Privacy Policy

Last updated: 13 September 2026

Who we are

GravelyQR provides a digital memorial platform that links QR code plaques to online memorial pages. This policy explains how we collect, use, and protect your personal information.

What data we collect

  • Account information: name, email address, and password when you register.
  • Memorial content: names, dates, biographical text, and photographs you upload to create memorial pages.
  • Shipping details: name and postal address when you order a plaque.
  • Payment information: processed securely by Stripe. We never store card numbers on our servers.
  • Usage data: pages visited, browser type, and IP address for analytics and security.

How we use your data

  • To provide and maintain your memorial pages and account.
  • To process plaque orders and deliver them to you.
  • To send transactional emails (order confirmations, password resets).
  • To improve the service and fix bugs.

We do not sell your data or use it for advertising.

How we store your data

Your data is stored securely using Supabase (database and file storage) and Vercel (hosting). All data is encrypted in transit via TLS. Photographs are stored in Supabase Storage with access controls.

Third-party processors

  • Supabase — database, authentication, and file storage.
  • Stripe — payment processing.
  • Vercel — website hosting and serverless functions.
  • Resend — transactional email delivery.

Your rights (UK GDPR)

You have the right to:

  • Access your personal data.
  • Correct inaccurate data.
  • Delete your account and all associated data.
  • Export your data in a portable format.
  • Object to processing of your data.

To exercise any of these rights, contact us at the address below.

Data retention

We retain your data for as long as your account is active. Memorial pages remain online until you delete them or deactivate your account. Order records are kept for 7 years for tax and legal compliance.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

Contact

If you have questions about this policy or wish to exercise your rights, please contact us via our contact page.