Families trust us with photographs and stories at the hardest of times. This page sets out exactly what we hold, why, who can see it, and what happens to it, without the legal fog.
← Back to eternallyloved.co.ukEternally Loved makes memorial pages, with an order of service included, for families directly and through funeral directors and celebrants. For anything in this notice (a question, a correction, a deletion) write to hello@eternallyloved.co.uk and a person will reply.
If the service moves to a successor company that carries it on, your personal data may pass to that company as the new data controller, on the same terms as this notice, and we will tell you by email before it happens. Nothing about how your data is used would change because of the move.
To start a page we take the name of the person who has died, your name and your email address. The email address is how we send you your private link and how you sign in again. Everything you then put on the page is held so that the page can show it: the words, the details of the day, the photographs you add (we keep the original and the smaller copies the page serves), the order of service files made from the page or the PDF you upload instead, and the recording of the service if you add one. We also keep a history of changes to the page (which version was saved, when, and by which link) so that Undo works and so that we can put a page right if something goes wrong.
When you reply on a memorial page we store your name, whether you are coming to the service, to the wake or both, how many are in your party, anything you tell us you need for the wake (such as a dietary requirement or a wheelchair space) and any message you leave. This exists so the family knows numbers for the day, for the chapel and the caterer, and nothing else. Replies are never public and never used for marketing.
A message on the wall is stored with the name you give. A photograph you send to the family is stored with your name and any note, and is held until the family decides whether to show it. Nothing you send appears on the page until the family approves it.
Just visiting stores nothing about you with us. We count how many times a page is viewed each day, as a number only. Memorial pages carry no advertising, no analytics trackers and no social media buttons. Pages are marked so search engines do not list them, and are shared only by the family, with the people they choose. We also name the AI companies' crawlers, one by one, in the instructions a memorial page gives to automated visitors, and tell them not to read it. That is a request rather than a lock: the ones that respect such requests stay away, and we cannot compel the rest. It is not done for the business pages, which we are glad to have read.
Card payments are taken by Stripe on their secure page. We never see or hold card details; we keep only a payment reference, the amount, the date and the email address the receipt went to, so that we know the page is paid for.
To stop anyone flooding a family's page with replies, messages, photographs or sign-in requests, we keep a scrambled (salted and hashed) form of the sending address for each one, which lets us count how many have come from one place in an hour. It is not your address, cannot be turned back into it, and never leaves our system: it is left out of every export and backup.
We hold your firm's name, the address for your portal link, your logo and website if you give them, and a monthly statement of the pages arranged through you.
The page itself can be seen by anyone who has its address. The family's private link opens the editing layer, the guest list, the messages and photographs awaiting approval, and the change history; it stays signed in on that device for up to ninety days, and the family can see who else holds access and end anyone's at any time. A funeral director's portal shows the state of each page arranged through the firm and how many replies and messages are waiting; it cannot change a family's page or read the guest list. We can see everything we hold, because we run the service, and we look only when the family asks us to or when something needs putting right.
Pages, photographs, replies and messages are stored and served by Cloudflare, the infrastructure provider that runs a large part of the web. Like any web host, Cloudflare keeps short-lived technical logs (such as IP addresses) to keep the service running and secure. A copy of our records is made each night for safety and kept for thirty-five days.
You can ask us at any time to show you what we hold about you, correct it, or delete it. Just email hello@eternallyloved.co.uk. A family can download a complete copy of their page, photographs included, from the page itself whenever they wish. If you appear in a photograph on a memorial page and would rather not, tell us and we will work with the family to put it right quickly.
Under UK data protection law (UK GDPR) you also have the right to complain to the Information Commissioner's Office at ico.org.uk, though we would always rather you told us first so we can fix it.
Public pages set no cookies. The only cookies in the whole service exist to keep the private parts private: one set when the family, or someone they have given access to, opens their private link, so they stay signed in on their own device for up to ninety days, and one on our own review pages. Neither tracks anything or follows you anywhere. There is nothing to consent to, so there is no cookie banner.
We will update this page if our practices change, and the date below will always tell you when it was last touched.
Last updated: 5 September 2026.