Serene Funeral Planning Limited is a controller and processor of data, we are registered with the Information Commissioners Ofice, (Registration Number ZB248387), Registered at Companies House, number SC699656 . Registered Ofice Address: 272 Bath Street, Glasgow, G2 4JG.

We are aware of how important your privacy is, and based on this we have implemented measures which will ensure any personal information that is obtained from you by visiting our website or by making an application for a funeral plan will be processed and maintained in line with accepted principles of good information handling and in accordance with the General Data Protection Regulation (GDPR). Contained within this statement and set out below are details of the type of information that we at Serene Funeral Planning may hold about you, our customer. It describes how we obtain and process any information we may have and importantly how we protect your privacy.

This privacy policy is only applicable to us and personal information which may be collected and obtained by us. We may choose to amend the content of this privacy policy on occasion. If this occurs, then we will update the policy and the revised policy will be posted on our website.

We will keep you informed with the progress of your enquiry. Unless you state otherwise, you may be contacted via telephone, email, post, SMS and automated message. (see further section on ‘How we keep you informed’)

We rely upon two lawful basis’ to process your personal data according to the reason for which you have provided your data to us. Our use of your personal data will always have a lawful basis;

1. Consent – Initially when you submit your application to us, we will process and store your personal data on the basis that you have provided your consent to be contacted by us in relation to your application. You can withdraw your consent by contacting us at info@serenefp.co.uk or by using the contact details stated in this document. If you change your mind about agreeing to us processing your personal data, this will not have any efect on the lawfulness of any processing we have carried out before you changed your mind.
2. Contract – If you engage our services and we provide you with a funeral plan your personal data will be processed on the basis that we need this information to fulfil our obligations under the contract we have entered into with you by introducing you to a funeral service provider who will supply the service you have requested. Therefore, we will share your personal data with your nominated funeral service provider and your nominated representative if you choose to have one. We may also need to share your data with our regulator as part of their supervision of our authorisation.

It also includes processing your data for identification purposes to ensure that we never disclose your information to any other person that may have a similar or the same name.

You can ask us to stop processing your data in this way by contacting us. If you engaged us and hold a funeral plan with us, we will continue to contact you but only in relation to your plan and normal business reasons.

You can telephone us using the specified telephone numbers on our website under the Contact Tab and your call will be recorded for training, quality and regulatory purposes. We pride ourselves in complete customer care and this gives us the opportunity to continuously improve and monitor our customer experience. You can also email us or write to us.

We are required to make contact with you every three years to remind you about your plan and give you the opportunity to make any amendments you may wish to. This contact will be made via email or letter depending on your stated preferences.

1. You are free to access and browse our website at your convenience and do not have to provide any personal information/data, however I would like to refer you to the ‘Cookies’ section within this privacy policy. Some “cookies” are required in order to allow you to navigate our site.
2. The information or data that we collect from you may include the following details:
   
   1. Full name including title
   2. Residential address
   3. Residential status
   4. Email address (if applicable)
   5. Telephone number (home, mobile, work)
   6. Date of Birth
   7. Gender
   8. IP Address
   9. What you do on our website and where you visit; the results of this are anonymous but will be used to show us examples of which parts of our website are most and least used (please refer to ‘Cookies’ section)
3. We do not use your personal information to carry out any automated decision-making or profiling that would produce legal or similarly significant efects on you.

It is your responsibility to ensure that any information we have on record for you is kept up to date and correct. If you do require any of your information to be updated, then please contact us as soon as possible so we can ensure it is corrected. If you require your marketing preferences to be updated, again please contact us so we can update this for you.

When you complete an application, you consent to us disclosing your personal information to the following parties:

1. Serene Funeral Planning (us)
   
   1. to communicate with you, including sending you information about products and services which may be of interest to you;
   2. to speed up form filling, or to personalise, or improve your experience on our website, mobile applications or other similar devices, channels or applications;
   3. in accordance with its privacy policy.
2. The providers as listed on the specific product and/or service website page you are making an enquiry from.
3. Our channel operators: whilst the majority of the channels on our Sites are run by us, some of our channels are designed and maintained for us by our third-party service providers. We may receive your personal information from these service providers and use it in accordingly. We will only use the personal information we receive from third-parties where the relevant third-party can show that it was collected and processed with your consent;
4. the Information Commissioners Ofice and/or other regulatory/governing bodies, for the purposes of compliance monitoring;

Where permitted by data protection and privacy law, we may also disclose information about you (including electronic identifiers such as IP addresses) and/or access your account:

1. if required or permitted to do so by law;
2. if necessary in connection with legal proceedings or potential legal proceedings; and/or
3. in connection with the sale or potential sale of all or part of our business.

If you decide to enter into a service product with a third-party provider through any of the providers, the information you have provided to us, together with any further information requested by, and supplied by you or us to the third-party provider, will be held by the provider for the purposes set out in that provider’s privacy policy. Therefore, you are strongly advised to read your chosen provider’s privacy policy and satisfy yourself as to the purposes for which the provider will use your personal information before entering into the product, service or plan. We have no responsibility for the uses to which a provider puts your personal information. If we reasonably believe false or inaccurate information has been provided and fraud is suspected, details may be passed to fraud prevention agencies to prevent fraud and money laundering.

