Privacy Policy
Cloud Memories
Website: https://cloudmemories.uk
Last updated: 12 November 2026
1. Introduction
Welcome to Cloud Memories.
At Cloud Memories, we understand how precious personal memories are, particularly when remembering and celebrating the lives of loved ones. We are committed to respecting your privacy and protecting the personal information you share with us.
This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit our website, purchase our products, create a digital memorial or use our services.
We aim to process personal information fairly, lawfully and transparently in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and applicable privacy and electronic communications legislation.
By using our services, you acknowledge that you have been provided with this Privacy Policy. Where consent is legally required, we will request it separately.
2. Who We Are
Cloud Memories provides personalised digital memorial services, allowing families and friends to celebrate and preserve the memories of loved ones.
Our services include:
Personalised online memorial pages.
Digital memorials containing photographs, videos, biographies and messages.
Physical memorial plaques featuring unique QR codes.
AI-assisted memorial biography creation.
Memorial-related products and services.
Business name: Cloud Memories
Legal entity: [INSERT REGISTERED BUSINESS OR SOLE TRADER NAME]
Business address: [INSERT BUSINESS ADDRESS]
Email: info@cloudmemories.uk
Website: https://cloudmemories.uk
For the purposes of applicable data protection legislation, the legal entity identified above is the data controller for personal information processed in connection with our services, except where another organisation is responsible for determining how that information is used.
3. Information We Collect
We may collect and process the following categories of information.
3.1 Personal Information
When you make a purchase, register an account or contact us, we may collect:
Full name.
Email address.
Telephone number.
Billing and delivery addresses.
Account usernames and authentication information.
Order details and purchase history.
Customer service correspondence.
3.2 Memorial Information
When creating or contributing to a digital memorial, you may provide:
The name of the person being remembered.
Dates of birth and death.
Photographs and videos.
Personal stories, biographies and tributes.
Family relationships and historical information.
Written messages and other memorial content.
Information about living family members, friends or contributors.
Some memorial content may reveal sensitive information about living individuals, including religious beliefs, health information or other protected personal characteristics.
We ask users to avoid uploading unnecessary sensitive information about living individuals and to ensure they have appropriate permission or another lawful basis for sharing personal information.
Information relating solely to deceased individuals is generally outside the scope of the UK GDPR, but we still recognise its personal and sensitive nature and aim to handle it respectfully.
3.3 Payment Information
When you purchase products or services, payment information may be processed by our payment service providers.
We may receive information such as payment status, transaction references, billing details and limited payment method information.
Full payment card details are handled according to the arrangements of the payment provider used at checkout.
3.4 Technical Information
When you use our website, we may collect:
IP address.
Browser type and version.
Device information.
Operating system.
Website usage information.
Pages visited and interactions.
Cookie identifiers and related technical information.
The information collected depends on the technologies enabled on our website.
4. How We Use Your Information
We process personal information for the following purposes:
Providing our services: To create and maintain customer accounts, process orders, provide digital memorials, host uploaded content and deliver memorial products.
Customer support: To respond to enquiries, provide assistance and resolve problems.
Memorial management: To enable customers to create, edit, maintain and share memorial pages.
Payment processing: To process purchases, refunds and related transactions.
Website security: To protect our website, accounts and services against unauthorised access, fraud and misuse.
Service improvement: To maintain, troubleshoot and improve the performance and usability of our website and services.
Marketing: To send news, offers or promotional communications where permitted by applicable law.
Legal compliance: To maintain required business records and comply with legal or regulatory obligations.
We do not sell personal information to third parties.
5. Our Lawful Basis for Processing Personal Data
Under UK data protection legislation, we must have a valid lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contractual necessity: Where processing is necessary to provide a service you have purchased or requested, including account management, orders and memorial creation.
Legal obligation: Where processing is necessary to comply with tax, accounting, consumer protection or other legal requirements.
Legitimate interests: Where necessary for our legitimate business interests, such as maintaining website security, preventing fraud, providing customer support and improving our services, provided those interests are not overridden by individuals’ rights and freedoms.
Consent: Where we ask for your permission for specific activities, such as certain marketing communications, non-essential cookies or particular uses of personal information.
Where we rely on consent, you may withdraw it at any time.
Where uploaded content includes special category personal data about living individuals, we will ensure that an appropriate additional legal condition applies before processing it.
