Privacy Policy

Who we are

Northstar Keep is operated by Northstar Keep Ltd, a company registered in England and Wales (company number 17140276). We are registered with the Information Commissioner's Office (ICO) and act as the data controller for the personal data described here.

If you have questions about your data, contact us at hello@northstarkeep.com.

What we collect

To provide the service, we collect and store:

• –Account information: your name and email address when you register
• –Memorial content: names, dates, photos, messages and memories you or your contributors add to a page
• –Contributor information: names and email addresses submitted by people who contribute to a memorial
• –Billing information: if you buy a paid plan, our payment provider collects the details needed to take payment. We receive a record of the transaction, but not your full card details.
• –Usage data: basic information about how the service is accessed, used to keep it running correctly

How we use it

Your data is used to provide and maintain the service. Specifically, to:

• –Create and display memorial pages
• –Send notification emails about contributions and moderation
• –Take payment for paid plans and keep the records the law requires
• –Let you export and download your content
• –Maintain account security and prevent misuse

We do not use contributor information for marketing. We do not market to people through memorials they have contributed to.

How we store it

Your account data and memorial content are stored using Supabase, a managed database platform, with files and media held in Supabase Storage. This infrastructure is hosted within the European Union.

We take reasonable technical steps to protect your data, although no system can promise absolute security.

Third parties

We use a small number of third-party services to run the platform:

• –Supabase - database and file storage
• –Vercel - hosting and deployment
• –Resend - transactional email delivery
• –Paddle - payment processing and merchant of record for paid plans
• –Mapbox - maps and location features on memorial pages

These providers process data only as far as needed to deliver their part of the service. Some, such as Paddle, may process data outside the European Union; where that happens, it is covered by appropriate safeguards such as standard contractual clauses. We do not use your data for advertising, and we do not sell it.

Cookies

We use session cookies to keep you logged in. We use Vercel Analytics to understand how the site is used in aggregate, which does not identify individual users. When you buy a plan, our payment provider may set cookies that are necessary to complete checkout.

We do not use advertising or behavioural tracking cookies.

Your rights

Under UK GDPR, you have the right to access, correct, or request deletion of your personal data, and to ask us to restrict how we process it.

To make a request, email hello@northstarkeep.com. We will respond within 30 days.

Retention

We keep your data for as long as your account is active. If you close your account or ask us to delete your data, we will remove your personal data within a reasonable period, except where we have to keep it for legal reasons. Records of payments are kept for as long as tax and accounting law requires, usually six years.

Changes to this policy

We may update this policy from time to time. The date at the top of this page shows the most recent update. We will tell account holders about significant changes by email where possible.