Your Privacy

Privacy Policy

Last updated: 1 March 2026

ForeverLight ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains what data we collect, why we collect it, and how we use and protect it.

1. Information We Collect

1.1 Information You Provide

When you create an account, we collect your name, email address, and password. When you create a memorial, you may provide biographical information, photographs, videos, and other content about the person being memorialised. When you contact our support team, we collect the content of your communications.

1.2 Information Collected Automatically

When you use ForeverLight, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device identifiers, pages visited, time spent on pages, and referral URLs. We use cookies and similar tracking technologies to provide and improve our service.

1.3 Payment Information

If you subscribe to a premium plan, payment processing is handled entirely by our third-party payment processors. We do not store your full card details on our servers.

2. How We Use Your Information

We use the information we collect to: (a) create and manage your account; (b) provide, maintain, and improve our services; (c) process transactions; (d) send administrative messages, updates, and security alerts; (e) respond to your comments and questions; (f) monitor and analyse usage patterns; (g) detect and prevent fraudulent or illegal activity; (h) comply with legal obligations.

3. Sharing of Information

3.1 Public Memorials

If you create a public memorial, the content you upload — including photographs, biographical details, tributes, and comments — will be visible to anyone with the link or QR code. Please consider this carefully when uploading sensitive information.

3.2 Service Providers

We share information with trusted third-party service providers who help us operate our platform, including cloud hosting providers, image and video processing services, content moderation services, email delivery providers, and payment processors. All providers are contractually required to protect your information.

3.3 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of ForeverLight, our users, or the public.

3.4 No Sale of Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our services. Memorial content is retained indefinitely per our commitment to permanent preservation unless you explicitly request deletion. Upon account deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal purposes.

5. Data Security

We implement industry-standard security measures to protect your information, including TLS/SSL encryption for data in transit, encryption for stored data, regular security audits, access controls and authentication requirements for our staff, and intrusion detection systems. However, no method of transmission over the Internet is 100% secure. We encourage you to use a strong, unique password for your account.

6. Cookies

We use cookies to keep you logged in, remember your preferences, and analyse how our service is used. Essential cookies are necessary for the platform to function; you cannot opt out of these. Analytics cookies help us understand usage patterns — you may disable these through your browser settings. By continuing to use ForeverLight, you consent to our use of cookies as described in this policy.

7. Your Rights

Depending on your location, you may have certain rights regarding your personal data, including the right to access, correct, or delete your personal information; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent at any time. To exercise any of these rights, please contact us at privacy@foreverlight.com. We will respond within 30 days.

8. Children's Privacy

ForeverLight is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

9. International Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have different data protection laws. When we transfer personal data internationally, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by displaying a prominent notice on our website. Your continued use of ForeverLight after the effective date of the revised policy constitutes your acceptance of the changes.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection team at privacy@foreverlight.com or through our Contact page.