6. Digital Memorials and Publicly Accessible Content
Cloud Memories allows customers to create personalised digital memorials that can be shared through website links and unique QR codes.
Important information about memorial visibility:
A person who has access to a memorial link or scans its QR code may be able to view the memorial and its published content.
This may include photographs, videos, names, dates, biographies, tributes and other information uploaded to the memorial.
Although Cloud Memories does not provide a public directory for searching all memorial profiles, memorial links and QR codes can be shared or accessed by other people.
Users should therefore consider carefully what information they upload and publish.
Please do not upload personal information, photographs or videos of living individuals unless you have the appropriate permission or another lawful basis to do so.
Cloud Memories may review, restrict or remove content where necessary to comply with applicable laws, protect individuals’ privacy or enforce our service terms.
If you believe that a memorial contains personal information about you that should not be displayed, please contact us at info@cloudmemories.uk.
We will review requests in accordance with applicable data protection law.
7. AI-Assisted Biography Creation
Cloud Memories offers AI-assisted functionality to help customers create memorial biographies.
Where this feature is used, information supplied for biography creation may be processed using AI technology to generate suggested written content.
This may include names, biographical details, personal stories and other information submitted by the user.
We aim to limit the information processed to what is necessary to provide the requested functionality.
AI-generated biographies should be reviewed by the customer before publication to ensure that the information is accurate, respectful and appropriate.
AI service provider: [INSERT PROVIDER AND RELEVANT DATA-HANDLING DETAILS]
Any use of submitted information by third-party AI providers, including retention, model training and international processing, will be governed by the applicable provider arrangements and disclosed as required by law.
We do not use AI-generated biographies to make solely automated decisions about individuals that produce legal or similarly significant effects, unless separately disclosed and lawfully permitted.
8. How We Share Information
We may share personal information with trusted third-party service providers where necessary to operate our business.
These may include:
Website hosting and cloud storage providers.
Digital memorial platform providers.
Payment processors.
Website maintenance and technical support providers.
Delivery and fulfilment companies.
Email and customer communication providers.
AI technology providers.
Website analytics and security providers.
Where third parties process personal data on our behalf, we require appropriate contractual and security protections.
We may also disclose information where required by law, regulatory authorities or legal proceedings.
We do not sell customers’ personal information.
9. How Long We Keep Your Information
We retain personal information only for as long as necessary for the purposes for which it was collected, including providing our services, maintaining business records, resolving disputes and meeting legal obligations.
Different categories of information may be retained for different periods.
Customer and transaction records: Retained for the period necessary to meet applicable accounting, tax and legal obligations.
Account information: Generally retained while the account remains active and for a reasonable period afterwards where necessary.
Digital memorial content: Retained in accordance with the memorial service purchased, our applicable terms and any valid deletion requests or legal requirements.
Customer enquiries: Retained for as long as reasonably necessary to resolve the enquiry and maintain appropriate records.
Marketing information: Retained until you unsubscribe, withdraw consent where applicable, or the information is no longer required.
Cloud Memories aims to provide long-lasting digital memorial services. However, this does not mean that personal data must be retained indefinitely in every circumstance.
Requests to delete memorial content will be assessed in accordance with applicable law, contractual arrangements and the rights of other affected individuals.
[INSERT OR CONFIRM SPECIFIC RETENTION PERIODS AND MEMORIAL CLOSURE ARRANGEMENTS.]
10. Cookies and Website Tracking
Our website may use cookies and similar technologies to support essential website functionality, remember user preferences, maintain security and understand website usage.
Cookies may include:
Essential cookies: Required for website operation, shopping baskets, account login and security.
Functional cookies: Used to remember settings and improve website functionality.
Analytics cookies: Used, where enabled, to understand website performance and visitor interactions.
Marketing cookies: Used, where enabled, to support advertising and measure marketing effectiveness.
We will seek consent before using cookies or similar technologies where consent is legally required.
You can manage cookies through the controls made available on our website and your browser settings.
[INSERT A VERIFIED COOKIE LIST, THIRD-PARTY PROVIDERS, COOKIE DURATIONS AND A LINK TO COOKIE SETTINGS OR A SEPARATE COOKIE POLICY.]
11. Marketing Communications
We may offer customers and website visitors the opportunity to receive news, service updates, promotional offers and other marketing communications.
