This policy explains how SwiftWill ("we", the data controller) handles personal data under UK GDPR and the Data Protection Act 2018. We are registered with the Information Commissioner's Office (ICO) as a data controller; registration is completed before launch and the number is published here.
What personal data does SwiftWill collect?
| Data | Purpose | Lawful basis | Retention |
|---|---|---|---|
| Interview answers (will contents) | Generate your will; power free lifetime updates | Contract (Art. 6(1)(b)) | Until you delete your account |
| Email address | Deliver your will; your account login | Contract (Art. 6(1)(b)) | Until you delete your account |
| Payment record (never card numbers) | Receipts, refunds, accounting | Legal obligation (Art. 6(1)(c)) | 6 years (tax records) |
| Free-template / tracker emails | The stated follow-up sequence only | Consent (Art. 6(1)(a)) | Until you unsubscribe |
How long does SwiftWill keep your data?
We store only what is needed to deliver your will and power free updates. We run no analytics on will contents. Interview answers are encrypted at rest. We do not store your signed will — the wet-ink original is yours and never touches our servers.
Who processes SwiftWill data?
Data is processed by: Stripe (payments — card details go to Stripe, never to us), our transactional email provider (delivering your will and account emails), and Vercel (hosting). Each is bound by a data-processing agreement. Where processing involves transfers outside the UK, appropriate safeguards (such as UK adequacy regulations or standard contractual clauses) apply.
What GDPR rights do you have?
- Access, correct, export or erase your data at any time
- One-click full account and data deletion in the account area, honoured within 30 days, confirmed by email
- Object to or restrict processing; withdraw consent for optional emails with one click
- Complain to the ICO (ico.org.uk) — though we would welcome the chance to fix things first
What will SwiftWill never do with your data?
Sell or share personal data with third parties for their marketing. Use will contents for advertising or profiling. Add you to marketing lists without consent. In this niche, that promise is a trust asset — and it is policy, not just marketing.
Contact for any privacy matter: wills@swiftwill.co.uk. This policy was last reviewed July 2026.