Privacy Policy

The data controller responsible for your personal data is:

If you have any questions about this policy or how we handle your data, please contact us using the details above.

Depending on how you interact with us, we may collect the following:

a) Family enquiries. When you submit an enquiry about a memorial website, we collect your name, phone number, email address (if provided), the name of your loved one, the package you are interested in, any referral code, and any details you include in your message.

b) Memorial Partners (agents). When you register as a partner we collect your full name, email address, password (stored only in encrypted/hashed form), phone number, town or city, occupation, organisation, profile photo (if you upload one), and your payout details — mobile money number and network, and/or bank name, account number and branch. If you sign in with Google, we receive your name, email address and profile picture from Google.

c) Leads submitted by partners. Partners may submit details of bereaved families they refer, including the family contact's name, phone and email and the name of the deceased. If you are a family member whose details were submitted by a partner, you have the same rights over that data as set out below.

d) Technical data. Like most websites, our hosting provider may process limited technical information such as your IP address and browser type for security and to keep the service running. We use only essential cookies (see the Cookies section).

We use your personal data only where we have a lawful basis to do so:

To respond to your enquiry and provide our service — on the basis of taking steps at your request prior to entering a contract, and performance of a contract.

To operate the Memorial Partner programme — to manage your account, track referrals and leads, calculate commissions and process payouts, on the basis of performance of our contract with you.

To send service and notification emails — such as email verification, application-approval and payout notifications, on the basis of performing our contract and our legitimate interest in keeping you informed.

To keep our service secure and comply with the law — on the basis of our legitimate interests and legal obligations.

With your consent — where you have given it, for example by ticking a consent box when submitting a form. You may withdraw consent at any time.

We do not sell your personal data. We share it only with trusted providers who help us run the service, and only as far as necessary:

Hosting and infrastructure — our website and database are hosted on secure cloud infrastructure.

Google — if you choose to sign in with Google, authentication is handled by Google under their own privacy policy.

Email delivery — we use an email service to send you verification and notification messages.

Payment / payout channels — to pay partner commissions we use mobile money operators and/or banks, using the payout details you provide.

We may also disclose data where required by law or to protect our legal rights.

We keep personal data only for as long as necessary for the purposes described above. Family enquiry details are retained while we are in contact with you and for a reasonable period afterwards. Partner account and commission records are kept for the life of your account and for as long as needed to meet our financial and legal obligations. When data is no longer needed, we securely delete or anonymise it. You may ask us to delete your data sooner (see your rights below).

Under GDPR and applicable law you have the right to:

• Access the personal data we hold about you.
• Rectify data that is inaccurate or incomplete.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restrict or object to our processing in certain circumstances.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time where we rely on consent.

Registered partners can download a copy of their data and delete their account directly from the profile page under “Your Data & Privacy”. For any other request, or if you are a family contact, email us at [email protected] and we will respond within one month. You also have the right to lodge a complaint with your local data-protection authority.

We keep cookies to a minimum. We use only essential cookies that are necessary for the website to function — for example, to keep you securely signed in to your partner dashboard. These cookies do not track you across other websites and are not used for advertising. Because they are strictly necessary for the service you request, they do not require consent, but we show a short notice so you are aware of them. You can control or delete cookies through your browser settings, though disabling essential cookies may stop parts of the site (such as login) from working.

We take appropriate technical and organisational measures to protect your data. Passwords are stored in encrypted (hashed) form, data is transmitted over secure connections, and access to personal data is limited to those who need it to operate the service. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

Our service is intended for adults arranging memorials or working as partners. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Significant changes may be communicated to registered partners by email.