Privacy Policy

1. Introduction

Greenfields Jewish Burial Society ("we", "our", "us") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your information in compliance with the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018.

2. Data Controller

Greenfield MP LTD is the data controller responsible for your personal data. For any data protection queries, please contact us at:

• Email: greenfields@jewishburial.co.uk
• Phone: 0161 884 0754
• Address: Philips Park, Whitefield

3. What Data We Collect

We collect and process the following types of personal data:

• Identity Data: Full name, date of birth, proof of Jewish identity documents
• Contact Data: Email address, phone number, postal address
• Family Data: Spouse and dependent information, emergency contact details
• Financial Data: Payment records, transaction history, bank details (processed securely via Stripe)
• Account Data: Username, password (encrypted), membership status, application documents
• Technical Data: IP address, browser type, device information, usage data

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contractual Necessity: To fulfill our membership agreement and provide burial services
• Legal Obligation: To comply with burial regulations and religious requirements
• Legitimate Interests: To maintain cemetery records, process payments, and communicate with members
• Consent: For marketing communications (where applicable)

5. How We Use Your Data

Your personal data is used for the following purposes:

• Processing membership applications and verifying eligibility
• Managing cemetery burial rights and allocations
• Processing payments and maintaining financial records
• Communicating important account and payment information
• Maintaining perpetual cemetery records as required by law
• Ensuring compliance with Halacha (Jewish Law) and community standards
• Providing customer support and responding to inquiries

6. Data Storage and Security

Your data is stored securely using Supabase cloud infrastructure with encryption at rest and in transit. Payment data is processed through Stripe and is not stored on our servers. We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Encrypted password storage with industry-standard hashing
• Regular security audits and updates
• Role-based access controls for administrative functions
• Secure document storage with access logging

7. Data Retention

We retain personal data for as long as necessary to fulfill the purposes outlined in this policy and comply with legal obligations. Cemetery records, including burial rights and family information, are maintained in perpetuity as required by cemetery regulations and Jewish Law. Payment records are retained for a minimum of 7 years for accounting and legal compliance.

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal obligations)
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent

To exercise any of these rights, please contact us at greenfields@jewishburial.co.uk. We will respond within 30 days of your request.

9. Data Sharing and Third Parties

We may share your data with the following third parties:

• Stripe: Payment processing (subject to their privacy policy)
• Supabase: Cloud hosting and database services
• Resend: Email delivery service
• Rabbinic Authorities: For verification of Jewish identity and religious compliance
• Government Agencies: When required by law or regulation

We do not sell, rent, or share your personal data with third parties for marketing purposes.

10. Cookies and Tracking

Our website uses essential cookies for functionality (authentication, session management). We do not use third-party advertising or analytics cookies without your consent. You can control cookies through your browser settings.

11. International Data Transfers

Your data may be transferred to and stored in servers located outside the UK/EU. We ensure adequate safeguards are in place for such transfers in compliance with GDPR requirements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

13. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues:

• Website: ico.org.uk
• Helpline: 0303 123 1113