Data Security

1. Scope

This statement describes the technical and organisational measures ExpertWill.ae / Nathan and Nathan Human Resources Consultancies LLC applies to personal data processed through the platform.

It supplements our Privacy Policy, which explains what information we collect, why we collect it, and the rights available to you. Where this statement and the Privacy Policy overlap, the Privacy Policy governs how data is used and shared.

2. Our role

We act as the controller of the personal data you provide when you create an account and prepare a Will through the platform.

Where a Will is submitted to the Abu Dhabi Judicial Department (ADJD), that authority processes the submitted document under its own procedures and record-keeping obligations, which are outside our control.

3. Data we protect

The platform handles identity and family information that is sensitive by nature, including identification documents, dates of birth, addresses, contact details, family relationships, asset details, and the identities of beneficiaries, guardians, executors, and trustees.

We treat all of it as confidential, and limit collection to what is required to prepare and register a Will.

4. Technical measures

• AES-256 encryption for data at rest, and TLS (HTTPS) for data in transit
• Uploaded identity documents stored in access-controlled object storage, not served publicly
• One-time-passcode sign-in, so account access is tied to a verified email address or mobile number
• Rate limiting and monitoring on authentication and submission endpoints to deter misuse
• Will content generated automatically from your answers, with no requirement for staff to read it in order for the platform to function

5. Organisational measures

• Access to customer records is restricted to authorised personnel who need it to provide support
• Administrative access to the platform is authenticated separately from customer accounts
• Payment card details are handled by our third-party payment provider and are not stored on our systems
• Third-party providers are engaged for defined purposes such as hosting, email, messaging, and payment processing

6. Retention

We retain your account and will records for as long as your account remains active, so that your Will can be revisited and updated as your circumstances change.

Where we are required to retain records to meet legal, regulatory, accounting, or tax obligations, we retain them for the period required and then delete or anonymise them.

7. Your rights

You may request access to the personal data we hold about you, ask us to correct inaccurate information, or ask us to delete your account and associated records.

Requests relating to a Will that has already been submitted to or registered with ADJD may be limited by that authority's own record-keeping requirements.

To make a request, contact us at support@expertwill.ae.

8. Incident handling

We maintain monitoring intended to detect unauthorised access to the platform.

Where a personal data breach occurs that is likely to affect you, we will notify affected users and the relevant authorities in line with applicable UAE data protection law.

9. Contact

Questions about this statement, or about how your data is handled, can be sent to support@expertwill.ae or addressed to Nathan and Nathan Human Resources Consultancies LLC.