Privacy Policy

1. Information We Collect

Information you provide directly:

Name, email address, phone number, and shipping address when placing an order
Names, dates of birth, dates of passing, and biographical information about deceased loved ones
Photos, voice recordings, video links, and other memorial media you upload
Family member email addresses for reminder services
Payment information (processed securely by Stripe — we never store card numbers)
Cemetery name, plot location, and GPS coordinates you provide
Messages left in memorial page guestbooks

Information collected automatically:

IP address and general location
Browser type and device information
Pages visited and time spent on our site
Referring website
Google Analytics data (see Cookies section)

We do not collect biometric identifiers, Social Security numbers, financial account numbers, or health information.

2. How We Use Your Information

To process and fulfill your placard orders
To build and host your loved one's memorial page
To send birthday, anniversary, and special date reminders to registered family members
To communicate with you about your order, account, or our services
To improve our website and services using aggregated analytics data
To comply with legal obligations
To share with genealogy platforms only with your explicit written consent

We will never use your information for targeted advertising, sell it to data brokers, or use it in any way not described in this policy without your prior consent.

3. Cookies & Analytics

Our website uses cookies and similar tracking technologies. You will be asked for your consent before any non-essential cookies are set.

Essential cookies (always active):

Session cookies required for the website to function
Security cookies that protect against fraud
Stripe payment cookies required for checkout

Analytics cookies (require your consent):

Google Analytics — We use Google Analytics to understand how visitors use our site. This service may set cookies and collect data including your IP address, browser type, and pages visited. You can opt out of Google Analytics at tools.google.com/dlpage/gaoptout

You may withdraw your cookie consent at any time by clicking the "Cookie Settings" link in the footer of any page. You can also control cookies through your browser settings.

QR Lasting Legacy honors the Global Privacy Control (GPC) browser signal as required by Texas law. If your browser sends a GPC signal, we will treat it as an opt-out of data sharing.

4. How We Share Your Information

We do not sell your personal information. We share your information only in the following limited circumstances:

Service providers — We share data with Stripe (payment processing), Zoho (email), and Netlify (website hosting) only as necessary to provide our services. These providers are contractually required to protect your data
Genealogy platforms — Only with your explicit written consent, and only the specific data categories you approved
Legal requirements — If required by law, court order, or to protect the rights and safety of our customers or the public
Business transfers — If QR Lasting Legacy is acquired or merges with another company, your data may be transferred. We will notify you before any such transfer and give you the option to delete your data

5. Your Privacy Rights

Under the Texas Data Privacy and Security Act (TDPSA) and other applicable laws, you have the following rights:

Right to know — You may request a copy of the personal data we hold about you
Right to correct — You may request correction of inaccurate personal data
Right to delete — You may request deletion of your personal data
Right to opt out — You may opt out of any data sharing with third parties
Right to data portability — You may request a copy of your data in a portable format
Right to appeal — If we deny a privacy request, you may appeal that decision

To exercise any of these rights: Email us at hello@qrlastinglegacy.com with the subject line "Privacy Request." We will respond within 45 days as required by Texas law. There is no charge for submitting a privacy request.

Submit a Data Request →

6. Data Retention

Memorial page data is retained as long as your hosting subscription is active
If a subscription lapses, we retain data for a minimum of 90 days before any deletion, with advance notice sent to all registered family emails
Lasting Legacy (lifetime) customers' data is retained indefinitely
Order and billing records are retained for 7 years as required by tax law
You may request deletion of your personal data at any time — billing records required by law are exempt from deletion requests

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information including:

HTTPS encryption on all pages
Secure payment processing through Stripe (PCI DSS compliant)
Access controls limiting who can view customer data
Regular security reviews of our hosting environment

No method of electronic transmission or storage is 100% secure. If we become aware of a data breach that affects your personal information, we will notify you promptly as required by Texas law.

8. Children's Privacy

Our services are intended for adults aged 18 and older. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a minor, please contact us at hello@qrlastinglegacy.com and we will promptly delete it.

Memorial pages may contain information about deceased individuals of any age. This does not constitute collection of data from living minors.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active customers of any material changes by email at least 30 days before they take effect. The date at the top of this page reflects the most recent update. Continued use of our services after any changes constitutes acceptance of the updated policy.

Contents