Privacy Policy

At Legacy Stones, we understand that the information, photographs and memories entrusted to us can be deeply personal. We are committed to respecting your privacy and protecting the personal information you share with us.

This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have in relation to your personal information.

1. Who we are

Legacy Stones creates personalised memorial stones, QR-linked online tribute pages and related memorial products.

Our website is:

www.legacy-stones.com

For privacy-related enquiries, you can contact us at:

Email: info@legacy-stones.com

Business address: [INSERT BUSINESS ADDRESS, IF YOU WISH TO PUBLISH IT]

For the purposes of UK data protection law, Legacy Stones is the data controller for personal information we collect and use in connection with our services.

2. Information we may collect

Depending on how you interact with Legacy Stones, we may collect information including:

  • * Your name

  • * Email address

  • * Telephone number

  • * Billing and delivery address

  • * Details relating to your order

  • * Information you provide through enquiry or order forms

  • * Photographs, videos and other media you submit for a tribute page

  • * Written memories, stories, messages and tributes

  • * Information about family members or friends that you choose to provide

  • * Names and other details appearing within photographs, memories or tribute content

  • * Correspondence between you and Legacy Stones

  • * Website usage information, such as device information, browser type, IP address and cookie information

  • * Payment-related information processed through our website or payment provider

We do not normally receive or store complete payment-card details ourselves where payments are processed securely by a third-party payment provider.

3. Memorial and tribute information

Much of the content provided to Legacy Stones relates to someone who has died.

Under UK data protection legislation, information relating solely to a deceased person is not considered personal data for UK GDPR purposes.

However, photographs, stories, memories and other tribute content may also identify or contain information about living individuals. Where this occurs, we will handle that information responsibly and in accordance with applicable data protection law.

When you provide information, photographs or other content involving another living person, you should make sure that you have an appropriate reason or permission to provide it to us and for it to appear on the tribute page where applicable.

4. How we use your information

We may use your information to:

  • * Process and fulfil your order

  • * Create your personalised memorial stone

  • * Create, edit and maintain your online tribute page

  • * Produce QR codes and connect them to the relevant tribute page

  • * Create personalised memorial products, including QR keyrings

  • * Contact you regarding your order or tribute page

  • * Respond to enquiries and provide customer support

  • * Make requested corrections or updates to a tribute

  • * Verify requests relating to a tribute page

  • * Arrange delivery of products

  • * Maintain business and financial records

  • * Prevent fraud or misuse of our services

  • * Improve our website, products and customer experience

  • * Comply with legal, tax and regulatory requirements

  • * Send marketing communications where you have agreed to receive them or where the law otherwise permits us to do so

We will not sell your personal information to third parties.

5. Our lawful basis for using your information

Under UK data protection law, we must have a lawful reason for processing personal information.

Depending on the circumstances, we may rely on:

Contract

We need certain information to take an order, create your products and tribute page, arrange delivery and provide the services you have purchased.

Legitimate interests

We may use information where this is reasonably necessary to operate and improve Legacy Stones, provide customer support, protect our business and maintain our services, provided those interests do not override your rights.

Legal obligation

We may retain or use certain information where we are required to do so for accounting, taxation, regulatory or other legal purposes.

Consent

Where appropriate, we may ask for your consent, for example for certain marketing communications or uses of optional content. Where we rely upon consent, you can withdraw that consent at any time.

6. Public tribute pages

Legacy Stones tribute pages are designed to be accessed through a QR code and/or direct website link.

Unless specifically agreed otherwise, you should assume that a published tribute page may be accessible to members of the public who have the web address or scan the associated QR code.

You should therefore avoid providing information for publication that you would not want to be publicly accessible.

Before publishing material supplied by you, we may format, resize, edit or arrange the content so that it works appropriately within the tribute-page design. We will not deliberately alter the meaning of memories or tributes you provide.

If you believe information has been published incorrectly or should be removed, please contact us.

7. Photographs and other uploaded content

Photographs, videos, written memories and other content supplied to Legacy Stones are used to provide the memorial service you have requested.

Where photographs include living people, those photographs may constitute personal information.

You should only upload photographs or other material that you are entitled to provide to us.

We will not knowingly sell customer photographs, memories or tribute content to third parties.

