Privacy policy — WillFull

1. Who we are

WillFull Ltd (company number 17307596), at Office 122, Filwood Green Business Park, 1 Filwood Park Lane, Bristol, England, BS4 1ET, is the controller of your personal data. We’re registered with the Information Commissioner’s Office, registration [ZA000000].

Questions about your data? Email privacy@willfull.co.uk.

2. What we collect

About you

Name, date of birth, email, address, relationship status and your children’s names.

Your will

Your answers in the will creator, and any will you upload.

Your estate

Property, accounts, balances, pensions, policies and where documents are kept.

People you add

Names and contact details of executors, guardians, beneficiaries and advisers.

Payment

Handled by Stripe. We never see your full card number.

How you use WillFull

Device, browser and log-in activity, to keep your account secure.

Some of this can reveal sensitive details, such as health conditions you mention in the eligibility questions. We only use it to give you the right guidance, and ask for your explicit consent first.

3. Where it comes from

Mostly from you. With your permission, we also fill in details from HM Land Registry.

4. Why we use it

To provide WillFullContract

To look up your propertyConsent — withdraw any time

Health or vulnerability answersExplicit consent

To keep your account secure and prevent fraudLegitimate interests

To keep payment recordsLegal obligation

Product news and tipsConsent — off by default

5. Who can see it

You decide who sees whatExecutors and advisers only see what you’ve chosen to share with them. Executors only get access after we’ve verified their identity and a death certificate. We never sell your data or share it for advertising.

We also use trusted suppliers to run the service — hosting Vercel, our database Supabase, payments Stripe, email Resend and bot protection Cloudflare. They can only use your data to provide their service to us.

6. How we protect it

Your data is encrypted in transit and at rest. Staff access is limited to those who need it and is logged. We offer two-step verification on every account. Your data is stored in the European Economic Area (EEA); if it ever leaves, we use approved safeguards.

7. How long we keep it

While your account is open. If you close it, we delete your data within 30 days, except payment records, which we keep for 6 years by law. After a death, we keep the account for 2 years so executors can finish their work, then delete it.

8. Your rights

You can ask to see, correct, download or delete your data, object to how we use it, or withdraw consent. Most of this you can do yourself in Settings, or email privacy@willfull.co.uk. We’ll respond within one month.

If you’re unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.

9. Cookies

We use essential cookies to keep you logged in. We only use analytics cookies if you agree.

10. Changes to this policy

If we make important changes, we’ll email you before they take effect.