Privacy Policy

1. Introduction

Hanna Law Group Pty Ltd (ABN 72 664 301 339) ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our NSW Will Generator service ("Service").

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth) and relevant professional obligations under the legal profession uniform law.

2. Information We Collect

2.1 Information You Provide

To prepare your Will, we collect:

• Personal details: Name, title, date of birth, address, occupation, phone number, email address
• Family information: Details of spouse/partner, children, and other family members
• Executor details: Names, addresses, and relationships of appointed executors
• Beneficiary details: Names, addresses, relationships, and share allocations
• Guardian details: Names and addresses of appointed guardians (if applicable)
• Gift information: Descriptions of specific gifts and recipients
• Preferences: Funeral wishes, minor trust ages, and other Will provisions

2.2 Information Collected Automatically

When you use our website, we automatically collect:

• IP address and browser type
• Pages visited and time spent on site
• Referring website
• Device information

2.3 Payment Information

Payment is processed by Stripe. We do not store your full credit card number. Stripe's privacy policy governs their handling of payment data: stripe.com/au/privacy

3. How We Use Your Information

We use your personal information to:

Purpose	Legal Basis
Prepare your Will document	Contract performance
Process your payment	Contract performance
Send your Will and instructions	Contract performance
Conduct solicitor review (if purchased)	Contract performance
Respond to your enquiries	Legitimate interest
Send service-related communications	Legitimate interest
Improve our service	Legitimate interest
Comply with legal obligations	Legal requirement

4. Legal Professional Privilege

Information provided to us for the purpose of obtaining the Solicitor Review service may be subject to legal professional privilege. We will not disclose privileged information without your consent, except as required by law.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on secure servers in Australia. Our backend systems use Google Cloud services, which may process data in various locations. Google's data processing terms apply: Google Cloud Data Processing Terms

5.2 Security Measures

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure access controls
• Regular security reviews
• Staff training on data protection

5.3 Data Breach Response

In the event of a data breach that is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.

6. Data Retention

We retain your personal information for:

• Will data: 7 years from the date of preparation, consistent with our professional obligations and limitation periods
• Payment records: 7 years for tax and accounting purposes
• Website analytics: 26 months

After these periods, data is securely deleted or anonymised.

7. Disclosure of Your Information

We may share your information with:

• Service providers: Google (hosting/analytics), Stripe (payments), email providers - under strict data processing agreements
• Professional advisers: Our accountants, insurers, and legal advisers as necessary
• Regulatory bodies: The Law Society of NSW or other regulators if required
• Law enforcement: If required by law or court order

We will never sell your personal information to third parties for marketing purposes.

8. Cookies and Tracking

Our website uses:

• Essential cookies: Required for the form to function (session management, form progress saving)
• Analytics cookies: Google Analytics to understand how visitors use our site (anonymised IP)

You can control cookies through your browser settings, but disabling essential cookies may prevent the Service from functioning correctly.

9. Your Rights

Under the Privacy Act 1988, you have the right to:

• Access your personal information we hold
• Correct inaccurate or incomplete information
• Request deletion of your information (subject to our legal retention obligations)
• Complain if you believe we have breached the APPs

To exercise these rights, contact us using the details below. We will respond within 30 days.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies.

11. Children's Privacy

Our Service is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified on our website with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Complaints

If you believe we have breached your privacy, please contact us first so we can try to resolve the issue. If you are not satisfied with our response, you can lodge a complaint with the Office of the Australian Information Commissioner:

• Website: www.oaic.gov.au
• Phone: 1300 363 992