Privacy Policy

Effective date: March 23, 2026  |  Last updated: March 23, 2026  |  EverAfter Memorial™ LLC  |  hello@everaftermemorial.com

1. Who We Are

EverAfter Memorial is operated by EverAfter Memorial™ LLC, a Kentucky limited liability company. We provide an online memorial and legacy preservation platform that helps families preserve the lives, stories, photographs, videos, and memories of the people they love — forever.

• Company: EverAfter Memorial™ LLC
• Address: PO Box 28, Berea, KY 40403, United States
• Email: hello@everaftermemorial.com
• Data Protection Officer: Benjamin K. — hello@everaftermemorial.com

2. What Information We Collect

Information you provide directly

Type of Information	Examples	When Collected
Account information	Name, email address, username, password	When you register
Payment information	Billing address, card details (processed by Stripe — we never store card numbers)	When you subscribe
Memorial content	Photographs, biographies, dates, charity links, tribute messages	When you create or contribute to a memorial
Contact preferences	Communication preferences, notification settings	When you update your account
Communications	Emails and messages you send to us	When you contact support

Information collected automatically

Type of Information	Examples	Purpose
Log and usage data	IP address, browser type, pages visited, time spent, actions taken	Security, fraud prevention, platform improvement
Device data	Device type, operating system, screen size, language	Optimising the platform for your device
Location data	Approximate location based on IP address	Displaying relevant content and compliance
Cookies	Session cookies, preference cookies	Keeping you logged in, remembering your preferences

Information we do not collect

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data. We do not collect information from children under 18.

3. How We Use Your Information

We use your personal information only for the following purposes:

• To provide the platform — creating and maintaining your account, displaying your memorials, processing payments
• To communicate with you — sending account updates, payment confirmations, password reset emails, and service announcements
• To send marketing communications — occasional emails about new features or offers (you can unsubscribe at any time)
• To improve the platform — analysing how EverAfter is used so we can make it better
• To protect the platform — detecting and preventing fraud, abuse, and security threats
• To comply with legal obligations — when required by law or legal process

We will never use your information for targeted advertising. We will never build profiles of you for commercial purposes beyond operating the platform.

4. Legal Bases for Processing (EU and UK)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal information under the following legal bases:

Legal Basis	When We Rely On It
Performance of a contract	To provide the EverAfter Memorial platform you have signed up for
Legitimate interests	To improve the platform, prevent fraud, and send service communications
Consent	To send marketing emails — you can withdraw consent at any time
Legal obligation	When required to comply with applicable law
Vital interests	In rare circumstances where processing is necessary to protect someone's life

If you are in Canada, we process your information with your express or implied consent, or as otherwise permitted by Canadian privacy law including PIPEDA and Quebec Law 25.

5. Who We Share Your Information With

We share your information only with the following categories of third-party service providers who help us operate the platform:

Service Provider	Purpose	Location
Railway	Web hosting and database	United States
Cloudinary	Photo and media storage	United States
SendGrid (Twilio)	Email delivery	United States
Stripe	Payment processing	United States

All service providers are contractually required to protect your data and may only use it to provide services to EverAfter Memorial.

We may also disclose your information if required by law, court order, or to protect the rights, property, or safety of EverAfter Memorial, our users, or others.

In the event of a merger, acquisition, or sale of EverAfter Memorial, your information may be transferred as part of that transaction. We will notify you before this occurs.

We do not sell your personal information. We do not share your data with advertisers. Ever.

6. International Data Transfers

EverAfter Memorial is based in the United States. If you are located in the EEA, UK, or other regions with data protection laws, your information will be transferred to and processed in the United States.

We protect international transfers using the European Commission's Standard Contractual Clauses where required. Our service providers operate under appropriate data protection agreements.

For EU and UK users: you have the right to complain to your national data protection authority if you believe we are not handling your data lawfully. In the UK this is the Information Commissioner's Office (ICO).

7. How Long We Keep Your Information

We retain your personal information for as long as your account is active. Memorial content — photographs, biographies, tributes — is retained for the lifetime of the account because this is the core purpose of the platform.

If you delete your account, we retain your data for 90 days before permanent deletion to allow you to recover your account if needed. After 90 days all personal data is permanently deleted.

We may retain certain information for longer if required by law, for fraud prevention, or to resolve disputes.

8. How We Keep Your Information Safe

We take the security of your personal information seriously. Our security measures include:

• HTTPS encryption on all pages and data transmission
• Secure password hashing — we never store passwords in plain text
• Cloudinary's secure cloud storage for photographs and media
• Stripe's PCI-compliant payment processing — we never store card numbers
• Regular security reviews of our platform and infrastructure

No system is 100% secure. While we do everything reasonable to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at hello@everaftermemorial.com.

In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant supervisory authorities as required by law — within 72 hours under GDPR.

9. Cookies and Tracking Technologies

EverAfter Memorial uses cookies to keep you logged in and remember your preferences. We use the minimum cookies necessary to operate the platform.

Cookie Type	Purpose	Duration
Session cookies	Keep you logged in during your visit	Until you close your browser
CSRF tokens	Protect against cross-site request forgery attacks	Session
Preference cookies	Remember your settings and preferences	Up to 1 year

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can control cookies through your browser settings. Disabling cookies may affect your ability to stay logged in.

For more details see our Cookie Policy.

10. Children and Minors

EverAfter Memorial is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe a child under 18 has created an account, please contact us at hello@everaftermemorial.com and we will promptly deactivate the account and delete any associated data.

11. Your Privacy Rights

Depending on where you live, you have the following rights regarding your personal information:

Right	What It Means	Who It Applies To
Right to access	Request a copy of the personal data we hold about you	EU, UK, Canada, most US states
Right to rectification	Ask us to correct inaccurate personal data	EU, UK, Canada
Right to erasure	Ask us to delete your personal data	EU, UK, Canada, California
Right to restrict processing	Ask us to limit how we use your data	EU, UK
Right to data portability	Receive your data in a portable format	EU, UK
Right to object	Object to processing based on legitimate interests	EU, UK
Right to withdraw consent	Withdraw consent for marketing at any time	All users
Right to opt out of sale	We do not sell data — this right is automatically satisfied	California and other US states

To exercise any of these rights, please contact us at hello@everaftermemorial.com or visit our contact page. We will respond within 30 days.

You can unsubscribe from marketing emails at any time by clicking the unsubscribe link in any email we send.

12. Rights for US Residents

If you are a resident of California, Colorado, Connecticut, Kentucky, Virginia, or other states with privacy laws, you have additional rights including the right to know what personal information we collect, the right to delete it, and the right to correct it.

EverAfter Memorial does not sell personal information and does not use it for targeted advertising. You will not be discriminated against for exercising your privacy rights.

To submit a privacy request, please contact us at hello@everaftermemorial.com or visit everaftermemorial.com/contact.

13. Updates to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email at least 14 days before the changes take effect. The updated effective date will always be shown at the top of this page.

Your continued use of EverAfter Memorial after the effective date of any updated Privacy Policy constitutes your acceptance of those changes.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: hello@everaftermemorial.com
• Contact form: everaftermemorial.com/contact
• Post: EverAfter Memorial™ LLC, Attn: Data Protection Officer, PO Box 28, Berea, KY 40403, United States

We aim to respond to all privacy enquiries within 30 days.