Privacy Policy

1. Introduction

This Privacy Policy explains how the Blanket Group ("Blanket," "we," "us," or "our") collects, uses, discloses, and safeguards your information when you use our service at blanket.ae (the "Service").

For the purposes of applicable data protection laws, the Service is operated by the following Blanket group entities:

• Blanket Technology FZE (UAE), acting as a Data Controller for users receiving UAE-related Services;
• Blanket Legal Ltd (UK), acting as a Data Controller for users receiving UK-related Services; and
• Succession Labs, Inc. (USA), acting as the Platform Operator and Data Processor responsible for hosting, security, and payment processing.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

Account Information

When you create an account, we collect personal identifiers such as your name, email address, phone number, and password.

Estate Planning Information

To provide the Service, we collect detailed information necessary to generate your documents ("Service Data"), including:

• Personal details (marital status, religion, nationality, Emirates ID numbers).
• Family details (names and details of spouses, children, and dependents).
• Asset information (real estate, bank accounts, vehicles, and valuables).
• Beneficiary and executor details (names and contact information of appointed individuals).
• Guardianship instructions for minor children.
• Power of attorney details (who you appoint and the powers you choose to give them).

Identity Documents

Where verification, document preparation, or registration requires it, we collect copies of identity documents you upload, such as passports and Emirates ID cards, for you and for people named in your documents.

Payment Information

We do not store your full credit card details. All payments are securely processed by our Merchant of Record, Succession Labs, Inc., through third-party PCI-DSS compliant payment processors (e.g., Stripe). We collect only limited payment data, such as transaction IDs and billing addresses.

Usage Data

We automatically collect technical data on how you interact with the Service, including:

• Device information (IP address, browser type, operating system).
• Log data (access times, pages viewed, clicks).
• Cookies and similar tracking technologies.

Affiliate Programme Data

If you apply to or participate in our Affiliate Programme, we collect the information needed to operate and account for it. This can include your name, contact and business details, promotion channels, trade licence and advertiser permit details, VAT and tax registration information, payout beneficiary and UAE bank account details, and evidence of your acceptance of the programme terms.

When someone visits through an affiliate link or uses a partner code, we record the link or code, attribution timestamps, purchase and refund status, and limited technical signals such as IP address and browser information. We use these records to calculate and validate commission, prevent self-referral and other abuse, and maintain financial audit evidence.

3. How We Use Your Information

We use your information for the following specific purposes:

• Service Delivery: To generate your wills, translations, and estate planning documents via our automated platform, including the document preparation features described in Section 3A.
• Service Improvement: To develop, train, and improve Blanket's own models, features, and services, de-identifying personal data where reasonably practicable.
• Billing: To process payments through Succession Labs, Inc.
• Compliance: To ensure your documents meet UAE legal formatting requirements.
• Communication: To send you transaction confirmations, legal updates, and security alerts.
• Security: To detect and prevent fraud, unauthorized access, or illegal activities.

3A. How We Prepare and Review Documents

Parts of the Service use automated tools to help capture your instructions during intake, prepare drafts of your documents, and support the review of your documents before they are finalized. Automated steps are combined with human review workflows as described on the Platform.

Your Service Data and your interactions with the Service may be processed by these features, and may be used to develop, train, and improve Blanket's own models, features, and services. When we use data for model development, we de-identify personal data where reasonably practicable.

Our commitments for this processing:

• We do not sell your personal data and do not use it for third-party advertising.
• We do not use your personal data to train general-purpose models offered to third parties.
• The third-party technology providers that power our features process your data only to provide their services to us. They are not permitted to retain your data or train their own models on it.

3B. Affiliate Programme

The Affiliate Programme is provided by Blanket Technology FZE as the programme counterparty and controller for affiliate data. Succession Labs, Inc. operates the supporting platform and processes that data on Blanket Technology FZE's instructions.

We process affiliate information to create and secure accounts, verify eligibility and UAE advertising compliance, operate referral links and partner codes, calculate the agreed commission, apply validation periods and reversals, and make payouts. Where an affiliate is VAT registered, payout records may also include the VAT top-up, tax registration number, and tax invoice reference needed for our accounting records.

Referral and conversion activity may be automatically held for review when technical or transaction signals indicate a possible self-referral, duplicate attribution, code misuse, refund, dispute, or other programme abuse. An authorised member of our team can review these exceptions before commission is released or an account is suspended.

Affiliates receive only the limited conversion, commission and payout status needed to understand their account. We do not disclose a referred customer's name, contact details, estate planning instructions, documents, family information, assets, or payment-card details to the affiliate.

