Privacy Policy

Who is responsible for your data

GraveyardCheck is the controller of personal information used to operate this service. Privacy questions and rights requests can be sent to support@graveyardcheck.com.

Information we collect

• Account information, including your email address and authentication identifiers.
• Subscription information, such as your chosen plan, payment status and relevant transaction references. Complete card details are handled by Stripe and are not stored by GraveyardCheck.
• Service usage information needed to apply account limits and maintain the service.
• Technical information, such as IP address, browser information, security logs and essential cookie identifiers generated when the site is used.
• Messages you send when requesting support or exercising a privacy right.

Why we use it

We use personal information to create and secure accounts, provide subscriptions, process and evidence payments, apply usage allowances, respond to support requests, prevent misuse and comply with legal obligations. Our lawful bases are performance of a contract, legitimate interests in operating and securing the service, compliance with law and consent where consent is required.

Service providers and international transfers

We use specialist providers including Clerk for authentication, Stripe for payments, Vercel for hosting and infrastructure, and database providers for account records. These providers process information under their own security and contractual safeguards. Some processing may take place outside the UK; where required, recognised transfer safeguards are used.

Cookies

The service uses essential cookies and local storage for authentication, security and remembering your cookie notice choice. These are necessary for account features to work. If optional analytics or advertising cookies are introduced, this policy and the consent controls will be updated before they are used.

How long we keep information

We retain account and subscription records only for as long as needed to provide the service, meet tax and accounting obligations, resolve disputes and protect the platform. Security logs and support correspondence may be kept for a limited period appropriate to their purpose. Information is deleted or anonymised when it is no longer required.

Your rights

Under UK data protection law, you may have rights to access, correct, erase or restrict your information, object to certain processing and receive portable data. You may also withdraw consent where processing relies on consent. Rights are not absolute and legal exceptions can apply.

Complaints

Please contact us first so we can investigate. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

Changes to this policy

We may update this policy when the service, providers or legal requirements change. The latest version and revision date will remain available on this page.