My-Will Privacy Policy

Last Updated: December 17, 2025 | Version: 1.0

1. Introduction

(a) This website (www.my-will.au) (the My-Will Platform) and the services provided through the My-Will Platform are created, operated and controlled by My-Will (ABN: 51320368791) (we, us or our).

(b) We are committed to protecting your privacy and managing your personal information in accordance with the Australian Privacy Principles (APPs) set out in the Privacy Act 1988 (Cth) (Privacy Act).

(c) By accessing and using the My-Will Platform and our services, you agree to this Privacy Policy.

(d) This Privacy Policy outlines how we collect, store, use, process and disclose your personal information, your rights to access and correct your information, and how you may make a privacy complaint.

(e) Last Updated: December 17, 2025 | Version: 1.0

2. Definitions

For the purpose of this Privacy Policy:

(a) Personal Information means information or an opinion about an identified individual, or an individual who is reasonably identifiable, whether the information or opinion is true or not and whether the information or opinion is recorded in a material form or not;

(b) Sensitive Information has the same meaning as in the Privacy Act, including information or opinions about your health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation, criminal record, or membership of political, professional or trade associations;

(c) Services means the estate planning solutions provided by My-Will, including:

  • (i) will creation and document generation;
  • (ii) document storage on the My-Will Platform;
  • (iii) PDF generation and download of legal documents;
  • (iv) customer support services; and
  • (v) any other services made available through the My-Will Platform;

(d) Subscription means an agreement between My-Will and a user to access our Services for a specified period on a recurring payment basis;

(e) Will means a legal document expressing your wishes regarding the distribution of your assets and the care of any minor children after your death;

(f) User Data means all data, information, documents and content uploaded to, created on, or stored on the My-Will Platform by you, including your Wills and estate planning information; and

(g) Third Party Services means external service providers we use to deliver our Services, including payment processors, hosting providers, and document generation services.

3. Information We Collect

3.1 Personal Information

We collect Personal Information that is reasonably necessary to provide our Services and conduct our business. This includes:

(a) Account and Contact Information:

  • Full name, date of birth, email address, phone number
  • Residential address and contact details
  • Username, password and account credentials
  • Age, gender, marital status

(b) Estate Planning Information:

  • Details about your assets and liabilities
  • Beneficiary information (names, addresses, dates of birth, relationships)
  • Executor appointments and contact details
  • Guardian appointments for minor children
  • Your wishes and instructions for asset distribution
  • Family relationship details

(c) Payment and Subscription Information:

  • Payment method details (processed by our payment providers)
  • Billing address and contact information
  • Subscription status and payment history
  • Transaction records

(d) Technical and Usage Information:

  • IP address and device information
  • Browser type and version
  • Pages visited and features used on the My-Will Platform
  • Date, time and duration of visits
  • Referral sources and clickstream data
  • Location information (based on IP address)
  • Cookies and similar tracking technologies

(e) Communications and Support:

  • Content of inquiries, support requests and feedback
  • Email correspondence and chat communications
  • Survey and questionnaire responses

(f) Marketing and Research Data:

  • Marketing preferences and consent records
  • Information about how you heard about us
  • Engagement with our marketing communications

3.2 Sensitive Information

(a) We do not intentionally collect Sensitive Information. However, because our document generation process is partially automated, you may inadvertently include Sensitive Information in your Will (such as health conditions relevant to guardianship decisions).

(b) If you have unintentionally provided Sensitive Information and wish to have it removed, please contact us using the details in Section 15.

3.3 Third Party Information

When you create a Will, you provide us with Personal Information about third parties, including:

  • Executors and alternate executors
  • Beneficiaries (including minor children)
  • Guardians for minor children

By providing this information, you confirm that you are authorized to do so and that you have informed these individuals that their Personal Information has been provided to us.