4. How We Share Your Information

We do not sell your personal information. We share your data only in the following standard scenarios:

Internal Group Sharing

Your information may be shared between Blanket Technology FZE (UAE), Blanket Legal Ltd (UK), and Succession Labs, Inc. (USA) to facilitate service delivery, payment processing, platform operation, and customer support.

Service Providers

We disclose data to trusted third-party vendors who assist us in operating the Service:

• Cloud Hosting: (e.g., AWS/Google Cloud) for secure data storage.
• Payment Processors: (e.g., Stripe) for billing.
• Document Processing Providers: To support the intake, drafting, and review features described in Section 3A. These providers may not retain your data or train their own models on it.
• Translation Services: For Arabic translation of your documents (where applicable).
• Analytics Providers: To understand how the Service is used so we can improve it.
• Email & Communications: To deliver sign-in links, receipts, and service updates.
• Customer Support Tools: For managing your inquiries.

These providers are contractually bound to keep your data confidential and use it only for the services we request.

Affiliate and Payout Operations

We may share affiliate identity, compliance, bank and tax information with banks, payment providers, accountants, auditors, and competent UAE authorities where needed to verify eligibility, make or reconcile payouts, meet tax and financial-reporting duties, or investigate suspected fraud. Referred customers are represented to affiliates through limited conversion and payout statuses rather than customer-level personal information.

Legal Requirements

We may disclose your information if required by law, such as to comply with a subpoena, court order, or UAE government regulation (e.g., requests from the DIFC Courts or ADJD).

5. International Data Transfers

By using the Service, you acknowledge that your data may be transferred to, stored, and processed in the United States, the United Kingdom, and other jurisdictions where our group companies and service providers operate.

We safeguard these transfers using industry-standard protections, including:

• Intercompany Data Processing Agreements enforcing UAE-standard data protection obligations.
• Encryption of data during transit.
• Compliance with applicable international privacy frameworks.
• Where applicable, reliance on appropriate safeguards recognised under UAE, UK, and EU data protection laws.

6. Data Security

We implement enterprise-grade security measures to protect your estate planning data:

• Bank-Level Encryption: AES-256 encryption for data at rest and TLS 1.2+ for data in transit.
• Access Controls: Strict role-based access to ensure only authorized personnel can view sensitive data.
• Regular Audits: Routine security scans and vulnerability assessments.

7. Data Retention

We retain your personal information only as long as necessary to provide the Service and comply with legal obligations.

Active Accounts

Retained indefinitely to allow you to update your documents.

Deleted Accounts

If you request deletion, we will permanently delete or anonymize your Service Data within 90 days, unless a longer retention period is required by UAE law (e.g., for tax or legal dispute purposes).

Affiliate and Financial Records

Referral attribution is retained only as long as reasonably needed to validate purchases, handle refunds or disputes, and protect the Programme. Affiliate agreements, verification decisions, commission ledgers, payout records, VAT invoices, bank references, fraud-review decisions and related audit evidence are ordinarily retained for seven years after the end of the financial period to which they relate, or longer where a tax audit, dispute, legal hold or other law requires it.

Referral-event IP addresses and browser identifiers are restricted to authorised operational systems and masked after 90 days, while the non-identifying event row may be retained for aggregate attribution and audit totals. Affiliate bank details remain access-restricted and are retained only for payout, accounting, security and legal needs. When the applicable period ends, remaining affiliate identity data is deleted or de-identified while non-identifying accounting totals may be retained.

8. Your Rights

Depending on your location and the Services used, you may have additional rights under applicable data protection laws, including the UK GDPR.

Under applicable laws, you have rights regarding your data:

• Access & Portability: You may request a copy of the data we hold about you.
• Correction: You may update your personal details via your account settings.
• Deletion: You may request the deletion of your account and associated data.
• Withdraw Consent: You may withdraw consent for marketing communications at any time.
• Objection: You may object to certain processing of your personal data, including the use of your data to improve our services and models, by contacting us.

To exercise these rights, contact us at hello@blanket.ae.

9. Cookies

We use cookies to authenticate your session and analyze site traffic. You can change your choices at any time using the Manage cookies link in the site footer, or control cookies through your browser settings, though disabling essential cookies may prevent the Platform from functioning correctly.

If you arrive through an affiliate link, we may store a referral identifier for up to 90 days so an eligible purchase can be attributed to the correct affiliate. It is used for Programme attribution, commission accounting and fraud prevention, not to sell your data or provide third-party advertising.

10. Children's Privacy

The Service is intended solely for adults aged 21 years or older. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or the law. Material changes will be notified via email or a prominent notice on the Platform.

Continued use after such notice constitutes acceptance of the new terms.

12. Contact Us

If you have questions about this Privacy Policy, please contact us:

For Privacy Inquiries: Email: hello@blanket.ae

Mailing Addresses: