Your life, in your words. Your data, in your hands.
How Bequest collects, uses, stores, and shares your personal data, and the rights you hold under Hong Kong law. Written to be read, not skimmed.
We collect only what we need to help you plan, we never sell your personal data, and you can access, correct, or delete it at any time. Everything below explains how we do that, and the rights you hold under Hong Kong law, in full.
About our products
The product you choose determines who processes your data.
Bequest offers two categories of product.
Legal documents
Wills, Enduring Powers of Attorney, and Advance Medical Directives. When you use Bequest for these documents, you enter into two contractual relationships: with Bequest, for the technology platform, and with Patricia Ho and Associates ("PHA"), an independent Hong Kong solicitors' firm, for the legal services. Your personal data is processed by both Bequest and PHA, each as an independent data user under the PDPO. PHA's handling of your personal data is governed by PHA's own privacy notice, which will be provided to you when you engage PHA.
Non-legal documents
Final Wishes. This is a personal document expressing your wishes and is not a legal instrument. It is provided by Bequest alone; PHA is not involved. Your data is processed only by Bequest.
Who we are
Bequest Limited is a data user under Cap. 486.
Bequest Limited ("Bequest", "we", "our", "us") operates bequest.love, a life planning platform. Our platform guides users through creating estate planning documents using solicitor-reviewed templates designed for use in Hong Kong.
Bequest Limited is a data user for the purposes of the Personal Data (Privacy) Ordinance (Cap. 486) ("PDPO"). This Notice explains how we collect, use, store, and share your personal data, and what rights you have under Hong Kong law.
This Notice applies to all users of bequest.love and any related services we provide. It does not apply to third-party services that may be accessible through our platform; those services are governed by their own privacy policies. In particular, the handling of your personal data by Patricia Ho and Associates in the course of providing legal services is governed by PHA's own privacy notice.
Personal data we collect
The categories of personal data tied to the products and services you use.
Information about other individuals
Some of our products require you to provide personal information about other people, such as individuals you name in your estate planning documents. When you provide another person's personal data to us for the purpose of completing your document, Bequest processes that data solely for the purpose of preparing your document as instructed by you. We do not use that data for independent purposes and we do not contact those individuals. This limited processing is consistent with Bequest's obligations under DPP1(3) of the PDPO. We encourage you to inform the individuals you name that their details have been provided to Bequest and PHA, as applicable, in connection with your estate planning.
How we collect your data
Three routes, and no more.
- Directly from you when you create an account, complete a product workflow, make a payment, submit an enquiry, or contact us for support.
- Automatically through cookies and analytics technologies when you visit or interact with bequest.love. See Section 08 for details.
- From third parties only where you have directed us to receive data on your behalf or where permitted by applicable law.
Why we collect your data
Under the PDPO, personal data may not be used for purposes materially different from those for which it was collected, without your prescribed consent.
Cross-border data transfer
Comparable protection, wherever your data is processed.
Your personal data may be processed or stored outside Hong Kong by our cloud infrastructure and payment processing service providers. While section 33 of the PDPO, which would restrict cross-border transfers of personal data, is not currently in force, the data protection principles under the PDPO apply to personal data wherever it is processed.
We follow the Privacy Commissioner's Recommended Model Contractual Clauses for Cross-border Transfer of Personal Data (May 2022 Guidance) as best practice. Where personal data is transferred outside Hong Kong, we take steps to ensure it receives a comparable level of protection to that required by the PDPO, including contractual safeguards with our service providers.
Data retention
We keep data only as long as necessary for the purpose it was collected, in line with DPP2 of the PDPO.
You may request deletion of your account and associated personal data at any time by contacting us at hello@bequest.love. We will honour deletion requests subject to the retention periods set out above and any overriding legal obligations.
Your rights under the PDPO
Under Cap. 486, you hold the following rights in respect of your personal data.
To exercise your rights, contact us at hello@bequest.love. Please provide sufficient information for us to identify your account and verify your identity.
Marketing communications
We obtain your consent before any direct marketing, under Part 6A of the PDPO.
With your consent, we may send you promotional emails, product updates, and educational content about estate planning. We obtain your consent separately before including your personal data in any direct marketing activity, in compliance with Part 6A of the PDPO (ss. 35C to 35H).
Withdrawing consent
You may withdraw your consent to receive marketing communications at any time by:
- Clicking the unsubscribe link in any marketing email we send you
- Adjusting your communication preferences in your account settings
- Contacting us at hello@bequest.love
Withdrawal of consent stops all future marketing use of your personal data. Marketing sent before your withdrawal, at a time when your consent was valid, is not affected. Withdrawal does not affect service communications, which we may continue to send in connection with your account.
Security
Technical and organisational measures, with extra safeguards for estate planning data.
We implement technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include encryption of data in transit and at rest, access controls and role-based permissions, and regular security reviews of our systems.
Despite these measures, no internet-based system can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying us immediately if you believe your account has been compromised.
Given the particularly sensitive nature of estate planning data, we apply additional safeguards to legal documents stored on our platform, including access logging. Where document content requires review by a qualified solicitor, as part of the legal services provided by Patricia Ho and Associates, access is restricted to authorised PHA personnel.
Changes to this notice
We will tell you before material changes take effect.
We may update this Privacy Notice from time to time to reflect changes in our services, our data practices, or applicable law. The date at the top of this page shows when this Notice was last updated.
Where we make material changes to how we collect, use, or share your personal data, we will notify you by email or through a prominent notice on our website before the changes take effect. Continued use of our platform after that date constitutes acceptance of the updated Notice.
Contact us
For access or correction requests, questions about this Notice, or privacy complaints.
You have the right to lodge a complaint directly with the Office of the Privacy Commissioner for Personal Data, Hong Kong.
Estate planning asks for your most private details. We treat them that way.
If anything here is unclear, or you would like to access, correct, or delete your data, a real person will help.