Privacy Policy

1. Introduction

EasyWills ("we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you use our online will creation platform.

This policy applies to all users of our website and services. By using our platform, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Personal Information

When you create an account and use our services, we collect:

• Contact Information: Name, email address, phone number, physical address
• Identification Information: Date of birth, nationality, passport details, Emirates ID
• Family Information: Spouse details, children's information, family member contacts
• Financial Information: Payment details, asset information, beneficiary details
• Legal Information: Executor details, guardian information, will preferences

2.2 Technical Information

• IP address and location data
• Browser type and version
• Device information and operating system
• Usage patterns and navigation data
• Cookies and similar tracking technologies

2.3 Communication Data

• Customer support inquiries and responses
• Email communications and preferences
• Feedback and survey responses
• Marketing communication preferences

3. How We Use Your Information

3.1 Service Provision

• Creating and managing your will documents
• Processing payments and managing accounts
• Providing customer support and technical assistance
• Facilitating document translation and notarization processes
• Ensuring legal compliance and requirements verification

3.2 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and services
• Conducting security monitoring and fraud prevention
• Performing system maintenance and optimization

3.3 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Responding to legal requests and court orders
• Protecting our rights and preventing illegal activities
• Maintaining records as required by law

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in:

• Payment Processing: Secure payment gateways and processors
• Cloud Storage: Secure document storage and backup services
• Customer Support: Help desk and communication platforms
• Analytics: Usage analytics and performance monitoring
• Translation Services: Certified translation partners

All third parties are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or legal processes
• Respond to government or regulatory requests
• Protect our rights, property, or safety
• Investigate fraud or illegal activities
• Enforce our Terms and Conditions

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security Measures

5.1 Technical Safeguards

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based access
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Audits: Penetration testing and security assessments
• Backup Systems: Secure, encrypted data backups

5.2 Operational Safeguards

• Employee training on data protection and privacy
• Background checks for staff with data access
• Incident response procedures
• Regular security updates and patches
• Physical security for data centers

5.3 Data Breach Response

In the unlikely event of a data breach, we will notify affected users within 72 hours and provide detailed information about the incident, steps taken to address it, and recommendations for protecting your information.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to processing based on legitimate interests

6.2 Communication Preferences

• Opt out of marketing communications at any time
• Choose communication channels and frequency
• Update contact preferences in your account settings

6.3 Account Management

• Update personal information through your account
• Download or delete your documents
• Close your account (subject to legal retention requirements)

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records and audit trails

Specific retention periods vary by data type and are detailed in our data retention schedule, available upon request.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UAE for cloud storage and processing purposes. We ensure appropriate safeguards are in place, including:

• Adequacy decisions by relevant authorities
• Standard contractual clauses
• Certification schemes and codes of conduct
• Binding corporate rules

9. Cookies and Tracking Technologies

9.1 Types of Cookies

We use the following types of cookies:

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us understand how you use our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

9.2 Analytics and Usage Tracking

We use privacy-focused analytics tools to understand how our platform is used and to improve our services. Our analytics approach includes:

• Privacy-First Analytics: We use Umami, a cookieless analytics platform that respects user privacy
• No Personal Data Collection: Our analytics collect only anonymous usage statistics
• No Cross-Site Tracking: We do not track users across other websites
• Data Sovereignty: All analytics data is stored on our own servers, not shared with third parties
• GDPR Compliant: Our analytics approach complies with GDPR and other privacy regulations

The analytics data helps us understand general usage patterns, popular features, and areas for improvement, all while maintaining your privacy and anonymity.

9.3 Cookie Management

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect platform functionality.

10. Children's Privacy

Our services are not intended for individuals under 21 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it immediately.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or platform notification and update the "Last updated" date at the top of this policy.

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us:

14. Regulatory Authority

If you believe we have not adequately addressed your privacy concerns, you may lodge a complaint with the UAE Data Protection Authority or other relevant supervisory authority in your jurisdiction.