Privacy Policy

wassiya is an online Islamic Will generation service operating in Canada. We help Canadian Muslims create Sharia-compliant wills that satisfy the legal requirements of their province. Our registered email for privacy matters is info@wassiya.ca.

We are the data controller for the personal information you provide to us. If you have any questions about how we handle your personal information, please contact our Privacy Officer at info@wassiya.ca.

We collect personal information that is necessary to provide you with our services, including:

• Identity information: Your full legal name, date of birth, and marital status.
• Contact information: Email address, phone number, and province of residence.
• Estate information: Details about your assets, debts, heirs, beneficiaries, executors, and guardians.
• Account credentials: Email address and hashed password.
• Technical information: IP address, browser type, device type, pages visited, and interaction data.
• Consent records: The date and time you accepted our policies.

We do not collect or store credit card details. Payment processing is handled by Stripe, governed by Stripe's Privacy Policy.

• To create, generate, and deliver your Islamic Will document.
• To manage your account and provide customer support.
• To process payment for our services.
• To comply with legal obligations under Canadian federal and provincial law.
• To improve and optimize our website and services.
• To send service-related communications (e.g., password resets, document notifications).
• To send marketing communications, only where you have provided explicit consent under CASL. You may withdraw consent at any time.
• To maintain audit logs and detect security incidents.

• Your consent: At registration, you expressly consent to this Privacy Policy. You may withdraw consent at any time, subject to legal restrictions.
• Contractual necessity: We need certain information to generate your will document.
• Legal obligation: We may be required to process or disclose your information to comply with applicable law.

Our website uses cookies and similar technologies:

• Strictly necessary cookies: Required for the website to function (e.g., session management, CSRF protection).
• Analytics cookies: Help us understand how visitors use our site.
• Functional cookies: Remember your preferences, such as your selected language.

You can control or disable cookies through your browser settings. We honour your browser's "Do Not Track" signal by disabling analytics tracking when it is enabled.

We do not sell your personal information. We may share it only in these limited circumstances:

• Service providers: Trusted third-party vendors who process data on our behalf (cloud hosting, payment processing, email delivery), bound by confidentiality agreements.
• Legal requirements: When required by Canadian law, court order, or to protect the rights and safety of our users.
• Business transfer: If we merge with or are acquired by another organization, subject to the same protections. You will be notified before any such transfer.

• If you register but do not complete a will, we retain your account data for up to 6 years from your last activity.
• If you complete a will, your estate data is retained indefinitely while your account is active, to allow future updates.
• You may request deletion of your account at any time. Upon verified request, we will delete or anonymize your personal information, unless retention is required by law.

We implement appropriate technical and organizational measures including encrypted data transmission (TLS/HTTPS), hashed passwords, access controls, and regular security reviews.

In the event of a breach posing a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as required under PIPEDA's mandatory breach reporting provisions. Contact us immediately at info@wassiya.ca if you become aware of any security incident involving your account.

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete personal information.
• Withdrawal of consent: Withdraw your consent to certain processing activities.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Opt-out of marketing: Unsubscribe from marketing emails at any time.
• Data portability: Request a copy of your data in a structured, machine-readable format where technically feasible.

To exercise any of these rights, contact our Privacy Officer at info@wassiya.ca. We will respond within 30 days.

If you believe we have not handled your personal information in accordance with applicable privacy law, you may contact us at info@wassiya.ca to resolve the matter. If you are not satisfied with our response, you have the right to lodge a complaint with:

• Office of the Privacy Commissioner of Canada (OPC): www.priv.gc.ca — 1-800-282-1376
• Your applicable provincial privacy commissioner (e.g., Alberta, British Columbia, or Québec).

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to us, please contact us and we will promptly delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on our website before the change takes effect. Your continued use of our services after the effective date constitutes your acceptance of the changes.