Privacy
Policy

Last updated: 24/01/2020

Using Your Personal Information - GDPR

Where you provide personal data to us, we will process it in accordance with the GDPR. Only we will process your data. We will process your data to inform you about Poppy’s services, using the contract basis for processing. Without your data, we cannot provide you with tailored information about our services. We will only process your name and contact details, banking information where appropriate, and details relating to the person who has died. We will only keep the data in an identifiable form for 24 months after you provided it to us or, if relevant, the date of the funeral (whichever is later). Banking formation will be deleted immediately after use.

Subject to the GDPR, you have the right to access, rectify or erase the data we hold about you. You have the right to complain to the Information Commissioner’s Office if you consider that we have processed your data not in accordance with the law.

Log Data

Like many site operators, we collect information that your browser sends whenever you visit our site.

This Log Data may include information such as your computer's Internet Protocol ("IP") address, browser type, browser version, the pages of our site that you visit, the time and date of your visit, the time spent on those pages and other statistics.

In addition, we may use third party services such as Google Analytics that collect, monitor and analyze this.

Cookies

Cookies are files with a small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.

Like many sites, we use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our site.

Your rights

In this section, we have listed the rights that you have under data protection law.

Your principal rights under data protection law are:

(a) the right to access - you can ask for copies of your personal data;

(b) the right to rectification - you can ask us to rectify inaccurate personal data and to complete incomplete personal data;

(c) the right to erasure - you can ask us to erase your personal data;

(d) the right to restrict processing - you can ask use to restrict the processing of your personal data;

(e) the right to object to processing - you can object to the processing of your personal data;

(f) the right to data portability - you can ask that we transfer your personal data to another organisation or to you;

(g) the right to complain to a supervisory authority - you can complain about our processing of your personal data; and

(h) the right to withdraw consent - to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.

These rights are subject to certain limitations and exceptions. You can learn more about the rights of data subjects by visiting https://ico.org.uk/for-organisations/guide-to-data-protection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.

You may exercise any of your rights in relation to your personal data [by written notice to us].