Privacy Policy

Last updated: August 2026

Group Alba Nova Limited (company number SC838019), 3 Hill Street, Third Floor, New Town, Edinburgh, Scotland, EH2 3JP, is the data controller for Wills by NexIntake. VAT number: GB499900238. Contact: hello@nexintake.com.

What we collect

Will intake information you provide in chat or forms (for example name, date of birth, address, family and estate details, executors, gifts, guardians). This can include information about other people you name in your will.
Checkout and payment data needed to take payment (such as name, email, billing address, and payment status). We do not store full card numbers.
Account email if you create a free magic-link account after payment.
Device / session token stored in your browser so we can resume your draft and allow download on the same device before an account is linked.
Lead and marketing details if you submit a suitability checklist or email capture form, including whether you opted in to marketing emails.
Technical data such as IP address and basic logs needed to secure and operate the Service.
Contact messages if you email us or use our contact form.
Marketing attribution such as UTM parameters or click IDs when you arrive from a campaign link (stored in a first-party cookie so we can understand which channels work).

Purposes and lawful bases

Contract to create your will draft, take payment, deliver PDFs, and provide 30-day edits where you have an account.
Legitimate interests to secure the Service, prevent abuse, improve reliability, understand marketing performance at an aggregated level, and handle support requests.
Legal obligation for accounting and tax records where required.
Consent where we ask for it (for example optional marketing emails). You can withdraw consent at any time via the unsubscribe link in those emails or by contacting us.

How we share data

We use carefully selected service providers under contract to help us run the Service. The main categories are:

Hosting and database (Supabase / infrastructure providers) to store drafts, accounts, and related records securely.
Payments (Stripe) to process checkout. Card details are handled by Stripe, not stored by us.
Email delivery (SendGrid) for transactional messages (drafts, receipts, checklist results) and, where you consent, marketing messages.
Hosting / CDN (Vercel) to serve the website and APIs.
AI / language processing providers used only to help gather your answers and produce your documents. They are instructed not to use your will contents to train public AI models.
Contact form delivery (Web3Forms or equivalent) when you message us via the contact page.
Error monitoring (Sentry) with settings intended to avoid sending will contents or unnecessary personal data.

We do not sell your personal data. We may also disclose information if required by law, or to protect our rights, users, or the security of the Service.

Retention

Unpaid drafts: typically up to 30 days, then deleted or anonymised.
Paid wills and related records: up to 7 years for legal, accounting, and support purposes, unless a longer period is required by law or a shorter period is agreed after a deletion request where permitted.
Account authentication records: while your account remains and as needed for security.
Marketing attribution cookie: up to 90 days from first visit.
Marketing email records: until you unsubscribe or ask us to delete where permitted.

International transfers

Some of our service providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or standard contractual clauses.

Your rights

Under UK GDPR you may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where processing is consent-based. Email hello@nexintake.com. You may complain to the Information Commissioner’s Office at ico.org.uk.

Cookies and similar technologies

We use the following cookies and similar technologies:

Essential session / auth cookies to keep you signed in and secure the Service.
Draft session token (cookie and/or local storage) so you can resume your will on the same device before an account is linked.
Cookie preference (wills_cookie_consent, up to 180 days) to remember whether you accepted or rejected non-essential cookies.
Attribution cookie (wills_attribution, up to 90 days) to remember how you found us (for example UTM tags or ad click IDs).
Anonymous analytics id in local storage when product analytics is enabled, to understand usage of our own site (not sold to advertisers).
Vercel Web Analytics (first-party, cookieless) to count visitors and page views on this site. It does not use advertising cookies.
Google Ads tag (Google advertising cookies and related storage) when you accept non-essential cookies. We use this to measure advertising performance and completed purchases. Until you accept, Google Consent Mode keeps ads storage denied (cookieless / limited pings only). You can reject non-essential cookies via the banner.

We show a cookie banner when Google Ads measurement is enabled so you can accept or reject non-essential ads cookies. Essential cookies do not require that choice. For more about how Google uses data, see Google's advertising policies and privacy materials.

Children and other people

The Service is not intended for anyone under 18. If you include details about children or other people in your will (for example beneficiaries or guardians), you should only provide information you are entitled to share for that purpose.

Changes

We may update this policy from time to time. The “Last updated” date on this page will change when we do.

What we collect

Will intake information you provide in chat or forms (for example name, date of birth, address, family and estate details, executors, gifts, guardians). This can include information about other people you name in your will.

Checkout and payment data needed to take payment (such as name, email, billing address, and payment status). We do not store full card numbers.

Account email if you create a free magic-link account after payment.

Device / session token stored in your browser so we can resume your draft and allow download on the same device before an account is linked.

Lead and marketing details if you submit a suitability checklist or email capture form, including whether you opted in to marketing emails.

Technical data such as IP address and basic logs needed to secure and operate the Service.

Contact messages if you email us or use our contact form.

Marketing attribution such as UTM parameters or click IDs when you arrive from a campaign link (stored in a first-party cookie so we can understand which channels work).

Purposes and lawful bases

Contract to create your will draft, take payment, deliver PDFs, and provide 30-day edits where you have an account.

Legitimate interests to secure the Service, prevent abuse, improve reliability, understand marketing performance at an aggregated level, and handle support requests.

Legal obligation for accounting and tax records where required.

Consent where we ask for it (for example optional marketing emails). You can withdraw consent at any time via the unsubscribe link in those emails or by contacting us.

How we share data

We use carefully selected service providers under contract to help us run the Service. The main categories are:

Hosting and database (Supabase / infrastructure providers) to store drafts, accounts, and related records securely.

Payments (Stripe) to process checkout. Card details are handled by Stripe, not stored by us.

Email delivery (SendGrid) for transactional messages (drafts, receipts, checklist results) and, where you consent, marketing messages.

Hosting / CDN (Vercel) to serve the website and APIs.

AI / language processing providers used only to help gather your answers and produce your documents. They are instructed not to use your will contents to train public AI models.

Contact form delivery (Web3Forms or equivalent) when you message us via the contact page.

Error monitoring (Sentry) with settings intended to avoid sending will contents or unnecessary personal data.

We do not sell your personal data. We may also disclose information if required by law, or to protect our rights, users, or the security of the Service.

Retention

Unpaid drafts: typically up to 30 days, then deleted or anonymised.

Paid wills and related records: up to 7 years for legal, accounting, and support purposes, unless a longer period is required by law or a shorter period is agreed after a deletion request where permitted.

Account authentication records: while your account remains and as needed for security.

Marketing attribution cookie: up to 90 days from first visit.

Marketing email records: until you unsubscribe or ask us to delete where permitted.

Cookies and similar technologies

We use the following cookies and similar technologies:

Essential session / auth cookies to keep you signed in and secure the Service.

Draft session token (cookie and/or local storage) so you can resume your will on the same device before an account is linked.

Cookie preference (wills_cookie_consent, up to 180 days) to remember whether you accepted or rejected non-essential cookies.

Attribution cookie (wills_attribution, up to 90 days) to remember how you found us (for example UTM tags or ad click IDs).

Anonymous analytics id in local storage when product analytics is enabled, to understand usage of our own site (not sold to advertisers).

Vercel Web Analytics (first-party, cookieless) to count visitors and page views on this site. It does not use advertising cookies.

Google Ads tag (Google advertising cookies and related storage) when you accept non-essential cookies. We use this to measure advertising performance and completed purchases. Until you accept, Google Consent Mode keeps ads storage denied (cookieless / limited pings only). You can reject non-essential cookies via the banner.