Privacy Policy

Last updated: 7 September 2026

1. Who We Are

This Privacy Policy explains how Susan Whymark Funeral Service Ltd (“we”, “us” or “our”) collects, uses, stores and protects personal information.

Susan Whymark Funeral Service Ltd is a company registered in England and Wales under company number 04970902.

Our website is:

https://www.susanwhymark.co.uk

For privacy and data protection enquiries, please contact us:

Email: susan@susanwhymark.co.uk

We are committed to protecting your privacy and handling your personal information fairly, lawfully and transparently.

2. What Information Do We Collect?

We may collect personal information that you provide directly to us, information generated when you use our website, and information we receive from other organisations where appropriate.

Information You Provide to Us

Depending on how you interact with us, this may include:

• Your name;
• Contact details, including telephone number, email address and postal address;
• Information contained in enquiries or messages you send to us;
• Information about funeral arrangements and your wishes;
• Information about the deceased and people involved in arranging a funeral;
• Information relating to funeral plans;
• Information relating to payments and transactions;
• Information provided by a nominated representative or another person acting on your behalf;
• Any other information you voluntarily provide to us.

You should only provide personal information that is necessary and relevant to your enquiry or the services we provide.

Information Collected Automatically

When you use our website, we may automatically collect certain technical information, such as:

• IP address;
• Browser type and version;
• Device information;
• Operating system;
• General location information;
• Pages visited;
• How you interact with the website;
• Date and time of visits; and
• Information collected through cookies and similar technologies.

The exact information collected will depend on the technologies and services operating on the website.

3. Information Relating to Funeral Services

As a funeral director, we may need to collect and use information relating to funeral arrangements.

This may include information about:

• The person who has died;
• Funeral arrangements and requirements;
• Personal wishes and preferences;
• Family members and representatives;
• Religious or philosophical requirements;
• Health information where relevant to the services being provided;
• Information required to arrange or administer the funeral; and
• Information necessary to communicate with relevant third parties.

Some information provided to us may constitute special category personal data under UK data protection law, for example information concerning health or religious or philosophical beliefs.

Where we process special category data, we will ensure that we have both an appropriate lawful basis under the UK GDPR and an applicable condition for processing special category data, together with any additional safeguards required by law.

We will only collect and use such information where it is necessary and permitted by law.

4. Why Do We Use Your Information?

We may use personal information for the following purposes:

Providing Funeral Services

• Discussing and arranging funeral services;
• Arranging transportation and other funeral requirements;
• Recording funeral wishes and instructions;
• Communicating with you and other authorised representatives;
• Coordinating services with relevant suppliers and organisations;
• Providing information and support; and
• Administering and managing our relationship with you.

Responding to Enquiries

If you contact us through our website, telephone, email or other means, we may use the information you provide to respond to your enquiry and provide the information or services you have requested.

Funeral Plans

If you enquire about or purchase a pre-paid funeral plan, we may process your information to arrange and administer that plan.

Our website provides information about pre-paid funeral plans and the relevant provider. Where information needs to be shared with the relevant funeral plan provider or another organisation involved in administering the plan, we will do so only where necessary and in accordance with applicable data protection law.

Legal and Regulatory Obligations

We may process information where necessary to:

• Comply with legal obligations;
• Meet regulatory requirements;
• Establish, exercise or defend legal claims;
• Prevent or detect fraud or unlawful activity; and
• Respond to lawful requests from regulators or public authorities.

Website Administration and Security

We may process technical information to:

• Operate our website;
• Maintain website security;
• Detect and prevent misuse;
• Diagnose technical problems; and
• Improve website performance.

5. Our Lawful Bases for Processing

We will only process personal information where we have a lawful basis to do so under applicable data protection law.

Depending on the circumstances, these may include:

Contract

We may process information where this is necessary to enter into or perform a contract with you, including providing funeral services or administering arrangements you have requested.

Legal Obligation

We may process information where necessary to comply with a legal or regulatory obligation.

Legitimate Interests

We may process information where necessary for our legitimate interests, provided that those interests are not overridden by your rights and freedoms.

This may include:

• Managing our business;
• Maintaining appropriate records;
• Maintaining website and information security;
• Managing customer relationships;
• Preventing fraud or misuse; and
• Improving our services.

Consent

Where the law requires consent, we will ask for your consent before processing your information for that purpose.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Who Do We Share Your Information With?

We may share personal information where necessary to provide our services, operate our business, comply with legal requirements or otherwise as permitted by law.

Depending on the circumstances, this may include:

• Funeral service providers and suppliers;
• Cemeteries and crematoria;
• Religious organisations, celebrants and officiants;
• Healthcare or other relevant professionals where necessary;
• Government bodies and regulators;
• Payment and financial service providers;
• IT, website hosting and technical service providers;
• Professional advisers;
• Insurance or funeral-plan providers; and
• Other organisations involved in arranging or providing services requested by you.