We will only send electronic marketing where permitted under applicable law.
Where consent is required, we will obtain it before sending marketing communications.
You can unsubscribe from marketing emails using the unsubscribe instructions provided or by contacting info@cloudmemories.uk.
Unsubscribing from marketing will not prevent us from sending essential service-related communications, such as order confirmations or important account notices.
12. International Data Transfers
Some of the third-party providers supporting our website or memorial platform may process or store personal information outside the United Kingdom.
Where international transfers of personal data take place, we will ensure that they are supported by an appropriate legal transfer mechanism and safeguards as required by applicable UK data protection law.
These may include applicable UK adequacy regulations, recognised contractual safeguards or another permitted transfer mechanism.
Details of relevant transfers and safeguards may be requested using the contact information in this policy.
[CONFIRM COUNTRIES, SERVICE PROVIDERS AND TRANSFER SAFEGUARDS BEFORE PUBLICATION.]
13. How We Protect Your Information
We take appropriate technical and organisational measures to protect personal information against unauthorised access, accidental loss, alteration, misuse or disclosure.
Depending on the service and technology involved, these measures may include:
Secure account authentication.
Access restrictions.
Encrypted connections.
Security monitoring.
Software maintenance and updates.
Appropriate hosting and data protection arrangements.
Restricted access to personal information.
No online service can guarantee absolute security.
Users are responsible for protecting their login credentials and should contact us if they suspect unauthorised access to their account.
14. Your Data Protection Rights
Under UK data protection legislation, you may have the right to:
Access: Request a copy of personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete information.
Erasure: Request deletion of your personal information in certain circumstances.
Restriction: Request that we restrict certain processing activities.
Data portability: Request transfer of certain information in a commonly used, machine-readable format.
Object: Object to certain processing activities, including processing based on legitimate interests.
Withdraw consent: Withdraw consent at any time where consent is our lawful basis.
Rights concerning automated decisions: Exercise applicable rights relating to qualifying solely automated decisions.
You have the right to object to direct marketing at any time.
These rights are subject to applicable legal conditions and exceptions.
To exercise your rights, email info@cloudmemories.uk.
We will respond within the time limits required by applicable data protection legislation.
15. Children’s Privacy
Cloud Memories is primarily intended for adults purchasing or managing memorial services.
Our memorial services may contain photographs or information relating to children, including where families create memorials remembering a child.
We recognise that children’s personal information requires particular care.
Users should ensure they have appropriate authority or another lawful basis before uploading personal information relating to living children.
If you are concerned that information about a child has been uploaded inappropriately, please contact us.
We will review the concern and take appropriate action.
16. Third-Party Websites and Services
Our website and digital memorials may contain links to third-party websites or services, including social media platforms, music services and external content providers.
These third parties may have their own privacy policies and data handling practices.
We recommend reviewing their privacy policies before sharing personal information or using their services.
Cloud Memories is not responsible for the independent privacy practices of third-party websites.
17. Requests to Remove Memorial Content
We understand that memorial content is deeply personal and that family circumstances may change.
If you wish to request the removal or correction of memorial content, please contact us at info@cloudmemories.uk.
Please provide sufficient information to identify the memorial and explain your request.
We may need to verify your identity, your relationship to the content or your authority to act on behalf of another person.
We will consider requests fairly, taking account of applicable legal rights, contractual arrangements and the interests of others.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices or legal requirements.
The latest version will be published on our website with an updated revision date.
Where changes materially affect how we use personal information, we will provide additional notice where required by law.
19. Contact Us
If you have any questions about this Privacy Policy, how we handle personal information or your data protection rights, please contact:
Cloud Memories
Website: https://cloudmemories.uk
Email: info@cloudmemories.uk
Business address: [INSERT BUSINESS ADDRESS]
We will aim to address privacy enquiries promptly and fairly.
20. Complaints
If you are unhappy with how we have handled your personal information, please contact us first so that we can investigate your concerns.
You also have the right to complain to the UK’s independent data protection regulator, the Information Commissioner’s Office (ICO).
Information Commissioner’s Office
Website: https://ico.org.uk
Telephone: 0303 123 1113
You can contact the ICO for further information about your data protection rights and how to make a complaint.
© 2026 Cloud Memories. All rights reserved.
