Privacy Policy

Heritage Registry Inc. (“Heritage Registry,” “we,” “our,” “us”) operates the digital registry service and physical QR sticker product available at [domain TBD]. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our service, visit our website, or interact with us.

We collect the following categories of information:

We use the information we collect to:

• Create and manage your account and subscription.
• Fulfill sticker pack orders and ship physical materials.
• Generate, host, and display your registry content.
• Process payments, prevent fraud, and manage renewals and refunds.
• Send transactional communications (receipts, renewal notices, shipping updates, security alerts).
• Respond to support requests and improve the service.
• Operate the memorialization process, including verifying death certificates and publishing QR-linked item pages under the terms described in section 7.
• Comply with legal obligations and enforce our Terms.

We do not sell your personal information.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, we process your personal data on the following legal bases: (a) performance of our contract with you, (b) your consent, where required, (c) our legitimate interests in operating and improving the service, and (d) compliance with legal obligations.

We share personal information only in the following circumstances:

• Service providers. Vendors who help us operate Heritage Registry, including hosting, payment processing (Stripe), email delivery, analytics, customer support tooling, and sticker fulfillment. These providers are contractually required to protect the information and use it only for the purposes we specify.
• Legal & safety. When we believe disclosure is necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the safety and rights of Heritage Registry, our members, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of personal information.
• With your consent. For any other purpose disclosed to you at the time we collect the information.

Each sticker carries a unique QR code that links to the corresponding item page in your registry. You control the privacy of each item and category:

• Private items reveal only a generic “This item belongs to a Heritage Registry account” response when scanned.
• Public items reveal the information you have chosen to publish (which may include title, photo, category, and — if you enable it — inheritance notes).

Anyone with physical access to a sticker can scan its QR code. Treat QR codes the way you would treat any label attached to an object: if you would not want a visitor, mover, or contractor to learn something by scanning it, keep that information private within Heritage Registry.

Heritage Registry offers a memorialization process that materially changes the privacy posture of a deceased member’s registry. Upon our verification of a valid death certificate:

• The account is locked to read-only; no further edits are accepted.
• Item pages become printable for executors and family members.
• QR codes associated with the account publish publicly for a period of one (1) year, regardless of previous per-item privacy settings — except items or inheritance notes the member has explicitly excluded from memorial publication.

If you do not want your registry to become publicly accessible after your passing, you can (a) mark items or sections as excluded from memorial publication in your account preferences, or (b) avoid recording sensitive information in the registry.

We use cookies and similar technologies to keep you signed in, remember your preferences, measure site usage, and maintain the security of the service. You can control cookies through your browser settings, but some features of Heritage Registry may not function properly if cookies are disabled.

We retain your personal information for as long as your account is active and for a thirty (30) day grace period after cancellation, to allow for reactivation or data export. After that period, registry content is permanently deleted. We may retain certain records (for example, billing invoices) for longer where required by tax, accounting, or other legal obligations.

Data associated with memorialized accounts is retained during the one-year public-access period and thereafter is subject to deletion or anonymization under the same schedule.

Depending on where you live, you may have rights to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data (subject to limited legal-retention exceptions).
• Export a copy of your registry in a portable format (PDF or CSV).
• Object to or restrict certain processing, or withdraw consent where processing is based on consent.
• Lodge a complaint with your local data-protection authority.

To exercise these rights, contact us using the details in section 15. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.

Heritage Registry is not directed to children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, please contact us and we will take steps to delete it.

We maintain administrative, technical, and physical safeguards designed to protect your personal information, including encryption of data in transit, access controls, and regular security reviews. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

If we become aware of a security breach that affects your personal information, we will notify you and applicable regulators as required by law.

Heritage Registry is operated from the United States. If you access the service from outside the United States, you understand that your information will be transferred to, processed in, and stored in the United States, where privacy laws may differ from those of your jurisdiction. Where required, we rely on approved transfer mechanisms (such as the EU Standard Contractual Clauses) to protect personal data transferred internationally.

We may update this Privacy Policy from time to time. Material changes will be communicated by email and/or a prominent notice in the service before they take effect. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

Questions, requests, or complaints about this Privacy Policy can be directed to:

[Business mailing address TBD]
[Privacy email TBD — e.g. privacy@heritageregistry.com]