Privacy Policy
Privacy Policy
Call us any time Day or Night
Our Commitment to Your Privacy
At Crabtree Family Funeral Services, located in Pudsey and serving the communities of Leeds and Bradford, we understand the profound trust you place in us, especially during times of loss. Protecting your privacy and the sensitive information you share is a responsibility we take with the utmost seriousness and care. This Privacy Policy outlines how we collect, use, store, and protect your personal data, ensuring we comply with the UK General Data Protection Regulation (GDPR) and other relevant data protection laws.
1. Who We Are
Crabtree Family Funeral Services, Pudsey, Phone: Email: crabtreefamilyfuneralservices@gmail.com
Website: crabtreefamilyfuneralservices.co.uk
We are the Data Controller responsible for your personal data.
2. The Information We Collect
To provide our compassionate services, we need to collect certain personal information. This may include:
Your Personal Details: Name, address, contact numbers (phone, mobile), email address, relationship to the deceased.
Payment Information: Bank details for invoicing and payment processing (though we do not store full payment card details).
Sensitive Personal Data (Special Category Data):
Information about the Deceased: Name, date of birth, date of death, last address, marital status, occupation, cause of death (from the Medical Certificate of Cause of Death), religious beliefs, and any specific wishes for their funeral.
Your Sensitive Data: Any religious or philosophical beliefs you share that are relevant to the funeral arrangements.
Information from Third Parties: We may receive information from hospitals, care homes, doctors, or coroners regarding the deceased.
3. How We Collect Your Information
We collect information primarily through:
Direct Interactions: When you contact us by phone, email, in person, or via our website's contact form to inquire about or arrange a funeral.
Third Parties: From medical professionals (doctors, hospitals, coroners) providing the Medical Certificate of Cause of Death.
Publicly Available Sources: In limited circumstances, from public registers or directories if necessary to verify information or fulfil legal obligations.
4. How We Use Your Information (Purpose and Legal Basis)
We use your personal data for the following purposes and rely on the following legal bases under GDPR:
To Provide Funeral Services (Contractual Obligation):
Arranging and conducting the funeral service as per your instructions.
Liaising with third parties (e.g., crematoria, cemeteries, officiants, florists, caterers, EverWith jewellery providers) on your behalf.
Managing payments and invoicing.
This includes processing sensitive data (e.g., religious beliefs, cause of death) as it is necessary for the performance of the contract and for reasons of substantial public interest (funeral arrangements).
To Comply with Legal Obligations (Legal Obligation):
Registering the death with the relevant authorities (e.g., Register Office).
Complying with regulations from the Competition and Markets Authority (CMA) regarding price transparency.
Responding to lawful requests from public authorities.
For Our Legitimate Interests (Legitimate Interest):
Maintaining records for accounting and auditing purposes.
Improving our services and understanding client needs.
Responding to complaints or queries.
Marketing our services (only where we have a legitimate interest and it does not override your rights and freedoms, or with your consent where required).
With Your Consent (Consent):
Where we process your data for specific purposes that require your explicit consent (e.g., sending marketing communications if you have opted in, or sharing specific personal details with a third party not directly involved in the funeral arrangements). You have the right to withdraw consent at any time.
5. Sharing Your Information
We will only share your personal data with third parties when necessary to provide our services, comply with legal obligations, or with your explicit consent. These third parties may include:
Crematoria and Cemeteries: To arrange committal.
Ministers, Celebrants, and Officiants: To conduct the service.
Doctors: For completion of cremation forms (where applicable).
Hospitals and Care Homes: To facilitate the collection of the deceased and obtain necessary documentation.
Local Authorities (e.g., Register Office, "Tell Us Once" service): For death registration and related notifications.
Coroners: If an investigation into the cause of death is required.
Suppliers: Such as florists, caterers, monument masons, EverWith jewellery suppliers, or other service providers involved in the funeral arrangements.
Professional Advisors: Such as legal advisors or accountants, where necessary.
Regulatory Bodies: Trading Standards in the case of a complaint.
We ensure that all third parties we work with are reputable and committed to protecting your data. We do not sell your personal data to any third parties.
6. Data Security
We have implemented robust security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered, or disclosed. These measures include:
Physical security at our premises.
Secure IT systems and data encryption where appropriate.
Strict internal policies and training for our staff on data handling.
7. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
Generally, we retain funeral records for a period of 7 years after the service to comply with legal and accounting obligations. Information relating to pre-paid funeral plans will be retained for the duration of the plan.
8. Your Legal Rights
Under GDPR, you have the following rights regarding your personal data:
Right to be Informed: To know how your data is being used (as explained in this policy).
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of inaccurate or incomplete data.
Right to Erasure (Right to be Forgotten): To request the deletion of your personal data in certain circumstances.
Right to Restrict Processing: To request that we limit the way we use your data in certain situations.
Right to Data Portability: To request your data be transferred to another organisation.
Right to Object: To object to the processing of your data in certain circumstances, particularly for direct marketing.
Rights in relation to automated decision-making and profiling: We do not use automated decision-making or profiling.
To exercise any of these rights, please contact us using the details provided below. We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it.
9. Complaints
If you have any concerns about our use of your personal data, please contact us in the first instance. We will do our best to resolve any issues. You also have the right to make a complaint at any time to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues (www.ico.org.uk).
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be available on our website.
Contact Us
If you have any questions about this Privacy Policy or our data protection practices, please do not hesitate to contact us:
Crabtree Family Funeral Services, business address will be provided on request Phone: 07712208058 (24/7 for emergencies) Email: crabtreefamilyfuneralservices@gmail.com Website: crabtreefamilyfuneralservices.co.uk
Important Note: This Privacy Policy is provided as a comprehensive guide. It is highly recommended that you seek independent legal advice to ensure it fully complies with all current UK data protection legislation and is tailored specifically to your business's unique data processing activities.