Privacy Policy

Heddwch Grave Care Ltd
Last Updated: November 2025

1. Introduction

Heddwch Grave Care Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website or services.

By using our website or services, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

We may collect the following types of personal information:

Contact Information:

Name
Email address
Phone number
Postal address

Service Information:

Memorial location details
Service preferences
Booking dates and times
Payment information (processed securely through third-party payment providers)

Website Usage Information:

IP address
Browser type and version
Pages visited and time spent on pages
Referring website addresses
Device information

3. How We Use Your Information

We use your personal information for the following purposes:

To provide and deliver our memorial cleaning services
To process bookings and payments
To communicate with you about your service requests
To send appointment reminders and service updates
To respond to your enquiries and provide customer support
To improve our website and services
To send marketing communications (only with your consent)
To comply with legal obligations

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

Contract Performance: To fulfill our service obligations to you
Legitimate Interests: To operate and improve our business
Consent: For marketing communications (you can withdraw consent at any time)
Legal Obligation: To comply with tax, accounting, and other legal requirements

5. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers: Payment processors, booking systems, email service providers (who process data on our behalf)
Legal Requirements: When required by law, court order, or government authority
Business Transfers: In the event of a merger, sale, or transfer of our business

All third parties are required to keep your information secure and use it only for the purposes we specify.

6. Data Retention

We retain your personal information only for as long as necessary:

Active Customers: For the duration of our business relationship
Enquiries: Up to 2 years after last contact
Financial Records: 6 years (as required by UK tax law)
Marketing Consent: Until you withdraw consent or we determine the data is no longer relevant

After these periods, we will securely delete or anonymize your information.

7. Your Rights

Under UK GDPR, you have the following rights:

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your data (subject to legal obligations)
Right to Restrict Processing: Limit how we use your data
Right to Data Portability: Receive your data in a portable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw marketing consent at any time

To exercise any of these rights, please contact us using the details below.

8. Cookies

Our website may use cookies to improve your browsing experience. Cookies are small text files stored on your device.

Types of cookies we use:

Essential Cookies: Required for website functionality
Analytics Cookies: Help us understand how visitors use our site
Marketing Cookies: Used to deliver relevant advertisements (only with your consent)

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

Secure encrypted connections (SSL/TLS)
Access controls and password protection
Regular security assessments
Staff training on data protection

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. Please review their privacy policies before providing any personal information.

11. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Significant changes will be communicated via email or prominent notice on our website.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

Heddwch Grave Care Ltd
Email: info@heddwchgravecare.co.uk
Phone: +441766 800959
Address: 17 Cwmorthin Road, Tanygrisiau, Blaenau Ffestiniog, Wales, LL41 3ST.

For privacy-related enquiries, data requests, or questions about how we handle your information, please contact:

Email: info@heddwchgravecare.co.uk

For all customer enquiries, bookings and memorial care services, please use:
booking@heddwchgravecare.co.uk

14. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK supervisory authority:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Helpline: 0303 123 1113

This privacy policy is effective as of November 2025 and complies with UK GDPR and Data Protection Act 2018.