Privacy Policy

Eternal Memorials ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our digital memorial platform ("Service").

Our platform allows users to create, share, and interact with memorials for loved ones. Given the sensitive nature of the data involved, we implement strict privacy and security measures. By using our Service, you agree to the collection and use of information in accordance with this policy.

This policy applies to all visitors, users, and others who access the Service. If you do not agree with the terms, please do not use our Service.

We collect several types of information for various purposes to provide and improve our Service.

Personal Data

While using our Service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you ("Personal Data"). This may include, but is not limited to:

• Email address
• First name and last name
• Phone number
• Billing address and payment information (processed securely by third‑party providers)
• Account credentials

Memorial Content

Content you contribute to memorials, which may include:

• Photographs, videos, and audio recordings
• Biographical details of the deceased
• Dates of birth and passing
• Personal stories, tributes, and messages
• Location information (e.g., place of burial or remembrance)

Usage Data

We automatically collect information on how the Service is accessed and used ("Usage Data"). This may include your IP address, browser type, pages visited, time and date of visits, device identifiers, and other diagnostic data.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

We use the collected data for various purposes:

• To provide and maintain our Service: Including creating and hosting memorials, processing tributes, and enabling interactions.
• To communicate with you: Sending service‑related announcements, responding to inquiries, and providing customer support.
• To improve and personalize the Service: Analyzing usage patterns to enhance features, fix issues, and tailor the experience.
• To process payments: Facilitating subscription fees and donations through secure third‑party processors.
• To ensure safety and compliance: Monitoring for abusive or inappropriate content, enforcing our Community Guidelines, and complying with legal obligations.
• To send promotional communications: Only with your explicit consent, we may send newsletters, updates, and offers about our Service.

We do not sell your Personal Data or memorial content to third parties. We may share your information only in the following circumstances:

• With your consent: When you explicitly permit us to share data for a specific purpose.
• For legal reasons: To comply with a legal obligation, protect our rights, prevent wrongdoing, or ensure the safety of our users.
• With service providers: We engage trusted third‑party companies and individuals to perform functions on our behalf (e.g., hosting, payment processing, analytics, customer support). These providers are contractually bound to use the data only for the services they perform for us and in compliance with this policy.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our website of any change in ownership or uses of your Personal Data.
• Aggregated or anonymized data: We may share aggregated or de‑identified information that cannot reasonably be used to identify you for research, marketing, or similar purposes.

We retain Personal Data only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

Memorial content is kept indefinitely in line with our promise to preserve memories "forever." If you wish to remove a memorial, you may delete it through your account settings. Note that deleted content may persist in backup copies for a limited period (up to 90 days) before being permanently erased.

Usage data is generally retained for up to 36 months for analytical purposes, after which it is either anonymized or deleted.

Payment information is retained only as required by our payment processors and applicable financial regulations.

Depending on your location, you may have certain rights regarding your Personal Data. These may include:

• Right to access: Request a copy of the Personal Data we hold about you.
• Right to correction: Request that we correct any inaccurate or incomplete data.
• Right to deletion: Request deletion of your Personal Data under certain conditions.
• Right to restrict processing: Request that we limit the processing of your data.
• Right to data portability: Receive your data in a structured, commonly used, and machine‑readable format.
• Right to object: Object to our processing of your Personal Data for specific purposes, such as direct marketing.
• Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time.

To exercise any of these rights, please contact us using the details in Section 12. We will respond to your request within the timeframe required by applicable law. Please note that we may need to verify your identity before processing certain requests.

Note for California residents: The California Consumer Privacy Act (CCPA) grants additional rights, including the right to opt‑out of the sale of Personal Data. We do not sell your data, but you may still exercise your CCPA rights by contacting us.

Note for EU/UK residents: The General Data Protection Regulation (GDPR) and UK GDPR provide the rights listed above. Our legal basis for processing is typically your consent, contract performance, or legitimate interests (e.g., improving our Service).

We use cookies and similar tracking technologies to monitor activity on our Service and store certain information.

Types of Cookies We Use

• Essential cookies: Required for the Service to function (e.g., authentication, security).
• Performance cookies: Help us understand how visitors interact with the Service (e.g., analytics).
• Functionality cookies: Allow the Service to remember choices you make (e.g., language preferences).
• Advertising cookies: Used to deliver relevant advertisements (only if you have consented).

You can manage your cookie preferences through your browser settings. For more information about cookies, visit AllAboutCookies.org.

We may also use third‑party analytics services (such as Google Analytics) that collect, monitor, and analyze Usage Data to improve our Service. These third parties may use cookies and other tracking technologies.

We implement industry‑standard security measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (SSL/TLS) and at rest
• Regular security audits and vulnerability assessments
• Access controls and strict authentication procedures
• Secure development practices and code reviews
• Employee training on data protection and privacy

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Data, we cannot guarantee absolute security.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities as required by law.

Your information may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside the United Kingdom and choose to provide information to us, please note that we may transfer the data, including Personal Data, to the UK and process it there.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy. When we transfer Personal Data outside the European Economic Area (EEA) or the UK, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission or UK equivalent.

Our Service is not intended for individuals under the age of 16 (or the age of digital consent in your country). We do not knowingly collect Personal Data from children under this age.

If you are a parent or guardian and you believe your child has provided us with Personal Data, please contact us immediately. We will take steps to remove that information from our servers and terminate the child’s account, if applicable.

Memorial content may include information about deceased minors, which is provided by authorized family members or legal guardians. Such content is treated with the same sensitivity and protection as all other memorial data.

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

For material changes that affect how we handle your Personal Data, we will provide a more prominent notice (such as an email notification or a banner on the Service) prior to the change becoming effective.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

If you have any questions about this Privacy Policy, your rights, or how we handle your data, please contact us:

You may also have the right to lodge a complaint with a supervisory authority in your country if you believe our processing of your Personal Data violates applicable data protection laws.