Privacy policy.
What we collect when you write to us, why, how long we keep it, and how to ask us to delete it. We have tried to make this short.
Who we are
Qbituary is a UK-based studio that makes bespoke digital memorials. The data controller is Qbituary Ltd, contactable at enquiries@qbituary.com.
What we collect
When you submit the form on this site, we collect:
- Your name
- Your email address
- Your phone number, if you provide it
- The name of your loved one, if provided
- Anything you write in the open-ended field
- Your preferences (tier, visibility, contact method, time slot)
- Anti-spam metadata (form-fill duration) — used to filter bots
- The date and time of submission
We do not run third-party analytics, advertising trackers, social-media pixels or cookie-based fingerprinting on this site. The only client storage we use is a small localStorage key that remembers in-progress form answers until you submit.
Why we collect it
The data is used only to respond to your enquiry and arrange a first call. Our lawful basis is your explicit consent, given when you submit the form, plus our legitimate interest in replying to a contact you initiated.
Where we store it
Submissions are stored in Google Firestore (Firebase) hosted in EU regions. Access is restricted to the Qbituary team. We do not sell, share, or transfer your data to any third party for marketing purposes.
How long we keep it
Enquiry data is retained for up to 24 months from submission unless you become a customer (in which case retention follows our service agreement) or you request earlier deletion.
Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data ("right to erasure")
- Export your data in a portable format
- Object to processing
- Lodge a complaint with the UK Information Commissioner's Office (ico.org.uk)
To exercise any of these rights, email enquiries@qbituary.com. We respond within 30 days.
Security
The form is submitted over HTTPS. Server-side validation rules (Firebase security rules) reject malformed and automated submissions. We minimise the data collected and never request payment information through this form.
Changes to this policy
If this policy changes, the "Updated" date at the top of this page will reflect it. Material changes will be flagged on the homepage for at least 14 days.