Privacy Policy

Willsure Limited ("Willsure", "we", "us", "our") is the operator of the Willsure platform - an AI-powered estate planning service available at [website URL]. We are registered in England and Wales under company number [company number], with our registered office at [registered address].

We are the data controller for the personal information we collect about you when you use our website and platform. This means we are legally responsible for how we handle your information.

Our Data Protection Officer / privacy contact can be reached at [privacy email] or by post at [postal address].

We are not a law firm and do not provide legal advice. Where we connect you with a solicitor, that solicitor (and their firm) is a separate data controller for the work they do for you, with their own privacy notice.

Information you give us: your name, email address, phone number, and any other details you provide when you register, use our services, or contact us. This includes the information you enter during the Will Writing interview and any documents you upload, such as an existing Will or estate planning documents.

Information from your use of the platform: details about how you use Willsure, the Will profiles and drafts you create, AI analysis results, and correspondence with solicitors through the marketplace.

Information collected automatically: your IP address, browser type, device information, pages visited, and approximate location, collected through cookies and similar technologies (see the Cookies section below).

Information from payment processing: when you make a purchase, we process transaction records (such as the product, amount, and order status). Card details are handled by our payment provider and never stored by us.

To provide our services: running the AI Will health-check, generating Will drafts, producing risk scores and plain-English summaries, and securely storing your documents in your personal vault.

To operate the solicitor marketplace: matching you with verified solicitors based on your needs and location, and enabling you to communicate with them.

To communicate with you: sending service updates, security alerts, life-event reminders, and responses to your enquiries. Where you have given consent, we may also send marketing about Willsure products and services we think may interest you - you can opt out at any time.

To improve and develop our services: analysing how the platform is used, testing new features, and improving the accuracy and quality of our AI tools.

To keep the platform secure and prevent fraud, abuse, and unauthorised access.

To comply with our legal, regulatory, and professional obligations.

We rely on the following lawful bases under the UK GDPR:

Consent (Article 6(1)(a)) - where you have agreed to receive marketing communications or to certain optional processing.

Contract (Article 6(1)(b)) - where processing is necessary to provide the services you have requested, such as generating a Will draft or storing your documents.

Legal obligation (Article 6(1)(c)) - where we are required to process your information by law, such as record-keeping or responding to lawful requests.

Legitimate interests (Article 6(1)(f)) - where we use your information to improve our services, keep the platform secure, or operate the business, provided this does not override your rights and freedoms.

Where your Will or documents contain special category data (such as health, capacity, or family circumstances), we rely on the condition in Article 9(2)(f) (establishment, exercise or defence of legal claims) for the AI-assisted analysis, as documented in our Data Protection Impact Assessment.

We use AI to analyse Wills and estate documents, producing risk scores, risk bands, and plain-English summaries. The AI highlights potential issues, but no decision producing legal or similarly significant effects is made solely by automated means.

For consumer Will scans and drafts, the AI output is provided to you as information. For solicitor-firm Will reviews, a solicitor reviews every AI assessment before any client-facing outcome, and may edit or reject the output entirely.

We have carried out a Data Protection Impact Assessment (DPIA) for our AI-assisted processing, as required under UK GDPR Article 35. A summary is available on request.

Solicitors: when you use the marketplace, we share the information needed to match you with a solicitor and enable them to respond. The solicitor's firm then becomes a separate controller for the work they do for you.

Service providers and sub-processors: we use trusted providers for cloud hosting, AI model inference, email delivery, and payment processing. These providers act on our behalf under contractual confidentiality, security, and data protection obligations, and are not permitted to use your information to train their models.

Enterprise and franchise partners: where you are referred by a partner or served by a franchisee, limited information is shared to provide the service, under contractual data protection terms.

Legal and regulatory bodies: where we are required to do so by law, court order, or regulatory authority.

We do not sell your personal information.

Some of our service providers may process personal information outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as International Data Transfer Agreements (IDTAs) or recognised adequacy mechanisms, in accordance with UK data protection law.

We keep your information only for as long as necessary for the purposes set out in this policy.

Account information: kept for as long as your account is active, and for a reasonable period after closure for record-keeping and dispute resolution.

Wills and estate documents: kept in your secure vault for as long as you use the service. You can request deletion at any time, subject to any legal or regulatory retention obligations.

AI analysis results: kept for as long as the associated document is held, so we can alert you when changes in law or circumstances may mean your Will needs updating. Transient processing data (temporary copies, job logs, and intermediate AI outputs) is purged on a short cycle after each analysis completes.

Marketing consent records: kept until you withdraw consent.

Transaction records: kept for the period required by law and for accounting purposes.

Under UK data protection law, you have the right to:

Access - request a copy of the personal information we hold about you.

Rectification - ask us to correct information that is inaccurate or incomplete.

Erasure - ask us to delete your information where the law allows.

Restriction - ask us to limit how we use your information in certain circumstances.

Objection - object to our processing of your information, including for marketing.

Portability - receive your information in a structured, machine-readable format and reuse it.

Withdraw consent - where processing is based on consent, withdraw it at any time without affecting the lawfulness of processing before withdrawal.

Requests are free in most cases and we will respond within one month. To exercise any of these rights, contact us using the details in the Contact section below.

If you are unhappy with how we have handled your information, you have the right to complain to the Information Commissioner's Office at ico.org.uk or by calling 0303 123 1113, or by post to: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.

We apply industry-standard security measures to protect your personal information, including encryption in transit and at rest, strict access controls, and regular security reviews.

Access to your data is restricted to authorised personnel who need it to provide the service. Each firm's records on the platform are scoped and audited so no other tenant can access them.

In the unlikely event of a personal data breach, we will notify you and the relevant authorities where required by law.

If your browser allows it, our website uses cookies, which are small text files created on your device. These are used to save your preferences and, where applicable, login information. Enabling these cookies is not strictly necessary for the website to work but provides a better browsing experience. You can delete or block these cookies, but some features may not work as intended. We use the following cookies:

Site functionality cookies - allow you to navigate the site and use our features.

Site analytics cookies - allow us to measure and analyse how customers use the site, to improve its functionality and user experience.

The cookie (cookieNoticeDisplayed) is deployed once a visitor has been flagged about our use of cookies by the pop-out notice. It allows the banner to remain closed as you visit different pages on the site.

In addition, the site deploys a number of third-party generated cookies because of the integration of various third-party applications. The cookies of which we are aware include those from Google (PREF, __utma, __utmb, __utmc, __utmv, __utmz, NID, and others), which provide information about visitor numbers and how visitors reached us. We do not have control over these third-party cookies; their privacy policy governs their use and can be found on the relevant provider's website.

You can restrict or block cookies through your browser settings. Visit www.aboutcookies.org for directions on how to block cookies on all major browsers and how to delete cookies already stored. Restricting cookies may impact the functionality of the websites you visit.

Our services are not directed at children under 18, and we do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will delete it.

We may update this policy from time to time. Where a change is significant, we will notify you through the platform or by email. We encourage you to review this page periodically.

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

Email: [privacy email]

Post: Willsure Limited, [postal address]

Or via our Contact Us page.