Privacy Policy

Introduction

Welcome to Memorium. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you visit our website and tell you about your privacy rights and how the law protects you.

Information We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: first name, last name, username or similar identifier.
• Contact Data: email address, telephone numbers, and billing address.
• Technical Data: internet protocol (IP) address, browser type and version, time zone setting, browser plug-in types and versions, operating system and platform.
• Usage Data: information about how you use our website, products and services.
• Memorial Data: information about deceased individuals, photographs, dates, locations, and other memorial content you provide.
• Financial Data: bank account and payment card details.

How We Use Your Information

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To provide and maintain our memorial service.
• To process your payments and manage your orders.
• To communicate with you about your memorials and account.
• To improve our website and services.
• To comply with legal obligations.
• To send you marketing communications (with your consent).

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. We limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected. Upon account deletion, all personal data (account information, memorial content, photos, videos, family tree data, and preferences) is permanently and irreversibly erased within 30 days of the confirmed deletion date. Financial transaction records (order amounts, payment provider references, transaction IDs) are anonymized — all personal identifiers are removed — and retained for 10 years as required by Italian accounting law (D.P.R. 633/1972, Art. 2220 Codice Civile) and EU VAT Directive 2006/112/EC. After anonymization, these records contain no information that can identify you.

Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data:

• Right to access your personal data.
• Right to request correction of your personal data.
• Right to request erasure of your personal data. You may request deletion of your account via the Settings page. A 30-day grace period applies before deletion is executed. Financial records are anonymized rather than erased where legally required under Italian and EU law.
• Right to object to processing of your personal data.
• Right to request restriction of processing your personal data.
• Right to request transfer of your personal data.
• Right to withdraw consent.

Cookies

Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, see our Cookie Statement.

Third-Party Services

We share your personal data with the following third-party service providers who process data on our behalf: Logto (identity and authentication), Stripe and PayPal (payment processing), Amazon Web Services S3 (media file storage), and Google Analytics (website analytics). These processors are contractually bound to protect your data and may only use it for the specified purpose. Payment processors (Stripe, PayPal) maintain their own data retention obligations under applicable financial regulations.

Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us at:

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new privacy policy on this page and updating the 'Last Updated' date at the top of this policy.