Cliff Bradley Memorials Limited is the controller responsible for personal information we receive about you. This may include your name, postal address, email address and telephone number; enquiry and appointment details; quotations, invoices and payment records; and information connected with a memorial order. That may include grave or plot details, burial ground information, the proposed inscription, design choices, photographs and any notes you choose to provide. Although information relating solely to a deceased person is not personal data under UK data protection law, a memorial enquiry will usually contain information about living family members or other contacts, which we protect in accordance with this policy. Our website may also record technical information including your IP address, browser, device and the pages you visit. Where another organisation determines how particular information is used with us, it may act as a separate or joint controller. Where it processes information only on our instructions, it acts as our processor and must handle that information securely, confidentially and only for the agreed purpose, and comply with data protection law.

To provide a memorial service, we may share relevant information with trusted organisations involved in the work. These can include stonemasons and memorial suppliers, lettering or artwork specialists, approved fitters, cemeteries, churchyards and other burial authorities, payment and accounting providers, insurers, website hosting providers, trusted professional advisers, and Jotform, which provides our embedded quotation and design forms online. We share only the details each recipient needs for its part of the service. Organisations processing information on our instructions must keep it secure, use it only for the agreed task and delete or return it when it is no longer required. Some recipients, including burial authorities, may act as independent controllers and will apply their own privacy arrangements. We may also disclose information where required by law, to establish or defend legal claims, or to protect someone’s vital interests. We will not share your information with another organisation for direct marketing without your clear consent. If information must be transferred outside the United Kingdom, we will take reasonable steps to ensure it remains properly protected.

We process personal information where we have a lawful reason to do so. Information connected with a quotation, order or requested service is used because it is necessary to take steps at your request or to perform our contract with you. We use records to meet legal duties, including accounting and regulatory requirements. In rare circumstances, information may be needed to protect someone’s vital interests. We may also rely on our legitimate interests where this is fair and proportionate, such as managing enquiries, maintaining business records, improving our services, preventing fraud, protecting our systems and responding to complaints. Before relying on legitimate interests, we consider the purpose, whether the processing is necessary and the possible effect on your rights. Where consent is the appropriate basis, including for certain marketing or optional website technologies, you may withdraw it at any time without affecting earlier lawful use. If the purpose for using information changes, we will consider whether a new lawful basis or further notice is required before continuing. Our retention periods are reviewed and reflect the purpose and reasonable needs.

We collect information directly from you when you telephone, email, visit our showroom, complete an online form, request a quotation, approve a design, place an order or ask us to carry out work. We may also receive information from a family member, executor, funeral director or burial authority where they are involved in the memorial arrangements. Please make sure you have clear permission before giving us personal information about another living person. We use the information for the purpose explained when it is collected and keep it as accurate and current as possible. If your contact details or instructions change, please tell us so we can update our records. Access to customer files is limited to people who need the information, and our team is expected to handle it confidentially. We may use anonymised or combined information to understand how our website and services are used, but this will not identify you. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects. Questions about how your personal information is being used can be sent to us using the details on our contact page.

UK data protection law gives you rights over your personal information. Depending on the circumstances, you may ask for a copy of the information we hold, request correction of inaccurate or incomplete details, ask us to erase or restrict its use, object to certain processing, or receive information you supplied in a portable format. You may withdraw consent where our use depends on consent. These rights are not absolute, and a legal or contractual reason may sometimes require us to keep or continue using records. To make a request, contact us directly in writing using the details on our contact page. We may ask for enough information to confirm your identity, but only where this is necessary and proportionate. There is normally no charge for making a request, although a reasonable fee may apply where a request is manifestly unfounded, excessive or repeatedly made. We normally respond within one month and will explain if more time is lawfully required. If we cannot meet a request in full, we will explain why and let you know what you can do next. If you are unhappy with our response, we will try to resolve the matter. You may complain to the Information Commissioner's Office.