Last updated: 15 August 2026
1. Introduction
End of Life Memorials ("we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website and platform at www.endoflifememorials.co.uk ("the Platform").
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using the Platform, you consent to the practices described in this policy.
2. Information we collect
Information you provide directly
- Account information: your full name, email address, and password when you register
- Memorial content: personal wishes, messages, photographs, videos, biographical details, and dates you choose to include on your memorial page
- Guest contributions: names, messages, photographs, and videos submitted by invited guests or public applicants
- Payment information: billing details processed through Stripe (we do not store card numbers on our servers)
- Communications: any messages you send us through our contact form or email
Information collected automatically
- Usage data: pages visited, features used, timestamps, and session duration
- Technical data: IP address, browser type and version, operating system, device type, and screen resolution
- Cookies: session cookies necessary for the Platform to function (see Section 7)
3. How we use your information
We use your personal data for the following purposes:
- To create and manage your account and memorial page
- To process your subscription payments through Stripe
- To send essential notifications (account confirmation, password resets, subscription reminders, guest activity alerts)
- To provide customer support when you contact us
- To maintain the security and integrity of the Platform
- To comply with legal obligations
We will never sell, rent, or trade your personal information to third parties for marketing purposes.
4. Legal basis for processing
Under UK GDPR, we process your personal data on the following legal bases:
- Contract performance: processing necessary to provide the memorial service you have subscribed to
- Legitimate interests: maintaining Platform security, preventing fraud, and improving our services
- Consent: where you have explicitly consented, such as when submitting a contact form
- Legal obligation: where we are required to process data by law
5. Data sharing
We share your personal data only in the following limited circumstances:
- Stripe: your payment information is processed by Stripe, Inc., a PCI-compliant payment processor. Please review Stripe's Privacy Policy
- Hosting provider: our servers are hosted by IONOS, who process data on our behalf under a data processing agreement
- Memorial visitors: content you approve for publication on your memorial page will be visible to anyone with the memorial link
- Legal requirements: we may disclose your data if required by law, court order, or government request
We do not share your data with any advertising networks, analytics providers, or data brokers.
6. Data retention
We retain your personal data for as long as your account is active and your subscription is maintained. Specifically:
- Account data: retained while your account is active and for up to 12 months after account closure
- Memorial content: retained while your account is active. After account closure, content is deleted within 90 days unless the memorial has been declared as a permanent public tribute
- Payment records: retained for 7 years as required by UK financial regulations
- Contact form submissions: retained for up to 24 months
- Server logs: retained for up to 12 months
7. Cookies
We use only essential cookies necessary for the Platform to function:
- Session cookie (PHPSESSID): maintains your logged-in state while you use the Platform. This cookie is deleted when you close your browser or after one hour of inactivity
We do not use advertising cookies, tracking cookies, or third-party analytics cookies. We do not participate in any cross-site tracking.
8. Your rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access: you can request a copy of the personal data we hold about you
- Right to rectification: you can ask us to correct inaccurate or incomplete data
- Right to erasure: you can request deletion of your personal data, subject to legal retention requirements
- Right to restrict processing: you can ask us to limit how we use your data
- Right to data portability: you can request your data in a structured, machine-readable format
- Right to object: you can object to processing based on legitimate interests
- Right to withdraw consent: where processing is based on consent, you can withdraw it at any time
To exercise any of these rights, please contact us at info@endoflifememorials.co.uk. We will respond to your request within 30 days.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted connections (HTTPS/TLS) for all data in transit
- Secure password hashing (bcrypt) for stored credentials
- Regular security updates and monitoring
- Access controls limiting data access to authorised personnel only
- PCI-compliant payment processing through Stripe
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security.
10. International transfers
Your data is primarily stored and processed within the United Kingdom and European Economic Area. Where data is transferred outside the UK/EEA (for example, to Stripe's servers in the United States), appropriate safeguards are in place, including Standard Contractual Clauses and adequacy decisions.
11. Children's privacy
The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.
12. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.
13. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
14. Contact
If you have any questions about this privacy policy or how we handle your data, please contact us: