Privacy Policy

1. Introduction

QuickWills UAE ("we", "us", or "our") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, process, and protect your information when you use our online will creation platform.

This policy applies to all users of our website and services. By using our platform, you consent to the data practices described in this policy. We process personal data in accordance with the UAE Personal Data Protection Law (PDPL, Federal Decree-Law No. 45 of 2021) and applicable Abu Dhabi Global Market (ADGM) data protection requirements.

2. Information We Collect

2.1 Personal Information

When you create an account and use our services, we collect:

• Contact Information: Name, email address, phone number, physical address
• Identification Information: Date of birth, nationality, passport details, Emirates ID
• Family Information: Spouse details, children's information, family member contacts
• Financial Information: Payment details, asset information, beneficiary details
• Legal Information: Executor details, guardian information, will preferences

2.2 Technical Information

• IP address and location data
• Browser type and version
• Device information and operating system
• Usage patterns and navigation data
• Cookies and similar tracking technologies

2.3 Communication Data

• Customer support inquiries and responses
• Email communications and preferences
• Feedback and survey responses
• Marketing communication preferences

2.4 Sensitive Personal Data

To help determine which Abu Dhabi will route fits your circumstances (ADGM or ADJD), the eligibility checker may ask whether you are non-Muslim or have never been Muslim. This religious information is classified as sensitive personal data under the UAE PDPL (Article 1). We process it only where you provide your explicit consent, solely to work out the appropriate route, and we do not use it for any other purpose. In the eligibility checker, the raw religion answer is not stored — only the derived route or outcome is saved.

2.5 Waitlist and Pre-Launch Sign-Ups

Before launch, we invite visitors to join a waitlist. If you submit your email address (and optionally your name) through a waitlist form, we store it to notify you when the service becomes available and to send related updates. You can ask us to remove your details from the waitlist at any time by contacting support@quickwills.ae.

3. How We Use Your Information

3.1 Service Provision

• Creating and managing your will documents
• Processing payments and managing accounts
• Providing customer support and technical assistance
• Facilitating document translation and notarisation processes
• Ensuring compliance with applicable requirements and requirements verification

3.2 Platform Improvement

• Analyzing usage patterns to improve user experience
• Developing new features and services
• Conducting security monitoring and fraud prevention
• Performing system maintenance and optimization

3.3 Legal and Compliance

• Complying with legal obligations and regulatory requirements
• Responding to legal requests and court orders
• Protecting our rights and preventing illegal activities
• Maintaining records as required by law

4. Information Sharing and Disclosure

4.1 Third-Party Service Providers

We may share your information with trusted third parties who assist us in:

• Payment Processing: Secure payment gateways and processors
• Cloud Storage: Secure document storage and backup services
• Customer Support: Help desk and communication platforms
• Analytics: Usage analytics and performance monitoring
• Translation Services: Certified translation partners

All third parties are contractually obligated to protect your information and use it only for specified purposes.

4.2 Legal Requirements

We may disclose your information when required by law or to:

• Comply with court orders, subpoenas, or legal processes
• Respond to government or regulatory requests
• Protect our rights, property, or safety
• Investigate fraud or illegal activities
• Enforce our Terms and Conditions

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity, subject to the same privacy protections.

5. Data Security Measures

5.1 Technical Safeguards

• Encryption: All data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication and role-based access
• Network Security: Firewalls, intrusion detection, and monitoring
• Regular Audits: Penetration testing and security assessments
• Backup Systems: Secure, encrypted data backups

5.2 Operational Safeguards

• Employee training on data protection and privacy
• Background checks for staff with data access
• Incident response procedures
• Regular security updates and patches
• Physical security for data centers

5.3 Data Breach Response

In the unlikely event of a data breach, we will notify affected users within 72 hours and provide detailed information about the incident, steps taken to address it, and recommendations for protecting your information.

6. Your Rights and Choices

6.1 Access and Control

You have the right to:

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data (subject to legal requirements)
• Portability: Receive your data in a structured, machine-readable format
• Restriction: Limit how we process your information
• Objection: Object to processing based on legitimate interests

6.2 Communication Preferences

• Opt out of marketing communications at any time
• Choose communication channels and frequency
• Update contact preferences in your account settings

6.3 Account Management

• Update personal information through your account
• Download or delete your documents
• Close your account (subject to legal retention requirements)

7. Data Retention

We retain your information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records and audit trails

Indicative retention periods include:

• Account and will data: retained while your account is active and for up to 7 years after closure to meet legal and audit obligations
• Payment records: retained for the period required by applicable tax and financial regulations (typically 5–7 years)
• Waitlist sign-ups: retained until launch and for up to 12 months afterwards, or until you ask us to delete them
• Analytics and advertising identifiers (including Google click IDs / gclid): retained for up to 24 months

Where data is no longer required, we securely delete or anonymise it.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UAE — including the United States — by the service providers we rely on to operate the platform:

• Railway: application hosting and database infrastructure
• Google (Analytics & Ads): marketing analytics and conversion measurement
• Stripe: payment processing
• Resend: transactional and notification email delivery

Where we transfer personal data internationally, we rely on appropriate safeguards recognised under the UAE PDPL, such as standard contractual clauses and, where applicable, adequacy decisions by the relevant authorities.

9. Cookies and Tracking Technologies

9.1 Types of Cookies

We use the following types of cookies:

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us understand how you use our platform
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

9.2 Analytics and Advertising

We use two complementary tools to understand how our platform is used and to measure our marketing:

• Privacy-First Analytics (Umami): a cookieless analytics platform that collects only anonymous, aggregated usage statistics. It runs by default and does not track you across other websites.
• Google Analytics & Google Ads (with your consent): where you accept marketing cookies, we use Google Analytics and Google Ads to measure the performance of our advertising. These services may set cookies, share data with Google, and capture the Google click identifier (gclid) appended to your visit so we can attribute waitlist sign-ups to a specific ad. They load only after you grant consent (managed via Google Consent Mode v2), and you can withdraw consent at any time.

Our analytics and advertising practices are designed to comply with the UAE PDPL and other applicable privacy regulations such as the GDPR.

9.3 Cookie Management

You can control cookies through your browser settings or our cookie preference center. Note that disabling certain cookies may affect platform functionality.

10. Children's Privacy

Our services are not intended for individuals under 21 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it immediately.

11. Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes via email or platform notification and update the "Last updated" date at the top of this policy.

13. Contact Information

For questions about this Privacy Policy or to exercise your rights, please contact us:

14. Regulatory Authority

If you believe we have not adequately addressed your privacy concerns, you may lodge a complaint with the UAE Data Protection Authority or other relevant supervisory authority in your jurisdiction.