We only share information that is necessary and appropriate for the relevant purpose.

7. FuneralGuide

Our website may provide links to FuneralGuide, including for funeral information and online donations.

When you follow a link from our website to FuneralGuide, you may be leaving our website and entering a third-party website.

FuneralGuide is operated by Funeral Zone Limited and has its own privacy policy. We do not control the privacy practices of third-party websites.

We recommend that you review the relevant third-party privacy notice before providing personal information to a third-party website.

Where we provide information to FuneralGuide for publication or another service, we will do so in accordance with the relevant arrangements and applicable data protection law.

8. Pre-Paid Funeral Plans

We provide information about pre-paid funeral plans through our website.

If you enquire about or purchase a pre-paid funeral plan, your personal information may need to be processed by us and by the relevant funeral-plan provider for purposes including:

• Arranging the funeral plan;
• Administering the plan;
• Recording your funeral wishes;
• Managing payments;
• Communicating with you;
• Communicating with your nominated representative where applicable; and
• Meeting legal and regulatory requirements.

The exact processing carried out by the funeral-plan provider will be subject to its own privacy information and terms.

9. Cookies and Tracking Technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

• Essential website functionality;
• Security;
• Remembering preferences;
• Website performance;
• Analytics;
• Embedded services; and
• Other functionality provided by third-party services.

The precise cookies and technologies used may change from time to time.

Where applicable, we will ask for your consent before placing non-essential cookies or using non-essential tracking technologies.

You can manage your cookie preferences through our cookie-consent mechanism and/or your browser settings.

10. Third-Party Websites

Our website may contain links to third-party websites.

These may include websites operated by funeral service providers, funeral-plan providers, donation services and other organisations providing relevant services.

When you click a third-party link, you may leave our website.

We are not responsible for the privacy practices of third-party websites. We recommend reading their privacy notices before providing personal information.

11. International Transfers

Some of the service providers we use may process personal information outside the United Kingdom.

Where personal information is transferred outside the UK, we will ensure that the transfer is carried out in accordance with applicable UK data protection law and that appropriate safeguards are in place where required.

12. How Long Do We Keep Your Information?

We will retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

• Provide our services;
• Maintain appropriate business and customer records;
• Comply with legal and regulatory obligations;
• Resolve disputes;
• Establish, exercise or defend legal claims; and
• Meet accounting and financial requirements.

Different types of information may need to be retained for different periods.

We will maintain appropriate retention periods in accordance with our retention procedures and applicable legal requirements.

13. How Do We Protect Your Information?

We take appropriate technical and organisational measures to protect personal information against:

• Unauthorised access;
• Accidental loss;
• Destruction;
• Misuse;
• Alteration; and
• Unauthorised disclosure.

Access to personal information will be limited to people who need it for legitimate business purposes.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

14. Your Data Protection Rights

Depending on the circumstances and subject to applicable legal exemptions, you may have rights including:

• The right to be informed about how your information is used;
• The right to request access to your personal information;
• The right to request correction of inaccurate or incomplete information;
• The right to request erasure;
• The right to request restriction of processing;
• The right to object to certain processing;
• The right to data portability in applicable circumstances; and
• The right to withdraw consent where we rely on consent.

These rights are not absolute and may not apply in every circumstance.

For example, we may need to retain information where we have a legal obligation to do so.

15. How to Exercise Your Rights

If you wish to exercise any of your data protection rights, please contact us:

Email: susan@susanwhymark.co.uk

We may need to request information from you to verify your identity before responding to a request.

We will handle requests in accordance with applicable data protection law.

16. Complaints

If you have concerns about how we have handled your personal information, please contact us first using the contact details provided in this Privacy Policy.

We will investigate and respond to your complaint in accordance with our data protection complaints procedure.

If you remain dissatisfied, you can complain to the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority.

Information Commissioner’s Office (ICO)

17. Children

Our website and services are not intended to be directed specifically at children.

We do not knowingly collect personal information from children where this is not appropriate.

If you believe that a child has provided us with personal information in circumstances where it should not have been collected, please contact us.

18. Automated Decision-Making and Profiling

We do not currently use personal information collected through this website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.

If this changes, we will update this Privacy Policy and provide any information required by applicable law.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes to our services;
• Changes to how we process personal information;
• Changes to our technology or suppliers; and
• Changes to applicable laws or regulatory requirements.

When we update this Privacy Policy, we will update the “Last updated” date at the top of this page.

We encourage you to review this Privacy Policy periodically.

20. Contact Us

If you have any questions about this Privacy Policy or how we handle personal information, please contact:

Susan Whymark Funeral Service Ltd
Email: susan@susanwhymark.co.uk
Website: https://www.susanwhymark.co.uk