRC tax requirement).
• Support emails: 2 years after the matter closes.
• Marketing consent: until you unsubscribe.
• Marketing consent records: until you unsubscribe or request deletion.

Your rights

You have the right to access, correct, delete, or port your personal data, to object to processing, and to withdraw consent. To exercise any right, email richard@willsafe.org.uk. We respond within one month.

You also have the right to complain to the Information Commissioner's Office (ICO): ico.org.uk / 0303 123 1113.

International transfers

Our primary infrastructure is hosted in the UK/EU. Where providers process data in other regions (e.g. Stripe in the US), transfers are protected by Standard Contractual Clauses and each provider's certified transfer mechanism.

Contact

Data controller: WSC Group Ltd (trading as WillSafe UK). Company No. 17117072. Registered office: 66 Paul Street, London, EC2A 4NA. Email: richard@willsafe.org.uk.

We are registered with the Information Commissioner's Office (ICO). Registration number: CSN0004881.