Privacy Policy
This policy explains what personal data BookBurial collects when you use our literature burial service, how we use it, and the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who we are
BookBurial is based in the United Kingdom and is the data controller for the personal data you provide through this website.
Contact: book.burial@webmatter.co.uk.
2. What data we collect
We only collect what we need to deliver the service.
- Contact information: your name and email address, provided at checkout or via the contact form.
- Order details: the weight of your parcel, the price you paid, and a reference number we generate for tracking.
- Payment data: card payments are processed entirely by our payment provider. We do not see or store your card number. We receive only a confirmation of payment and a last-four-digits masked reference.
- Parcel return address: if you need items returned (non-accepted items found in your parcel), we'll ask for your postal address at that point.
- Communications: messages you send us via email or the contact form.
- Minimal technical data: your IP address and browser type, logged by our hosting provider for security purposes. We do not use analytics or tracking cookies.
3. Why we collect it, and the legal basis
| Purpose | Legal basis |
|---|---|
| Processing your order and arranging burial | Contract (UK GDPR Art. 6(1)(b)) |
| Responding to enquiries | Legitimate interests (Art. 6(1)(f)) |
| Accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Occasional service updates (only if you tick in) | Consent (Art. 6(1)(a)) |
4. Who we share data with
We only share what's necessary, with a small number of trusted service providers acting on our behalf. These include:
- A payment processor — to take card payments securely. They receive your card details directly; we only see a payment confirmation.
- An email service provider — to send order confirmations and respond to enquiries.
- A hosting provider — for website and email infrastructure.
- Burial partners — we do not share personal customer data with burial partners. Parcels are aggregated before interment.
All providers we work with are contractually bound to process data only on our instructions and to UK GDPR standards. We never sell your data. We never share it for advertising or marketing by third parties.
5. International transfers
Where any service provider operates outside the UK, transfers are made under UK-approved Standard Contractual Clauses or equivalent safeguards recognised under UK GDPR.
6. How long we keep your data
We keep personal data only for as long as necessary to provide the service, meet legal obligations (including UK accounting and tax requirements), and resolve any disputes. Once those purposes are met, data is deleted or anonymised. If you'd like to know how long we hold a specific piece of information about you, email us and we'll tell you.
7. Cookies
We only set cookies that we need to, and we ask before setting anything optional. On your first visit you'll see a cookie banner with two equally prominent choices: Accept all or Essential only. Nothing non-essential is set until you make a choice.
Strictly necessary cookies may be used to remember your cookie preference and to enable core functions such as secure checkout. Optional cookies — for example, privacy-friendly analytics — are only loaded if you have consented.
We do not use advertising cookies. We do not set cross-site tracking cookies. We do not sell data to third parties.
Changed your mind? Click Manage cookies (also in every page footer) to change your choice or withdraw consent at any time.
8. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data (subject to our legal retention obligations, for example statutory accounting and tax record-keeping requirements).
- Restrict processing.
- Portability — receive your data in a structured format.
- Object to processing based on legitimate interests.
- Withdraw consent to marketing at any time (an unsubscribe link is in every marketing email).
To exercise any of these rights, email book.burial@webmatter.co.uk. We'll respond within one calendar month.
9. Complaints to the ICO
If you believe we have mishandled your data, you can complain to the UK's Information Commissioner's Office at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We'd ask you to raise it with us first so we have the chance to address it.
10. Children
This service is not directed at children under 16 and we do not knowingly collect data from them.
11. Changes to this policy
We may update this policy occasionally to reflect changes in our service or in UK law. The "Last updated" date at the top shows when it was last revised. Material changes will be communicated by email to recent customers.