Privacy Policy
This is a draft. It has not yet been reviewed by a solicitor.
This explains what we collect, why, and what you can ask us to do about it. It covers lovingmemory.uk and the memorial pages hosted on it.
Who we are
Loving Memory UK is the data controller for the personal information described here. You can reach us at hello@lovingmemory.uk.
A note about the person who has died
UK data protection law applies to living people, so information about someone who has died is not their personal data. It is still theirs in every sense that matters to a family, and we treat it that way.
Living people named on a memorial — relatives on a family list, or anyone who leaves a tribute — do have rights over what appears about them, and can ask us to remove it.
What we collect
Your account: your name, email address and a hashed password. Funeral directors may also give a phone number, website, address and logo, which appear on the memorials they set up.
What you put on a memorial: the name and dates of the person who died, a biography, photographs, timeline entries, family members, funeral details and a charity link, all entirely as you choose to provide them.
Tributes: the name a visitor gives, an optional relation, their message and any photographs they attach. We do not ask visitors for an email address and we do not have one.
Technical information: we record the IP address and browser of anyone who leaves a tribute, lights a candle or reports content, so we can block abuse. We count page views by day, and record a short-lived note that a page is currently being viewed. None of this identifies a visitor by name.
Payments: card details are handled by Stripe on their own pages and never reach us. We keep a record of what was bought and when.
Why we are allowed to hold it
To provide what you asked for — hosting the memorial you created is the contract between us.
Our legitimate interests in keeping the service safe: blocking abusive visitors, screening tributes for offensive language, and keeping records of who did what on a page.
Where the law requires it, for example keeping records of payments.
Who else sees it
Anything on a memorial you have published is public — that is the point of it. A memorial marked private is visible only to you and the people you have given access.
Stripe processes payments. Our hosting provider stores the site and its database. Our email provider delivers messages we send you.
If you add a funeral livestream, the video is embedded from YouTube using their no-cookie service, and YouTube will see that a visitor watched it.
We do not sell personal information, and we do not share it for advertising.
How long we keep it
A memorial and everything on it is kept for as long as the page exists. That is the promise of the product.
Content you delete goes to a recycle bin and is recoverable for 30 days, then removed.
Records of emails we sent you are kept for six months. Notes of who is currently viewing a page are removed within days.
If you close your account we delete it, along with any memorial nobody else administers.
What you can ask for
A copy of what we hold about you; corrections; deletion; a restriction on what we do with it; an objection to us relying on legitimate interests; or your information in a portable form.
Write to hello@lovingmemory.uk and we will respond within a month.
If you are unhappy with how we have handled it you can complain to the Information Commissioner's Office at ico.org.uk.