4. How We Collect Personal Information

4.1 Direct Collection

We collect Personal Information directly from you when you:

  • Create an account on the My-Will Platform
  • Complete your Will
  • Subscribe to our Services
  • Make payment for our Services
  • Contact our customer support
  • Complete forms, surveys or questionnaires
  • Subscribe to our newsletters or marketing communications
  • Interact with us via email, phone or social media

4.2 Automatic Collection

We automatically collect certain information when you use the My-Will Platform through:

  • Cookies and similar tracking technologies
  • Server logs and analytics tools
  • Your browser and device settings

4.3 Third Party Sources

We may collect Personal Information from:

  • Payment processors (Stripe, PayPal)
  • Social media platforms (if you choose to connect your accounts)
  • Publicly available sources for identity verification
  • Executors or beneficiaries after your death (for estate administration)

5. How We Use Your Personal Information

5.1 Primary Purposes

We use your Personal Information to:

(a) Provide and deliver our Services, including:

  • Creating and generating your Will documents
  • Storing your documents securely on the My-Will Platform
  • Generating PDF versions of your documents for download
  • Processing your subscription payments
  • Providing customer support

(b) Manage our relationship with you:

  • Verifying your identity
  • Managing your account and subscription
  • Responding to your inquiries and support requests
  • Communicating important service updates

(c) Improve and develop our Services:

  • Analyzing usage patterns and trends
  • Testing and improving platform functionality
  • Conducting research and development
  • Performing security and fraud prevention measures

(d) Legal and compliance purposes:

  • Complying with legal obligations
  • Enforcing our terms and conditions
  • Protecting our rights and property
  • Preventing fraud and unauthorized access

5.2 Secondary Purposes (With Your Consent)

(a) We may use your Personal Information for marketing purposes, including:

  • Sending newsletters and product updates
  • Notifying you of new features or services
  • Promoting relevant third-party services (such as insurance or legal services)
  • Conducting surveys and requesting feedback

(b) You can opt out of marketing communications at any time using the unsubscribe link in our emails or by contacting us directly.

5.3 De-identified Data

We may use de-identified and aggregated data for:

  • Statistical analysis and reporting
  • Research and benchmarking
  • Platform improvement and optimization

This de-identified data cannot be used to identify you personally.

6. How We Disclose Your Personal Information

6.1 Service Providers and Third Parties

We disclose your Personal Information to trusted service providers who assist us in delivering our Services:

(a) Technology Service Providers:

  • Bubble.io (platform hosting and application infrastructure)
  • Hostinger (website hosting)
  • Google (document generation via Google Docs API)
  • Web developers and IT support providers
  • Cloud storage and backup providers

(b) Payment Processors:

  • Stripe (credit card payments)
  • PayPal (alternative payment processing)
  • Banking and financial institutions

(c) Marketing and Analytics:

  • Google Analytics (website analytics and usage tracking)
  • Facebook (advertising and remarketing, if you see our ads)
  • Email marketing providers (when implemented)

(d) Professional Advisors:

  • Legal advisors and solicitors
  • Accountants and auditors
  • Business consultants
  • Insurance providers

6.2 After Your Death

We may disclose your Will and related information to:

  • Your appointed executors (to assist with probate and estate administration)
  • Legal representatives acting on behalf of your estate
  • Beneficiaries named in your Will (as appropriate for estate administration)

6.3 Legal Requirements

We may disclose your Personal Information if required by law, including:

  • Court orders or subpoenas
  • Requests from government agencies or regulators
  • Law enforcement investigations
  • Legal proceedings or disputes

6.4 Business Transactions

In the event of a merger, acquisition, sale of assets or business restructure, we may transfer your Personal Information to the new entity, subject to the same privacy protections.

7. Cross-Border Disclosure

7.1 Overseas Data Storage and Processing

IMPORTANT: In providing our Services, your Personal Information (including your Will documents) is processed and stored on servers located outside Australia.

(a) United States:

  • Bubble.io (our platform provider) stores data on servers located in the United States, operated by Amazon Web Services (AWS)
  • Google (for PDF document generation) processes your data through servers in the United States
  • Stripe (payment processing) operates from the United States
  • PayPal (payment processing) operates from the United States

(b) United Kingdom and Europe:

  • Hostinger (website hosting) stores data on servers in the United Kingdom
  • Backup copies are stored in Germany

(c) Analytics and Marketing:

  • Google Analytics processes data in the United States
  • Facebook (if you interact with our ads) processes data in the United States

7.2 Data Protection Safeguards

(a) While overseas jurisdictions may have different privacy laws than Australia, we take reasonable steps to ensure our service providers:

  • Implement appropriate security measures
  • Use your data only for the purposes we authorize
  • Comply with contractual privacy obligations

(b) By using our Services, you acknowledge and consent to your Personal Information being processed and stored overseas as described above.

