Privacy Policy

Effective date: June 20, 2026 · Last updated: June 20, 2026

Placeholder notice: Items in [brackets] must be completed before publishing. This document is a template and should be reviewed by qualified legal counsel before you rely on it.

This Privacy Policy explains how [Legal Entity Name] ("Newgrange Memorial," "we," "us," or "our") collects, uses, and protects information when you use our cemetery mapping and burial-record management service (the "Service"), available at newgrangememorial.com and its portals.

1. Who this policy covers

We provide the Service to cemetery operators and their authorized staff ("Customers"). Our handling of information falls into two categories:

Account information we hold about the staff and operators who log in — for this we act as the data controller.
Cemetery records that Customers enter into the Service about plots, burials, and plot owners — for this we generally act as a data processor on the Customer's behalf, and the Customer remains the controller of that data.

2. Information we collect

Account and authentication data

Name, email address, display name, and role (admin or operator).
Authentication credentials, managed securely by our authentication provider (we never store plaintext passwords).

Cemetery and burial records (entered by Customers)

Plot identifiers, status, notes, and plot location data on cemetery maps.
Information about interred individuals, which may include names and dates of birth and death.
Plot ownership details, including owner name and contact information.
Uploaded photos and documents associated with plots (e.g. headstone images, deeds).

Technical data

Log and security data such as IP address, browser type, and access timestamps, collected by our hosting and content-delivery providers to operate and secure the Service.

3. How we use information

To provide, maintain, and secure the Service.
To authenticate users and enforce per-cemetery access controls.
To communicate with Customers about their accounts, including password resets and service notices.
To diagnose problems, prevent abuse, and comply with legal obligations.

We do not sell personal information or use cemetery records for advertising.

4. How records are shared and protected

Access to cemetery records is restricted so that each operator can see only the cemetery or cemeteries assigned to them. Access controls are enforced at the database level, not merely in the interface.

We share information only with service providers ("sub-processors") that help us run the Service:

Supabase — database, authentication, and file storage.
Cloudflare — website hosting, content delivery, and security.
[Email/SMTP provider] — delivery of transactional emails such as password resets.

We may also disclose information where required by law or to protect our rights, users, or the public.

5. Security

We protect data in transit using HTTPS encryption, restrict access through row-level security and role-based permissions, and serve uploaded files only through time-limited signed links. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Data retention

We retain account and record data for as long as a Customer maintains an active account, and as needed to provide the Service or comply with our legal obligations. Customers may request export or deletion of their data as described below.

7. Your rights and choices

Depending on your location, you may have rights to access, correct, delete, or export personal information. Because much of the data in the Service is controlled by the cemetery operator, requests relating to specific burial or ownership records should be directed to the relevant operator; we will assist them as their processor. For account-related requests, contact us at the address below.

8. International transfers

Our providers may process and store data in [region/country]. Where data is transferred across borders, we rely on appropriate safeguards consistent with applicable law.

9. Children's and sensitive data

The Service is intended for business use by cemetery operators and is not directed to children. Burial records may include information about deceased individuals; Customers are responsible for ensuring they have the authority to upload such records.

10. Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date. Material changes may be communicated to Customers directly.

11. Contact us

Questions about this policy or our data practices can be sent to info@newgrangememorial.com, or by mail to [Legal Entity Name], [Mailing Address].