Privacy Policy

PRENUPLY LTD PRIVACY POLICY Effective Date: 01/03/2026 Last Updated: 01/03/2026

1. Who We Are Prenuply Ltd (“Prenuply”, “we”, “us”, “our”) operates an online platform that facilitates the preparation of prenuptial agreements by coordinating administrative services and introducing users to independent solicitors. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Prenuply Ltd is the data controller of personal data collected through the platform. Contact details: Prenuply Ltd [Registered Office Address] Email: [email protected] You may contact us regarding data protection matters at the above email address.

2. The Personal Data We Collect We collect and process the following categories of personal data: 2.1 Identity and Contact Information Full name Email address Telephone number Residential address Date of birth 2.2 Financial Information Income details Asset information Property ownership Liabilities and debts Business interests Pension and savings information 2.3 Relationship Information Intended spouse details Marital plans Wedding date 2.4 Identity Verification Data Identification documents where required Anti-money laundering verification information 2.5 Technical Data IP address Device information Browser type Usage data Cookies 2.6 Communications Emails Messages Customer support correspondence Appointment scheduling records

3. Special Category Data Prenuptial agreement preparation may involve processing sensitive information. Where special category data is processed (for example health-related financial impact information), processing is based on: Your explicit consent; and/or The establishment, exercise or defence of legal claims (Article 9(2)(f) UK GDPR). We minimise collection of special category data wherever possible.

4. How We Collect Data We collect personal data: Directly from you via the platform Through questionnaires and uploads Through communications Via cookies and analytics tools Indirectly via independent solicitors where necessary for administration

5. Legal Bases for Processing We process personal data under the following legal bases: 5.1 Performance of a Contract To provide platform services and coordinate solicitor appointments. 5.2 Legal Obligation To comply with regulatory and anti-money laundering requirements. 5.3 Legitimate Interests To: Improve platform performance Prevent fraud Defend legal claims Ensure platform security We only rely on legitimate interests where your rights do not override our interests. 5.4 Consent For: Non-essential cookies Certain special category data Marketing communications (where required) You may withdraw consent at any time.

6. How We Use Your Data We use your personal data to: Create and manage your account Coordinate independent solicitor appointments Facilitate preparation of draft agreements Process payments Provide customer support Improve and secure the platform Prevent fraud or misuse Comply with legal obligations We do not sell personal data.

7. Sharing Your Data We share personal data only where necessary. 7.1 Independent Solicitors Relevant data is shared with appointed independent solicitors for the purpose of providing legal advice. Once transferred, the solicitor acts as an independent data controller. 7.2 Service Providers We may share data with: Payment processors Hosting providers IT infrastructure providers Identity verification providers Analytics providers All service providers are subject to contractual data protection obligations. 7.3 Legal and Regulatory Bodies We may disclose data where required by law or regulatory authority.

8. International Transfers We do not routinely transfer personal data outside the UK. Where international transfers occur (for example cloud hosting), we ensure appropriate safeguards are in place, such as: UK adequacy regulations; or International Data Transfer Agreements (IDTAs).

9. Data Retention We retain personal data only as long as necessary. Typical retention periods: Platform account data: 6 years after completion Financial disclosures: 6 years after completion Agreements and communications: up to 6 years Marketing data: until opt-out We may retain limited information longer where required for legal claims.

10. Data Security We implement appropriate technical and organisational measures including: Encrypted storage Secure servers Access controls Role-based permissions Regular security review However, no internet transmission is completely secure.

11. Your Rights Under UK GDPR, you have the right to: Access your personal data Rectify inaccurate data Erase data in certain circumstances Restrict processing Data portability Object to processing Withdraw consent To exercise rights, email: [email protected]

12. Complaints If you are dissatisfied with how we process your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner’s Office: https://ico.org.uk Telephone: 0303 123 1113

13. Marketing Communications We may send service-related communications without consent. Marketing communications will only be sent: Where permitted under PECR; or With your consent You may opt out at any time.

14. Automated Decision Making We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

15. Changes to This Policy We may update this Privacy Policy periodically. The latest version will always be published on our website.