Privacy Policy

Memorial Garden is responsible for deciding how personal information is used in connection with the service. Privacy questions and rights requests can be sent to support@memorialgarden.app.

• Account details, such as name, email address, password hash, verification status, role, and account settings.
• Memorial owner and contributor information, including invitations, roles, permissions, and activity linked to a memorial.
• Tribute information, such as author name, email address where provided, relationship, message, media, and moderation status.
• Support, report, takedown, and dispute information, including contact details, reasons, evidence, notes, and outcomes.
• Payment and billing records handled through payment providers, such as plan, amount, currency, payment status, receipt references, and transaction identifiers.
• Technical information, such as IP address, device/browser details, security logs, cookies, and session information.

UK data protection law applies to information about identifiable living people. Information about a deceased person is not usually personal data under UK GDPR, but Memorial Garden still treats deceased-person details with care because of the sensitivity of memorial content and family grief.

A memorial may still contain personal information about living people, such as family members, contributors, visitors, reporters, or people mentioned in tributes. Please avoid adding private information about living people without appropriate permission.

• To create and manage accounts, sessions, verification, login, and password reset flows.
• To create, host, display, share, edit, and protect memorial pages according to their privacy settings.
• To receive, review, approve, reject, or remove tributes and media.
• To process reports, takedown requests, disputes, moderation actions, and safety reviews.
• To provide support, service messages, invitations, and transactional emails.
• To process payments, billing records, plan limits, and Memorial Plus upgrades.
• To protect the service from abuse, spam, fraud, unauthorised access, and illegal content.
• To comply with legal obligations and preserve records needed for disputes or legal claims.

Depending on the context, we rely on contract, legitimate interests, legal obligation, consent, or explicit consent where required. Legitimate interests may include service security, moderation, abuse prevention, family dispute handling, and improving the service in a privacy-conscious way.

Memorial content may reveal sensitive information, such as religious beliefs, health information, ethnicity, or family circumstances. You should only provide this information where it is appropriate, respectful, and you have the right or permission to share it.

We use strictly necessary cookies or similar technologies for login, security, session management, and requested service features. If we introduce analytics, marketing, tracking, or non-essential cookies, we will explain them and ask for consent before setting them where required by UK cookie rules.

We share information only where needed to operate the service, such as hosting, database, storage, email, payments, security, analytics where enabled, legal advisers, or authorities where legally required. We do not sell memorial or tribute data.

We keep personal information only for as long as needed for the purpose it was collected, including account operation, memorial hosting, moderation, reports, payments, legal obligations, security, and dispute handling.

Account deletion, tribute removal, and memorial takedown requests are reviewed case by case. Some records may be retained where needed for tax, fraud prevention, moderation history, legal obligations, or legal claims.

You may have rights to access, correct, delete, restrict, object to, or receive a copy of your personal information. You may also withdraw consent where processing is based on consent. Rights are not absolute and may depend on the circumstances.

We normally aim to respond to rights requests within one month, subject to identity checks and lawful extensions for complex requests.

Memorial Garden is not intended for account holders under 18. If children or young people are likely to contribute or appear in content, families should use high privacy settings and avoid sharing unnecessary personal information.

We use technical and organisational measures intended to protect personal information, but no online service can be guaranteed completely secure.

You can contact support@memorialgarden.app with privacy questions. You also have the right to complain to the UK Information Commissioner's Office if you are unhappy with how your personal information is handled.