(c) You can contact us using the details in Section 15 if you have questions about overseas data transfers.

7.3 Future Improvements

We are actively working to transition our data storage and processing to Australian-based providers to keep your information within Australia wherever possible.

8. Data Security

8.1 Security Measures

We implement reasonable security measures to protect your Personal Information, including:

(a) Technical Security:

  • Secure Sockets Layer (SSL) encryption for data transmission
  • Encryption of sensitive data at rest
  • Secure server infrastructure
  • Regular security updates and patches
  • Firewall protection and intrusion detection

(b) Administrative Security:

  • Access controls and password protection
  • Employee confidentiality obligations
  • Regular security training for staff
  • Vendor security assessments

(c) Physical Security:

  • Secure data centers operated by our hosting providers
  • Restricted physical access to servers
  • Backup and disaster recovery procedures

8.2 Your Responsibility

You are responsible for:

  • Keeping your account credentials confidential
  • Using a strong, unique password
  • Logging out after using the My-Will Platform
  • Notifying us immediately of any suspected unauthorized access

8.3 Limitations

(a) No internet transmission is completely secure. While we take reasonable steps to protect your Personal Information, we cannot guarantee absolute security.

(b) You provide information to us at your own risk, and we are not liable for unauthorized access or disclosure that occurs despite our security measures.

9. Notifiable Data Breaches

(a) If we become aware of a data breach that is likely to result in serious harm to you, we will:

  • Investigate the breach promptly
  • Notify you as soon as practicable
  • Notify the Office of the Australian Information Commissioner (OAIC)
  • Take steps to remediate the breach and prevent future incidents

(b) Our notification will include:

  • A description of the breach
  • The kind of information involved
  • Recommendations for steps you can take
  • Contact details for further information

(c) We comply with the Notifiable Data Breaches (NDB) scheme under Part IIIC of the Privacy Act.

10. Data Retention and Deletion

10.1 Retention Periods

We retain your Personal Information for as long as necessary to:

  • Provide our Services to you
  • Maintain your account and subscription
  • Comply with legal obligations (including record-keeping requirements)
  • Resolve disputes and enforce our agreements

(a) Active Accounts: While your account remains active and subscribed

(b) Wills and Legal Documents: We retain your Will and related documents indefinitely to ensure they remain available to your executors after your death, unless you specifically request deletion

(c) Payment Records: We retain billing and payment information for 7 years to comply with taxation and financial regulations

(d) Marketing Data: We retain marketing preferences and communications until you opt out or request deletion

10.2 Account Closure

(a) If you close your account, you may request that we delete your Personal Information, except for:

  • Information we are required by law to retain
  • De-identified data used for research and analytics
  • Backup copies (which will be deleted in accordance with our normal backup cycles)

(b) Your Will and legal documents will be retained unless you specifically request their deletion, to ensure availability for your estate.

10.3 Deletion Requests

To request deletion of your Personal Information, contact us using the details in Section 15. We will respond within 30 days and complete deletion within a reasonable timeframe, subject to legal retention requirements.

11. Your Rights and Choices

11.1 Access to Your Personal Information

(a) You have the right to request access to the Personal Information we hold about you.

(b) To request access:

  • Contact us using the details in Section 15
  • Provide proof of identity
  • Specify what information you wish to access

(c) We will respond to your request within 30 days.

(d) We may charge a reasonable fee to cover our costs of providing access to large amounts of information.

11.2 Correction of Personal Information

(a) You have the right to request correction of inaccurate, out-of-date, incomplete or misleading Personal Information.

(b) You can update most information directly through your My-Will Platform account settings.

(c) For information you cannot update yourself, contact us using the details in Section 15.

(d) We will respond to correction requests within 30 days and notify any third parties to whom we have disclosed the information (where appropriate).

(e) If we refuse to correct your information, we will provide written reasons and information about how to complain.

