PEEDHEE LTD - PRIVACY POLICY & UK GDPR PACK

Draft Privacy Policy for Solicitor Review - England & Wales

1. Introduction

Peedhee Ltd respects the privacy of its users and is committed to protecting personal information in accordance with UK GDPR, the Data Protection Act 2018 and applicable privacy laws.

2. Data Controller

Peedhee Ltd acts as the Data Controller for personal information processed through the Platform.

3. Categories of Data Collected

We may collect identity data, contact information, genealogy records, family relationships, photographs, biographies, timeline information, communications and technical usage data.

4. Genealogy Information

Peedhee processes family relationship information to provide family tree functionality, heritage mapping and relationship discovery services.

5. Legal Bases for Processing

Processing may be based upon consent, contractual necessity, legitimate interests, legal obligations and other lawful grounds recognised under UK GDPR.

6. Children's Information

Additional protections apply to information relating to minors. Parents or guardians may be required to provide consent where applicable.

7. Deceased Profiles

Information concerning deceased individuals may be processed for genealogy, heritage preservation and memorialisation purposes.

8. Digital Vault Data

Messages, documents, photographs and media stored within Digital Vault services are processed to provide secure legacy and future delivery functionality.

9. Cookies and Analytics

Peedhee may use essential, functional and analytics technologies to improve platform functionality, security and user experience.

10. International Transfers

Where personal information is transferred outside the United Kingdom, Peedhee shall implement appropriate safeguards including contractual protections and transfer mechanisms.

11. Data Security

Appropriate technical and organisational measures are maintained to reduce risks associated with unauthorised access, disclosure, alteration or destruction.

12. Retention, Account Deletion and Data Erasure

12. Retention, Account Deletion and Data Erasure Peedhee retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the Service and meeting applicable legal, regulatory, accounting, security and compliance requirements.
Account Deletion
Users may initiate deletion of their Peedhee account through the account deletion functionality available within the Peedhee application.
Once a user confirms an account deletion request, the account is scheduled for permanent deletion.
Peedhee provides a **30-day grace period** following confirmation of the deletion request. During this period, the user may cancel the deletion request and retain their account.
If the deletion request is not cancelled within the 30-day grace period, Peedhee's automated backend deletion process will permanently delete the user's account and associated personal content without requiring any further action from the user.
The 30-day period is a cancellation grace period and is not intended to constitute temporary account deactivation.
Information Deleted
Subject to the exceptions described below, deletion may include personal information and content associated with the user's account, including profile information, photographs, videos, audio recordings, Timeline content, Digital Vault content and other user-controlled personal content.
Information We May Retain
Following account deletion, Peedhee may retain limited information where retention is required or permitted by applicable law or is reasonably necessary for purposes including:
* tax, accounting and financial record-keeping;
* compliance with legal or regulatory obligations;
* fraud prevention and investigation;
* security, abuse prevention and protection of the Platform;
* establishing, exercising or defending legal claims;
* responding to lawful requests from courts, regulators or public authorities; and
* maintaining limited records necessary to demonstrate compliance with legal obligations.
Any information retained following account deletion will be limited to what is reasonably necessary for the relevant purpose and retained only for an appropriate retention period.
Family Tree and Shared Family Information
Peedhee is a collaborative family and genealogy platform. Information concerning a person may have been independently contributed by other family members or may form part of another user's family tree, family history or content.
Deleting a Peedhee account does not necessarily require deletion of information independently and lawfully contributed or controlled by another user.
Where appropriate, Peedhee may unlink the deleted user's account from family-tree records or otherwise restrict, anonymise or modify associated information while preserving legitimate family-tree relationships and information belonging to other users, subject to applicable data-protection law and individual rights.

Backups Deleted information may remain temporarily within secure system backups until those backups are overwritten or deleted in accordance with Peedhee's backup-retention procedures.
Information retained solely within backups will not ordinarily be restored to active use except where required for disaster recovery, security or legal purposes

13. Retention Periods

Information is retained only for as long as reasonably necessary for operational, legal, compliance, security and heritage preservation purposes.

14. User Rights

Users may have rights of access, rectification, erasure, restriction, objection, portability and complaint under applicable privacy laws.

16. Subject Access Requests

Requests concerning personal information may be submitted to Peedhee. Identity verification may be required before disclosure.

17. Family Data Export

Users may request export of eligible information in available formats, subject to verification and privacy safeguards.

18. AI Processing

Automated tools may analyse genealogy information to provide suggestions, relationship recommendations and duplicate detection features.

19. Data Sharing

Information may be shared with service providers, hosting providers, professional advisers, regulators and lawful authorities where necessary.

20. Data Breaches

Peedhee maintains incident response procedures designed to identify, investigate and respond to security incidents.

21. Complaints

Users may contact Peedhee or the UK Information Commissioner's Office where they believe their privacy rights have been affected.

22. Changes to this Policy

Peedhee reserves the right to update this Privacy Policy periodically to reflect legal, technical or operational developments.