DPDP Act 2023 Compliant

Privacy Policy

Transparency is key to trust. Learn how we collect, use, and protect your personal data at "Where There Is a Will".

Last updated: October 28, 2025 Effective: October 21, 2025

1 Introduction

We are committed to protecting your privacy and ensuring the security of your personal data. This policy explains your privacy rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws of India.

2 Information We Collect

To provide our digital estate planning services, we collect specific categories of data:

👤

Identity Information

Name, date of birth, age, gender, father's/spouse's name, and photographs.

📞

Contact Information

Email address, phone number, residential and mailing address, emergency contact details.

🆔

Government Identifiers

PAN, Aadhaar reference, passport, voter ID, and driving license number.

🏠

Asset Information

Property details, bank accounts, investments, vehicles, jewelry, and business interests.

💳

Financial Information

Payment transactions, billing address, invoice history, and subscription details.

📧

Communication Data

Support queries, feedback, and correspondence with our team.

Security Note: We do not store complete credit/debit card information. All payment data is securely processed by Razorpay, an RBI-approved payment aggregator.

3 Purpose of Processing

Service Delivery

To create, store, manage, and deliver your draft Will and related documents.

Account Management

To create and manage your account, subscriptions, and user preferences.

Payment Processing

To process payments, prevent fraud, and maintain transaction records.

Communication

To send service updates, notifications, support responses, and important alerts.

Security & Compliance

To protect against unauthorized access, fraud, and security threats while ensuring legal compliance.

4 Data Security Measures

We implement industry-standard security measures as required by Section 8(5) of the DPDP Act:

Access Controls

MFA & Role-based Access

Security Audits

Regular Penetration Testing

24/7 Monitoring

Real-time Incident Response

5 Retention & Deletion

Data TypeRetention Period
Account InformationDuration of active account
Will DocumentsUntil deletion requested
Payment Records7 years from transaction
Communication Logs2 years
Inactive Accounts3 years of inactivity

6 Your Privacy Rights

📖

Right to Access

Request a summary and copy of your personal data.

Section 11
✏️

Right to Correction

Request correction of inaccurate or incomplete data.

Section 12(2)
🗑️

Right to Erasure

Request deletion of your data once the purpose is fulfilled. without endangering the overall structural data integrity of the system

Section 12(3)
🚫

Right to Withdraw Consent

Withdraw consent for data processing at any time.

Section 6(4)
👤

Right to Nominate

Nominate someone to exercise rights after death.

Section 14(1)
⚖️

Grievance Redressal

File complaints with our Grievance Officer.

Section 13

Grievance Redressal

In accordance with the Information Technology Act, 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below:

Grievance Officer

Protection Officer

Response Time

7 working days

Registered Address

41/1851 Dhruva Layout, Veekshanam Road, Kochi, North Kaloor, Arangath Pullepady, Ernakulam, Kerala 682018

Where There Is A Will

Planning Your Future