Privacy Policy

Our Commitment

Creating a will requires sharing sensitive personal information. We protect your data with bank-level security and full GDPR compliance.

Who We Are

WUHLD Limited (registered in England and Wales, company number 16809188) is registered with the Information Commissioner's Office (ICO) under registration number ZC024125 as a data controller. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Collected

To create your legally binding will, we collect:

• Personal Information: Name, date of birth, contact details, marital status
• Family Information: Details about your spouse/partner, children, and other beneficiaries
• Asset Information: General information about your property, financial assets, and valuable possessions
• Will Preferences: Your choices regarding executors, guardians, asset distribution, and funeral wishes
• Account Information: Email address and password (encrypted) for your WUHLD account
• Payment Information: Credit/debit card details for processing your payment (processed securely through Stripe)

How We Use Data

We use your information solely for:

• Creating your legally binding will document
• Managing your WUHLD account
• Processing your payment
• Providing customer support
• Sending important updates about your will or our service
• Improving our will creation platform

We never sell your personal information to third parties or use it for purposes other than those listed above without your explicit consent.

Data Storage

All your personal data is stored on secure servers located within the European Union (specifically in Ireland). We do not transfer your data outside of the UK or EU, ensuring it remains protected under UK GDPR and EU data protection laws at all times.

Sensitive will data is field-level encrypted using AES-256-GCM before it is written to the database, so only encrypted values are stored at rest.

Third-Party Providers

We work with three trusted service providers to operate our platform:

Data Security

We implement robust security measures to protect your information:

• Bank-level encryption (256-bit SSL/TLS) for all data transmission
• Field-level AES-256-GCM encryption of sensitive personal information before it reaches the database
• Regular security audits and vulnerability testing
• Strict access controls limiting employee access to personal data
• Two-factor authentication available for your account security
• Automated encrypted backups stored in geographically separate locations

Data Retention

We retain your personal information and will data for as long as you maintain an active account with WUHLD. This allows you to access, edit, and re-download your will at any time.

If you do not log in to your account for 7 consecutive years, we may contact you to confirm whether you wish to keep your account active.

Account Deletion

You can delete your account at any time through your account settings or by contacting us at hello@wuhld.com. When you delete your account:

• Immediate deletion: All your personal information, will data, and account details are permanently deleted from our systems immediately.
• No recovery: Once deleted, your data cannot be recovered. Please ensure you have downloaded and saved your will PDF before deleting your account.
• Backup removal: Your data is also removed from our encrypted backups within 30 days.

Important: WUHLD only stores the digital template of your will. The legally binding will is the physical document you print, sign, and witness. Deleting your account does not affect the validity of your signed physical will.

Your Rights

Under UK data protection law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to certain processing of your information
• Request restriction of processing
• Request transfer of your information
• Withdraw consent at any time

To exercise these rights, please contact us at hello@wuhld.com.

Cookies

Our website uses cookies to enhance your experience and help us improve our services. We have a dedicated Cookie Policy that provides detailed information about the types of cookies we use, how they work, and how you can manage your cookie preferences.

Data Breaches

In the unlikely event of a data breach that affects your personal information, we will:

• Notify the ICO within 72 hours of becoming aware of the breach
• Notify affected users by email as soon as reasonably possible, explaining the nature of the breach and steps we are taking
• Provide guidance on steps you can take to protect yourself
• Take immediate action to secure our systems and prevent further unauthorized access

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by email or through our website. The updated policy will be posted on this page with a revised "Last Updated" date.