1. Information we collect
- Account information: your name, email address and password hash.
- Story content: the biographical details, photographs, captions, timelines and tributes you submit for Living Legacy or Memorial stories.
- Payment information: handled by Stripe. We receive a payment confirmation and the last four digits of the card; we do not store full card numbers.
- Technical information: log data, IP address, browser type and basic usage analytics needed to operate the service.
2. How we use your information
- To create, host and preserve your stories.
- To generate a permanent Story ID, permanent URL and permanent QR code.
- To process payments for Story Preservation and Preservation Plus.
- To send transactional emails (account, billing, Guardian invitations, tributes).
- To investigate misuse and protect the integrity of the platform.
3. Story building technology
To provide story-building and preservation features, we may use trusted technology providers and automated systems to process the information, photographs and memories you submit.
These services are used solely to deliver and improve the Eternal Memorial experience. We do not sell your personal information to third parties.
4. Where your data is stored
Story content and account information are stored with trusted cloud infrastructure providers that help us securely host, protect and preserve stories. Daily backups are taken and retained on redundant storage. Data may be processed in Australia, the United States, the European Union or other regions where our service providers operate.
Where personal information is transferred outside Australia, we take reasonable steps to ensure our service providers maintain appropriate privacy, security and data protection standards.
5. Public vs private content
Stories are private until you choose to publish. Once a story is published, the public story page, hero photograph, biography, gallery and any approved tributes become publicly accessible at the story's permanent URL. Email addresses and account details are never published.
6. Tributes, Legacy Messages and candles
Memorial Candles can be lit by visitors on any published Memorial. Legacy Messages and Tributes require an active Preservation Plus subscription and are reviewed by the story owner before they appear publicly.
7. Service providers
We rely on a small number of trusted third-party service providers for:
- Secure data storage
- Application hosting and delivery
- Payment processing
- Transactional email delivery
Stripe is used to process payments. We do not store full payment card details on our systems.
8. Communications
We may send service-related emails including account notifications, billing confirmations, Story Guardian invitations, tribute notifications, security alerts and important platform updates. These communications are considered part of the service and cannot always be opted out of while maintaining an active account.
9. Cookies
We use essential cookies for sign-in and security, and minimal analytics to understand how the platform is used. We do not sell your data or use it for cross-site advertising.
10. Your rights
You may access, correct or export your personal information at any time from your dashboard, or by contacting us. You may request deletion of your account at any time. Because Story Preservation is designed as a long-term preservation service, published stories may remain preserved in accordance with our Data Preservation Promise. Where appropriate, stories may be unpublished, transferred to a Story Guardian, or otherwise managed in consultation with the account owner or authorised representative.
11. Children
The service is not directed at children under 16. Stories about children may only be created by a parent or legal guardian.
12. Security
We use TLS in transit, row-level security in the database, hashed passwords, and daily backups. While no online system can guarantee absolute security, we employ industry-standard technical and organisational safeguards designed to protect your information against unauthorised access, loss, misuse or disclosure. If a notifiable data breach occurs, we will inform affected users and the Office of the Australian Information Commissioner as required.
13. Retention
Account data is retained while your account is active. Published stories are retained under our Data Preservation Promise. Backups are rotated on a rolling schedule.
14. Contact and complaints
Email privacy@eternalmemorial.com with any privacy question or complaint.
You may also contact:
Eternal Memorial Privacy Officer
Gold Coast, Queensland, Australia
If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.