Privacy Policy

### **Privacy Policy for UHEVA**

**Effective Date:** [28/09/2024]

At UHEVA, we are committed to protecting your privacy and ensuring that your personal information is handled securely and responsibly. This Privacy Policy explains how we collect, use, store, and protect your data when you visit our website, use our services, or make a purchase. UHEVA complies with the **General Data Protection Regulation (GDPR)** and all applicable UK data protection laws.

### **1. Information We Collect**

We collect the following types of personal information from users who visit our website or sign up for our services:

- **Personal Information**: This includes your name, email address, postal address, phone number, and any information you provide when signing up for commemorations or contacting us.
- **Payment Information**: We collect payment details such as credit card numbers or other financial information when you purchase our services. This data is securely processed via third-party payment providers.
- **Usage Data**: Information about how you access and use our website, including your IP address, browser type, operating system, and interaction with our website.
- **Cookies**: We use cookies to enhance your experience and gather information about how you use our website.

### **2. How We Use Your Information**

We use your personal information for the following purposes:

- **To process commemorations**: We use the information you provide to create and deliver the commemoration documents and services.
- **To process payments**: Your payment information is used to securely process transactions through our third-party payment providers, including Stripe, PayPal, and Wix Payments.
- **To improve our services**: We use data from tools like Google Analytics to understand how users interact with our website, helping us optimize the user experience.
- **To communicate with you**: We may send updates, and notifications, and respond to inquiries via email or other forms of communication.
- **For legal and compliance purposes**: We may use your data to comply with legal obligations or to protect our rights.

### **3. Third-Party Services**

We share your personal data with trusted third-party service providers to help us operate our website and process payments. These providers include:

- **Stripe**: We use Stripe for secure payment processing. Stripe handles and processes your financial information in accordance with its own privacy policies, which can be reviewed [here](https://stripe.com/privacy).
- **PayPal**: We use PayPal for online payments. PayPal processes your financial data securely, and its privacy policy is available [here](https://www.paypal.com/privacy).
- **Wix Payments**: Wix Payments helps process transactions securely via our website. More about their data processing practices can be found [here](https://www.wix.com/about/privacy).
- **Google Analytics**: We use Google Analytics to track user behaviour on our website. Google collects anonymized data for analytics purposes.
- **Wix Cloud Storage**: We store personal and payment information securely using Wix’s cloud storage services.

We ensure that these third parties only use your data in accordance with this Privacy Policy and that they implement strong data protection standards.

### **4. Data Security**

We take data security seriously and use appropriate technical and organizational measures to protect your personal and payment information. This includes encryption, firewalls, and secure servers to safeguard your data from unauthorized access, disclosure, or alteration.

### **5. Data Retention**

We retain your personal and payment information for as long as necessary to fulfil the purposes for which it was collected, or until you request its deletion. If you wish to delete your personal data, please contact us at **info@uheva.com**.

### **6. Your Rights Under GDPR**

As a user located in the UK or the EU, you have the following rights under the **General Data Protection Regulation (GDPR)**:

- **Access**: You can request a copy of the personal data we hold about you.
- **Correction**: You have the right to request corrections to any inaccuracies in your personal data.
- **Deletion**: You may request the deletion of your personal data at any time (“Right to be Forgotten”).
- **Data Portability**: You have the right to request that we transfer your personal data to another organization, in a structured, commonly used, and machine-readable format.
- **Restriction of Processing**: You may request that we limit how we process your data in certain circumstances.
- **Withdrawal of Consent**: Where we rely on your consent for processing, you can withdraw it at any time.

To exercise any of these rights, please contact us at **info@uheva.com**.

### **7. Cookies**

We use basic cookies to enhance the user experience on our website. These cookies may store information such as your preferences and activity on our site. You can choose to disable cookies through your browser settings, though this may impact the functionality of certain features on our website.

We do not use cookies for advertising purposes or to track users across other websites.

### **8. Data Transfers**

As we are based in the UK, your personal information is processed and stored within the UK or the European Economic Area (EEA). In cases where we transfer data outside the UK or EEA, we ensure that adequate safeguards, such as **Standard Contractual Clauses (SCCs)**, are in place to protect your data.

### **9. Changes to This Privacy Policy**

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any updates will be posted on this page with the effective date of the changes. We encourage you to review this policy regularly.

### **10. Contact Us**

If you have any questions or concerns about this Privacy Policy, or if you wish to exercise your rights under GDPR, please contact us at:

- **Email:** info@uheva.com  
- **Address:** London United Kingdom

- **Phone:** N/A

---

This version now incorporates your use of **Stripe**, **PayPal**, **Wix Payments**, and relevant third-party services, while ensuring GDPR compliance.