We may use your personal information:

1. to enable you to access and use our Services;
2. to personalise and improve aspects of our Services;
3. for research, such as analysing market trends and customer demographics;
4. to communicate with you, including some or all of the following:
   
   1. to process an application between you and us or a third-party such as the funeral director selected to provide the service you applied for
   2. to track applications;

Cookies and Web Beacons

This section sets out our use of Cookies when you use our sites. Please read it carefully as it explains how we and third-parties may make use of your data collected by such Cookies.

We use a single first party cookie, named ‘PHPSESSID’. This cookie is vital for the operation of the website, as it allows us to track diferent page loads to yourself, which allows the form and application process to work. To find out more about accepting or refusing cookies please visit www.allaboutcookies.org.

We also use Google Analytics to collect non-personally identifiable information, in aggregate form, to understand website/page visit volumes in terms of source, geography, browser, etc. Google Analytics employs a software technology called web beacons, that help us better manage content on our site by informing us what content is efective. Web beacons are tiny graphics with a unique identifier, similar in function to cookies, and are used to track the online movements of Web users or responses to emails. In contrast to cookies, which are stored on a user’s computer hard drive, web beacons are embedded invisibly on Web pages and are about the size of the period at the end of this sentence. Web beacons cannot be disabled in same manner as cookies may. We do not tie the information gathered by web beacons to our customers’ personally identifiable information.

When you first visit our website, you will be presented with a cookie banner asking you to consent to the use of non-essential cookies (such as analytics or marketing cookies). We will not place these cookies on your device unless you provide your consent. You can update your cookie preferences at any time by clicking the ‘Cookie Settings’ link available at the bottom of our website. Essential cookies (required for the basic operation of the site and application process) cannot be disabled.

Cookies used by Google Analytics:

Google Analytics is a simple, easy-to-use tool that helps website owners measure how users interact with website content. As a user navigates between web pages, Google Analytics provides website owners JavaScript tags (libraries) to record information about the page a user has seen, for example the URL of the page. The Google Analytics JavaScript libraries use HTTP Cookies to “remember” what a user has done on previous pages / interactions with the website.

Important: Read the Google Analytics privacy document for more details about the data collected by Google Analytics. Google Analytics supports three JavaScript libraries (tags) for measuring website usage: gtag.js, analytics.js, and ga.js.

Privacy Policy for the use of Facebook

We use the “visitor action pixels” from Facebook Inc (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”)) on our website. This allows user behaviour to be tracked after they have been redirected to the provider’s website by clicking on a Facebook ad. This enables us to measure the efectiveness of Facebook ads for statistical and market research purposes. The data collected in this way is anonymous to us, i.e. we do not see the personal data of individual users. However, this data is stored and processed by Facebook, which is why we are informing you, based on our knowledge of the situation. Facebook may link this information to your Facebook account and also use it for its own promotional purposes, in accordance with Facebook’s Data Usage Policy https://www.facebook.com/about/privacy/. You can allow Facebook and its partners to place ads on and of Facebook. A cookie may also be stored on your computer for these purposes.

The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter of GDPR. You can object to the collection of your data by Facebook pixel, or to the use of your data for the purpose of displaying Facebook ads by contacting the following address: https://www.facebook.com/settings?tab=ads. Facebook is certified under the Privacy Shield Agreement and thus guarantees compliance with European data protection legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

Privacy Policy for the use of Instagram.

On our websites functions of the service Instagram are embedded. These functions are ofered by the Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged in to your Instagram account, you can link contents of our websites to your Instagram profile by clicking the Instagram button. By this

,Instagram will associate the visit of our websites with your user account. We would like to point out that we, as providers of these websites, do not obtain knowledge about the contents of transmitted data as well as their use by Instagram.  For further information, please review the Privacy Policy of Instagram: http://instagram.com/about/legal/privacy/

X (Twitter) Conversion Tracking

On our website, we use the Conversion Tracking Service of Twitter Inc. (1355 Market Street #900, San Francisco, California 94103, “Twitter”). Twitter stores a cookie on the user’s computer to enable an analysis of the use of our online products and services. Twitter Conversion Tracking tracks the actions of users after they have viewed ads or interacted with ads on Twitter. Twitter’s Conversion Tracking allows you to assign conversions such as link clicks, retweets or “like” data. The legal basis for the use of this service is Art. 6 paragraph 1 sentence 1 letter f GDPR. If you wish to object to tracking, you can do so using the Digital Advertising Alliance tool at optout.aboutads.info. Twitter is certified under the Privacy Shield Agreement and thus guarantees its compliance with European data protection legislation: (https://www.privacyshield.gov/participant?id=a2zt0000000TORzAAO&status=Active)

Cookie settings

You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. Please note that by disallowing cookies some functionality on the site may be restricted.

