Privacy Policy

---

Privacy Policy, Data Protection and GDPR

Hayley Owen Funerals (York) Ltd takes the privacy of its clients very seriously. The following document explains how we use any personal information we collect about you and your loved one when you use our services and contact us via our website.

We are Hayley Owen Funeral Directors, a family run Funeral Directors based in York. We are registered with the Information Commissioners Office (ICO) [Register ZB059199]

We are the data controller and data processor of your personal data.

We may collect and process the following information about you:

• Information you provide to us either face to face or over the phone. 

• Information you provide to us via letter or email

• Information you provide when filling in a contact us form on our website

• Information you provide to us when completing pre-paid funeral plan documentation

This data is likely to include your name, address, telephone number and email address. We

may also collect information when you pay with a debit or credit card.

The information that is collected, (which may include sensitive information) is essential to us in the 

performance of our duties to you. We use this information for the purpose of carrying out funeral arrangements on your behalf or to make pre-paid funeral plan applications. 

The legal basis of us holding this personal data is therefore for us to provide you a service as set out in a contract between both parties, 

We DO NOT use any information collected via the use of cookies on our website for marketing. 

purposes. 

HOW WE USE THIS INFORMATION 

• We will only use your data for the purposes of fulfilling our services to you. 

These services could include:  arranging and carrying out a funeral, funeral wishes or pre-paid funeral plans, managing donations on your behalf, arranging ashes internments and arranging jewellery or items that may contain your loved one’s ashes, finger prints or hair.

• We WILL NOT use your data for marketing purposes. Ecclesiastical (Perfect choice) funeral plans have their own privacy policy and marketing policy which you will agree to when you make a plan application.

HOW WE SHARE INFORMATION ABOUT YOU

We may disclose your personal information to third parties in the following circumstances:

• For the purposes of carrying out our funeral services for you.

• In accordance with our legal duties of compliance.

• If we are under a duty to disclose or share your personal information in order to comply with

any legal obligation or to protect the rights, property, or safety of us, our clients or others.

This includes exchanging information with other companies and organisations for the

purposes of fraud protection and prevention, credit risk reduction and to pursue debtors.

• If we handle charitable donations on your behalf, then we will provide next of kin contact

details to the charities for them to acknowledge receipt of the final monies collected. (In our

correspondence with these charities we state that next of kin information is to be used for the

sole purpose of acknowledgment of the monies received, and not to be used for any marketing or third party linking.

We do not transfer your personal data outside of the EEA.

DATA RETENTION PERIOD

• We only keep your personal information for as long as is necessary. 

For the performance of a pre-paid funeral plan this could be several years. 

• We never store records of payment details.

• We keep some business records for a period of 7 years to satisfy our legal and regulatory

obligations. 

• We will review on a regular basis the information that we hold and if it is deemed no longer

relevant then it will be destroyed.

• We keep some information for purpose of creating an historical archive. This

information will not be shared with any 3rd party without the express consent of the next of

kin or person to whom the information relates.

• We will also keep information regarding funeral arrangements where by we still have the deceased’s ashes, this is so we can act accordingly and check personal details for security checks ensuring they are collected by the appropriate person.

HOW WE WILL KEEP YOUR DATA SECURE

We will take all reasonable security measures to protect your personal information in storage. These 

measures include:

• Paper copies of information held will be kept secure and where necessary locked away with

access restricted to the relevant personnel in the performance of our services to you.

• Password restricted access to specific personnel that we hold on the computer.

• Any personal data that is transferred electronically for the purposes of funeral arranging will be encrypted. 

• digital data stored on-site will be protected by anti-virus software and a firewall. 

Where we store your data:

The information we collect from you will be stored securely in a locked cabinet or an encrypted online database 

YOUR RIGHTS:

Should you wish to access the information we hold about you:

GDPR gives you the right to access any information held about you. We shall respond promptly within 30 days of receiving any request. We shall provide you with details of the personal information we hold about you, including the source(s) of this information and the reason for processing this information and the people/organisations we are entitled to share this information with. 

YOUR RIGHT TO ADJUST/CHANGE YOUR DATA AND DATA ACCURACY

You have the right to request rectification of any inaccurate data that we hold about you.

It is important that we hold accurate information about you and will take all reasonable steps to 

ensure when collecting this data, that accuracy is always considered. Sometimes data held will need to be updated and you can assist us with this by informing us of any changes when they occur.

YOUR RIGHT TO RESTRICTION OF PROCESSING

You have the right to obtain a restriction of processing data in the following circumstances:

• Where the personal data held is potentially inaccurate, it is restricted until the accuracy has 

been established.

• Where the purpose for processing the data is unlawful

• Where we no longer need the personal data, but it is required by you regarding a legal claim

YOUR RIGHT TO REQUST WE ERASE ALL YOUR DATA

You have the right to request erasure of any personal data that we hold about you.

YOUR RIGHT TO DATA PORTABILITY

You have the right to data portability. We will provide to you the data in a suitable format to be 

readily transferred to another data controller. This would be in the event you wish another funeral director to take over your arrangements.

YOUR RIGHT TO OBJECT

You have the right to object if there are legitimate reasons to your data being processed by us. If you have objected to us processing your personal data based on legitimate reasons then we shall 

cease such processing immediately unless it can be demonstrated that our legitimate grounds for 

processing over-ride your interests, rights, and freedoms, or that the processing is necessary for the 

conduct of legal claims.

IF YOU HAVE A QUESTION:

Then please do not hesitate to contact Dave Barker (Director) at Hayley Owen Funerals, 01904 792525

IF YOU HAVE A COMPLAINT:

If you have a complaint about any aspect of how your personal data has been used then please 

contact Dave Barker in writing at 169-171 Boroughbridge Road, York, Yo26 6AN

We will review this policy and may make changes from time to time in accordance with any 

requirements of GDPR. The most up to date version will be published on our website  www.yorkfuneral.uk

Updated 10th May 2021

Next review date

9th May 2023