11.3 Refusal of Access or Correction

We may refuse access or correction requests in limited circumstances permitted by the Privacy Act, including where:

  • Access would pose a serious threat to life, health or safety
  • Access would unreasonably impact another person’s privacy
  • The request is frivolous or vexatious
  • Access would prejudice legal proceedings or enforcement activities
  • Denying access is required by law

If we refuse your request, we will provide written reasons and inform you of complaint mechanisms.

12. Direct Marketing

12.1 Marketing Communications

(a) We may use your Personal Information to send you marketing communications about:

  • New features and services
  • Platform updates and improvements
  • Relevant third-party services (insurance, legal services, estate planning advice)
  • Special offers and promotions
  • Educational content about estate planning

(b) We will only send marketing communications if you have:

  • Consented to receive them (opted in); or
  • Not opted out (for existing customers)

12.2 Opt-Out

You can opt out of marketing communications at any time by:

  • Clicking the “unsubscribe” link in any marketing email
  • Updating your communication preferences in your account settings
  • Contacting us directly using the details in Section 15

(b) Please note: Opting out of marketing does not affect service-related communications (such as account notifications, security alerts, or subscription reminders).

13. Cookies and Tracking Technologies

13.1 What Are Cookies

Cookies are small text files stored on your device when you visit the My-Will Platform. We use cookies and similar technologies to improve your experience and understand how you use our platform.

13.2 Types of Cookies We Use

(a) Essential Cookies:

  • Required for the My-Will Platform to function
  • Enable you to log in and access your account
  • Remember your preferences during your session

(b) Analytics Cookies:

  • Help us understand how visitors use the platform
  • Collect information about page visits, traffic sources, and user behavior
  • Used via Google Analytics

(c) Marketing Cookies (Future):

  • Track your visits across websites
  • Enable targeted advertising (Facebook Pixel)
  • Measure advertising effectiveness

13.3 Managing Cookies

(a) You can control cookies through your browser settings:

  • Block all cookies
  • Accept cookies from specific websites only
  • Delete cookies after each browsing session
  • Receive notifications before cookies are stored

(b) Please note: Disabling essential cookies may prevent you from using certain features of the My-Will Platform.

13.4 Third-Party Cookies

Our platform may contain cookies set by third parties, including:

  • Google Analytics
  • Payment processors (Stripe, PayPal)
  • Social media platforms (if you interact with embedded content)

These third parties have their own privacy policies governing their use of cookies and data.

14. Third-Party Links and Services

(a) The My-Will Platform may contain links to third-party websites, services or resources.

(b) We are not responsible for the privacy practices or content of third-party websites.

(c) Third-party websites have their own privacy policies, and we encourage you to review them before providing any Personal Information.

(d) Links to third-party websites do not constitute an endorsement of those websites or their services.

15. Privacy Complaints

15.1 How to Make a Complaint

(a) If you believe we have breached the Privacy Act or this Privacy Policy, you can lodge a complaint by contacting us at:

(b) Please provide:

  • Your contact details
  • Details of the complaint
  • Any supporting documentation
  • The outcome you are seeking

15.2 Our Complaints Process

(a) We treat all privacy complaints seriously and will:

  • Acknowledge your complaint within 5 business days
  • Investigate your complaint thoroughly
  • Respond with our findings within 30 days
  • Extend the timeframe if the investigation is complex (we will notify you)

(b) All complaints are handled:

  • In a confidential manner
  • Without affecting your existing service or subscription
  • By trained staff or our Privacy Officer

15.3 If You’re Not Satisfied

(a) If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

16. Changes to This Privacy Policy

(a) We may update this Privacy Policy from time to time to reflect:

  • Changes to our Services or business practices
  • New legal or regulatory requirements
  • Improvements to our privacy practices
  • Technical changes to the My-Will Platform

(b) We will notify you of significant changes by:

  • Posting the updated policy on the My-Will Platform
  • Updating the “Last Updated” date at the top of this policy
  • Sending you an email notification (for material changes)

(c) Your continued use of our Services after changes take effect constitutes acceptance of the updated Privacy Policy.

(d) We encourage you to review this Privacy Policy regularly to stay informed about how we protect your information.

17. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or our privacy practices, please contact us:

Email: support@my-will.au

Privacy Officer: Privacy Team

Response Time: We aim to respond to all privacy inquiries within 5 business days.

© 2025 My-Will. All rights reserved.