Privacy Policy

Last updated: 31 October 2026

mymemorial.day ("we", "us") lets families and funeral directors make a simple memorial page with the funeral details, a condolence book and keepsakes. It is run by Lee James Apps, a sole trader based in the United Kingdom. We look after personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

If you make a memorial page yourself, or leave a condolence message, we are the controller of your data. If a funeral director makes the page for a family, the funeral director is the controller of the family details they enter and we handle them on the director's behalf.

Information about someone who has died is not "personal data" under UK GDPR. We still treat it with the same care as everything else.

2. What we collect

If you have an account (families and funeral directors)

• Your name and email address, and your password (stored hashed, so we can't read it)
• For funeral directors: the funeral home's name, phone number, website, public email address, logo and any association or company number you add
• Payment records: amount, date and Stripe's reference. Card details go straight to Stripe; we never see them

On a memorial page

• What you choose to add about the person who has died: name, dates, photos, tribute, order of service
• Service details: dates, times, venues and addresses, flowers and donations, dress code, parking and a livestream link
• Family contact names, phone numbers or email addresses, only if you choose to show them
• Photos are re-saved when uploaded, which removes hidden location (GPS) data

If you leave a condolence message

• Your name, your relationship to the person (optional) and your message. Messages are shown on the memorial page to anyone who has its link. The page's owner can remove any message
• To stop abuse we keep a scrambled code made from your IP address for one hour

Website visits

• Our own visit counter records the page, the site that sent you, your device type (phone or computer), any campaign tag in the link, and a shortened, scrambled code made from your IP address that changes every day. It sets no cookies
• When you're signed in, one essential cookie keeps you signed in. We don't use advertising or analytics cookies

3. Why we use it

• To provide the service (accounts, memorial pages, payments, service emails): contract
• Condolence messages: our legitimate interest, and the family's, in offering a place to share memories. You choose to post
• Family contact details on a page: the legitimate interest of the family or director in letting people get in touch about the funeral
• Payment and tax records: legal obligation
• Security, stopping spam and the visit counter: legitimate interest

4. Who can see it, and who we share it with

A memorial page can be seen by anyone who has its link. Pages are hidden from search engines, so they don't appear in Google results. Draft pages are not shown until they're published.

We use these providers, only for what's listed:

• IONOS: hosts our server (UK)
• Stripe: takes payments and subscriptions (US; UK adequacy and Data Privacy Framework)
• Zoho: sends our emails, such as confirming your email address (EU)
• Cloudflare: the "I am human" check on sign-up, which sees your browser and IP address during the check (global; standard contractual clauses)
• Google: web fonts on every page, and the venue map on memorial pages, so your browser connects to Google's servers. If a livestream link is a YouTube link, YouTube shows the video (US; UK adequacy and Data Privacy Framework)

We never sell, rent or trade personal data.

5. How long we keep it

• Memorial pages stay online until the owner removes them. Removing a page deletes it straight away, with its photos and condolence messages
• Accounts are kept until you ask us to close yours. Email us and we'll delete it, and any pages you've made, within one month
• Payment records are kept for 6 years, as tax law requires
• Visit counter records are kept for up to 13 months

6. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable format. Email hello@mymemorial.day and we'll reply within one month. If a funeral director made the page, we may pass your request to them, as they decide what's on it.

If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put it right first.

7. Keeping it safe

Everything is sent over HTTPS. Passwords are stored hashed. Private links sent to families expire. Only the account that made a page can change it.

8. Children

Accounts are for adults (18 and over). Anyone can read a memorial page they've been sent.

9. Changes

If we change this policy we'll update the date at the top, and email account holders about any important change.