Sign in

Last updated 1 October 2026

Privacy Policy

This policy explains how Aptus IQ Limited collects and uses personal information in running the Memaura Studio website and service, and your rights over it.

1. Who we are

Aptus IQ Limited is a private limited company registered in England and Wales under company number 17406473, with its registered office at Chester House Lloyd Drive, Cheshire Oaks Business Park, Ellesmere Port, CH65 9HQ.

You can contact us regarding any privacy or data protection matter by email at contact@memaurastudio.co.uk, or in writing to The Data Protection Lead, Aptus IQ Limited, Chester House Lloyd Drive, Cheshire Oaks Business Park, Ellesmere Port, CH65 9HQ.

2. If you are a family member or a guest

Memaura Studio is used by funeral firms. When a funeral firm uses it to prepare stationery with you, sends you a link to write the wording or choose a design, or invites you to a service, the funeral firm is responsible for your information (it is the "controller"), and we process it on the firm's behalf and on its instructions (we are its "processor").

To ask about, correct or delete that information, please contact the funeral firm. We help firms respond to those requests. The firm's own privacy notice explains how it uses your information.

The rest of this policy covers the information we are responsible for ourselves.

3. What we collect, and why

If you ask about Memaura Studio through our website, we collect your name, your firm's name, your email address and telephone number if you give them, and your message. We use them to reply to you and to discuss whether Memaura Studio suits your firm. Our lawful basis is our legitimate interest in responding to businesses that contact us. We also use your internet address for a short time to limit repeated submissions; it is not stored with your enquiry.

If you sign your firm up through our website, we collect your firm's name, the plan you choose, and your name, position and email address, together with the date and time, your internet address and your browser type, as the record of your acceptance of our terms. We hold these for up to a day while you complete your payment with Stripe; once it is complete they become part of your firm's account (below), and if you do not complete it they are deleted. We email your firm's access code to the address you give.

If your firm subscribes, we collect:

  • the name of your firm and its business contact details, which you enter as your firm's details;
  • when someone at your firm accepts our terms: their name, position and email address, the date and time, their internet address and their browser type. We keep this as evidence of the agreement and use the email address to send notices about your account and our terms;
  • your firm's access code, which we store only in a scrambled (hashed) form that cannot be read back;
  • your billing details. Payments are handled by Stripe: we receive your billing name, address and email and the type and last four digits of your card or bank account, but never your full card or bank details.

Our lawful bases are performing our contract with your firm, our legitimate interests in running and securing the service and keeping evidence of our agreements, and our legal obligations (for example, keeping tax records).

If we contact your firm about Memaura Studio — for example, to tell independent funeral directors about our Founding Partner Pilot — we use business contact details that firms publish about themselves: the firm's name and address, the name and role of someone who works there, and their business email address or telephone number. We find these on the firm's own website, in public business directories and at Companies House; we do not buy contact lists. We keep a note of when we contacted you and what you told us. We use these details only to introduce Memaura Studio to your firm and to follow up on that conversation, and we send marketing emails only where the law allows it. Our lawful basis is our legitimate interest in telling funeral firms about a service made for them; we contact people only in their working capacity, and we have weighed this against their interests. You can ask us to stop at any time — reply to any of our emails, or write to contact@memaurastudio.co.uk — and we will not contact you again.

When anyone uses our website or the service, our servers keep technical logs — internet address, the page requested, the date and time and browser type — for security and to diagnose problems. Our lawful basis is our legitimate interest in keeping the service secure and working.

4. Cookies

We use only cookies that are strictly necessary for the service to work: to keep a funeral firm, or our own staff, signed in (account_session, acting_branch and studio_session), and, while a firm is signing up, to recognise the browser it signed up in when it returns from payment (memaura_signup, which expires after a day). Your browser may also store small settings on your device, such as unsaved wording or a remembered choice, which never leave it unless you save them. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.

5. Who we share it with

We do not sell personal information. We share it only with:

  • Hostinger, which hosts our servers, in its data centre in Manchester, United Kingdom, and our email;
  • Stripe, which processes subscription payments. Stripe also acts as a controller for some information, for example to prevent fraud and meet its legal obligations — see stripe.com/privacy;
  • our professional advisers, such as accountants and lawyers, where needed;
  • the police, regulators or courts, where the law requires it.

6. International transfers

Our servers, and everything stored on them, are in the United Kingdom. Where a provider processes information outside the United Kingdom, we make sure it is protected — by UK adequacy regulations, or by the UK's International Data Transfer Agreement or Addendum. Stripe may process payment information in the United States: Stripe, LLC is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which the UK recognises as providing adequate protection.

7. How long we keep it

  • Enquiries: 12 months from when we receive them, after which they are deleted automatically.
  • Sign-ups not completed: one day, after which they are deleted automatically.
  • Business contacts we have approached: 12 months from our last contact if your firm does not become a customer, after which they are deleted. If you ask us not to contact you, we keep only your name, your firm and your email address on a do-not-contact list, so that we never contact you again, for as long as we tell firms about our service.
  • Your firm's account and details: for as long as your firm subscribes, and then as our terms set out — read-only for 30 days, then deleted 90 days after the subscription ends.
  • Records of who accepted our terms: for six years after our agreement with your firm ends, in case they are needed to establish or defend a legal claim.
  • Invoices and payment records: for six years, as tax law requires.
  • Server logs: 30 days.

8. Your rights

You have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to our use of it, and to receive it in a portable form. Some of these rights apply only in certain circumstances, but you can always object to our using your information to tell you about our service, and we will stop. To use them, contact us at the address in section 1. We will respond within one month.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.

9. Changes to this policy

We will update this policy if what we do with personal information changes, and show the date it was last updated at the top of this page.