Privacypolicy.

Stillwell is operated by [Stillwell legal entity name], [registered address] (“Stillwell”, “we”, “us”). We are responsible for the personal information described here.

If you have any question about this policy or your information, write to us at [email protected]. A person will read it and reply.

We collect only what we need to keep a remembrance and to run Stillwell:

• Account details: your name, email address, and a password or your sign-in through Google.
• What you add to a remembrance: names, dates, stories, photographs, letters, recordings, and anything else you choose to preserve — including about people who have died, and about living family members you mention.
• Tributes: messages that visitors leave on a remembrance, with the name they give.
• Orders: the delivery address for a plaque, and the details our payment processor needs to take payment. We never see or store your full card number.
• Messages to us: what you write through our contact form or by email, and the details you give with it.
• The waitlist: your email address, if you ask to hear when a place opens.
• Scans of a plaque: the time, and an approximate location no finer than the city. We do not record your IP address against a scan.

• To keep, show and protect the remembrances you create, in the way you have chosen.
• To make, engrave and deliver plaques, and to take payment for them.
• To answer you, and to tell you what you need to know about your account or order.
• To tell you when a place opens, if you joined the waitlist.
• To keep Stillwell secure and working, and to understand, in aggregate, how remembrances are visited.

We do not sell your information. We do not use it for advertising, and we do not target anyone based on a loss in their family.

Where data protection law asks for a reason (for example, the EU and UK GDPR), ours are: to perform our agreement with you (your account, remembrances and orders); your consent (the waitlist, and anything optional you choose to share); our legitimate interest in keeping Stillwell secure and working well, balanced against your rights; and our legal obligations (such as tax records).

You decide who can see a remembrance, and you can change it at any time. A public remembrance can be seen by anyone with its link or who scans its plaque. You can remove any tribute left on it.

We share information only with the companies that help us run Stillwell, and only what each needs:

• hosting and storage for the site and the photographs, recordings and documents you upload [providers to confirm];
• sign-in [provider to confirm];
• payments [provider to confirm];
• engraving and delivery of plaques [partners to confirm];
• email: the waitlist and blog updates (EmailOctopus), and delivering the messages you send us (Resend).

Each is bound to use it only to provide their service to us. We will also disclose information if the law requires it, and we will tell you when we can.

Remembrances are meant to last. We keep a remembrance for as long as you want it kept, and our independent non-profit foundation exists to keep it online for generations beyond that. You can delete a remembrance, or anything in it, whenever you choose.

We keep account details while your account is open; order records for as long as tax law requires [period to confirm]; messages to us for [period to confirm]; and waitlist addresses until you ask us to remove yours, or until we open to you.

You can ask to see the information we hold about you, to correct it, to take a copy with you, to delete it, or to object to or limit how we use it. Where we rely on your consent, you can withdraw it at any time.

Write to [email protected] and we will answer within one month. If you are unhappy with our answer, you can complain to your data protection authority.

If you are writing about someone who has died, or about a remembrance you did not create, tell us your connection to them and we will take care to do what is right.

We protect what you entrust to us at each layer: encrypted connections, restricted access within Stillwell, and backups kept apart from the live service. No system is perfect; if something goes wrong that affects your information, we will tell you promptly and plainly.

Stillwell accounts are for adults. A remembrance may speak of children in a family; the adult who creates it is responsible for what it shares.

Stillwell is based in [country], and our providers may keep information in other countries. Where it leaves the UK or European Economic Area, we rely on the protections the law requires, such as standard contractual clauses.

If we change this policy in a way that matters, we will tell you by email before it takes effect, and the date at the top will change.