How we handle your information

Cuimhne Memorial Cards is a memorial stationery printer based in Dublin, Ireland. For the purposes of the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018, we are the data controller for the information described on this page. You can reach us by email at cuimhnememorialcards@gmail.com.

• Contact and delivery details — your name, email address, phone number and delivery address, so we can produce and deliver your order and talk to you about it.
• Order content — the name and dates of the person being remembered, the verse or wording you choose, and any notes you send us.
• Photographs — the images you upload or email to us for printing and restoration.
• Account details — if you create an account, your email address and an encrypted password. We never see or store your password in readable form.
• Basic usage data — anonymous, first-party page-view counts so we can see which pages are useful. We do not use advertising cookies and we do not track you across other websites.

We do not take card details. Payments are handled entirely by Stripe, who receive your card information directly — it never passes through our systems.

We process your contact details, order content and photographs because they are necessary to perform our contract with you — we cannot print a memorial card without them. We keep records of completed orders to meet our legal obligations under Irish tax law. Our anonymous usage statistics rely on our legitimate interest in understanding whether the site is working.

Photographs you send us are used for one purpose: producing your order. We store them only for as long as we need them for that, plus a reasonable period afterwards in case you want to reorder — our policy is no more than two years. Ask us at any point and we will delete a photograph sooner.

We never publish a family's photograph without asking first. Every image in our gallery is there because a family gave explicit, specific permission for it, and that permission can be withdrawn at any time by emailing us.

We use a small number of established providers, each of which acts only on our instructions:

• Supabase — database and account hosting (EU region).
• Stripe — payment processing. Stripe is the controller of your card data, not us.
• Cloudinary — secure image storage and restoration processing.
• Resend — sending order, proof and delivery emails.
• Vercel — website hosting.

We do not sell your data, share it for advertising, or pass it to anyone else except where we are legally required to.

Order records are kept for six years to meet Irish tax requirements. Our policy is to keep photographs and artwork for up to two years so that reordering is easy, and to keep contact enquiries that do not become orders for no more than twelve months. We review what we hold against those periods and remove what is past them; there is no automatic deletion running on a timer, so if you would like something removed sooner, ask us and we will do it. If you close your account, we delete your profile and disassociate it from past orders.

Under GDPR you have the right to ask us for a copy of the data we hold about you, to correct anything inaccurate, to have your data deleted, to restrict or object to how we use it, and to receive it in a portable format. Ask us through our contact form and we will action any request within one month, free of charge.

If you are unhappy with how we have handled your data, you can complain to the Irish Data Protection Commission at dataprotection.ie.

We use one strictly necessary cookie to keep you signed in to your account. That is all. We use no advertising, profiling or third-party tracking cookies, which is why you have not been shown a consent banner — under Irish law, none is required for strictly necessary cookies.