Our Sites are “VeriSign Secure Websites” and keeping information about you secure is very important to us. However, no data transmission over the internet can be guaranteed to be totally secure. Sensitive information, for example, your card details, is encrypted to minimise the risk of interception during transit. We do our best to keep the information you disclose to us secure. However, we can’t guarantee or warrant the security of any information which you send to us, and you do so at your own risk. By using our Sites you accept the inherent risks of providing information online and will not hold us responsible for any breach of security.

You have certain rights under the General Data Protection Regulations (GDPR). For example, we will always let you have a copy of the personal information we hold about you, if you request it from us in writing.

1. Right to be informed when we collect your data – we have to tell you what we are going to do with it primarily though this Privacy Policy and within the opt in / consent statement.
2. Right to Object – because you have asked us to help you find a financial product or service, we need to process the personal information you give us to enable us to find the best product or service available. You can object to this processing at any time by sending us an email at info@serenefp.co.uk We will action any request you make promptly, although this will mean that we will not be able to help you find the service that you asked us to search for.
3. Right of Access – you can ask us at any time to confirm whether we hold your personal information, and if so, you can access it by writing to us at the address at the top of this privacy policy called Registered Address.
4. Right to rectification – if we hold personal information about you that is inaccurate, you can ask us to correct it, and we will do this as quickly as possible.
5. Right to erasure – if it is no longer necessary for us to hold your personal information bearing in mind the reason why you provided it to us, you can ask us to delete it. If you ask us to do this, we will delete your personal information as soon as possible although this will mean that we may not be able to help you find the service that you asked us to search for. If you have a funeral plan with us we will be unable to delete your data as we would then be unable to provide the service you are paying for.
6. Right to restrict our use of your information – you can ask us to restrict our processing of your personal information if you think for example that the personal information you gave us is inaccurate. This may mean that we may not be able to help you find the financial product or service that you asked us to search for.
7. Right to data portability – this gives you the right to ask a holder of your information to transfer that information to another business. This right would most commonly be used if you were switching banks, insurance companies and utility companies.
8. Right to complain to the Information Commissioner’s Ofice (ICO) – we will try to resolve any complaint that you may have in relation to data protection issues. If you are not happy with our final response you have the right to have your complaint dealt with by the ICO. Please refer to our Complaints section “How To Make a Complaint” below for further information.

To make enquiries and/or exercise any of your rights set out in this Privacy Policy please contact our Customer Services Team at info@serenefp.co.uk

The amount of time we retain your information for will depend on the reason it was provided:

1. • If you request to opt out of marketing, we will still need to retain your information in order to evidence your preferences.
   • We will need to retain, for a minimum period of 6 years, any information relating to a funeral plan product you have entered into with us. This period will commence once your relationship with us has ended. We need to keep your information for this length of time to assist with any potential future complaints.
   • Your information/data will not be used for marketing purposes once 12 months has passed following your application.

If you require further information on our data retention policies please email: info@serenefp.co.uk

You can opt out of future contact from us at any time. All of our marketing messages provide an opt out link – please allow up to 48 hours for us to process your opt out request. Alternatively you can make your request by email to info@serenefp.co.uk where your details will be removed from any future marketing campaigns.

Under the General Data Protection Regulation (GDPR), all individuals have the right to request the deletion or removal of personal data (the right to be forgotten) under the following circumstances:

1. • Where the personal data is no longer necessary in relation to the purpose for which it was originally collected / processed.
   • When the individual withdraws consent.
   • When the individual objects to the processing and there is no overriding legitimate interest for continuing the processing.
   • The personal data was unlawfully processed (i.e. otherwise in breach of the GDPR).
   • The personal data has to be erased in order to comply with a legal obligation.
   • The personal data is processed in relation to the ofer of information society services to a child.

There are some circumstances where the right “to be forgotten” does not apply i.e. where we need to comply with a legal obligation. If you wish to request your “right to be forgotten” please email: info@serenefp.co.uk Our marketing partners will also be informed of your request

We always aim to be fair and honest in everything we do, so if you have a complaint about any aspect of our service we’re keen to resolve it as quickly as possible. You can contact us is any of the following ways:

1. • By Post: Complaints Department, Serene Funeral Planning Limited, Robin Hood House, Robin Hood Street, Nottingham, NG3 1GF.
   • By Phone: 0330 1751 9957

(calls are charged at local rates and are inclusive of mobile phone users’ free minutes)

1. • By Email: complaints@serenefp.co.uk

We aim to resolve your complaint about any data breach or processing, as soon as possible. Sometimes things take a little more time. Please find below the process that we will adhere to in order respond to your query.

1. • We will endeavour to resolve your complaint in three working days and will always make contact within five working days to either provide the outcome or acknowledge receipt.
   • Within 20 working days you will receive from us a Final Report concerning the investigation into your complaint
   • We will investigate your complaint fully and we always aim to resolve the problem where reasonably possible, sooner than 20 working days of receipt if we can.
   • The Final Report from us will include the findings from our investigation and, if applicable, and what actions we will take to put things right.
   • If you are not satisfied with the outcome of the complaint you can escalate this to the Financial Services Ombudsman.

A policy review will be conducted on an annual basis and upon any legislative changes or breeches of the policy.