8. Who we may share information with

  • We may share information with trusted organisations that help us operate Legacy Stones, including:

  • * Our website hosting and ecommerce provider

  • * Payment-processing providers

  • * Delivery and courier companies

  • * Cloud storage and IT service providers

  • * Email and communications providers

  • * Website analytics providers

  • * Professional advisers, such as accountants, where necessary

  • * Government authorities, regulators or law-enforcement bodies where required by law

Our website is currently operated using Squarespace, which may process information on our behalf in connection with website hosting, ecommerce, forms, cookies and related website functionality.

Third-party service providers are responsible for handling information in accordance with their own legal and contractual obligations.

9. International transfers

Some of the technology and service providers used by Legacy Stones may process or store information outside the United Kingdom.

Where personal information is transferred internationally, we will take appropriate steps to ensure that suitable safeguards are in place as required by applicable UK data protection law.

10. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected.

This may include:

  • * Order and transaction records retained for the period required for accounting, tax and legal purposes

  • * Customer correspondence retained for a reasonable period in case questions arise regarding an order

  • * Tribute-page information retained while the tribute service remains active

  • * Uploaded images and content retained where necessary to operate, maintain or update the tribute page

  • * Marketing information retained until you unsubscribe, withdraw consent or we determine that it is no longer appropriate to retain it

When information is no longer needed, we will take reasonable steps to securely delete or anonymise it.

11. Removing a tribute page

If you would like a tribute page removed, please contact Legacy Stones.

Once a tribute page has been removed, it will no longer be accessible through its normal web address or associated QR code.

Where possible, you may wish to request a copy of relevant content before asking us to permanently remove a tribute.

We may need to retain limited information relating to the original order where required for accounting, legal or administrative purposes.

12. Cookies

Our website uses cookies and similar technologies.

Some cookies are essential for the website to function correctly. Others may help us understand how visitors use the website, remember preferences or support other website features.

Where required by law, non-essential cookies will only be used with your consent.

You can manage your cookie preferences through the cookie controls displayed on our website.

Further information is available in our Cookie Policy.

13. Marketing

We may occasionally send you information about Legacy Stones products or services where you have consented to receive such communications or where we are otherwise legally permitted to do so.

You can unsubscribe from marketing communications at any time by using the unsubscribe option provided or by contacting us.

We will still be able to send you essential service messages relating to an existing order or tribute page.

14. Keeping your information secure

We take reasonable technical and organisational measures to protect personal information against:

  • * Unauthorised access

  • * Accidental loss

  • * Misuse

  • * Alteration

  • * Disclosure

  • * Destruction

No internet-based service can guarantee absolute security, but we take reasonable steps appropriate to the nature of the information we handle.

15. Your data protection rights

Depending on the circumstances, UK data protection law may give you rights including the right to:

  • * Ask us for a copy of the personal information we hold about you

  • * Ask us to correct inaccurate or incomplete information

  • * Ask us to delete personal information in certain circumstances

  • * Ask us to restrict how we use your information

  • * Object to certain uses of your information

  • * Request transfer of certain information to you or another organisation

  • * Withdraw consent where we rely upon your consent

These rights apply to personal information relating to living individuals and may be subject to legal limitations or exemptions.

To exercise any of these rights, please contact us at:

info@legacy-stones.com

We may need to verify your identity before fulfilling certain requests.

16. Complaints

If you have concerns about how Legacy Stones has handled your personal information, we would appreciate the opportunity to resolve the matter with you first.

Please contact us at:

info@legacy-stones.com

You also have the right to raise a concern with the Information Commissioner's Office (ICO), the UK's independent data protection regulator.

Further information is available at [www.ico.org.uk](http://www.ico.org.uk).

17. Links to other websites

Our website may contain links to third-party websites or services.

Legacy Stones is not responsible for the privacy practices of external websites. We recommend reviewing the privacy information provided by any external website you visit.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, suppliers or legal requirements.

The latest version will always be published on the Legacy Stones website, together with the date it was last updated.

19. Contact us

If you have any questions about this Privacy Policy or how we use personal information, please contact:

Legacy Stones

Website: www.legacy-stones.com

Email: info@legacy-stones.com

Every stone has a story.