PEEDHEE LTD - PRIVACY POLICY & UK GDPR PACK
Draft Privacy Policy for Solicitor Review - England & Wales
1. Introduction
Peedhee Ltd respects the privacy of its users and is committed to protecting personal information in accordance with UK GDPR, the Data Protection Act 2018 and applicable privacy laws.
2. Data Controller
Peedhee Ltd acts as the Data Controller for personal information processed through the Platform.
3. Categories of Data Collected
We may collect identity data, contact information, genealogy records, family relationships, photographs, biographies, timeline information, communications and technical usage data.
4. Genealogy Information
Peedhee processes family relationship information to provide family tree functionality, heritage mapping and relationship discovery services.
5. Legal Bases for Processing
Processing may be based upon consent, contractual necessity, legitimate interests, legal obligations and other lawful grounds recognised under UK GDPR.
6. Children's Information
Additional protections apply to information relating to minors. Parents or guardians may be required to provide consent where applicable.
7. Deceased Profiles
Information concerning deceased individuals may be processed for genealogy, heritage preservation and memorialisation purposes.
8. Digital Vault Data
Messages, documents, photographs and media stored within Digital Vault services are processed to provide secure legacy and future delivery functionality.
9. Cookies and Analytics
Peedhee may use essential, functional and analytics technologies to improve platform functionality, security and user experience.
10. International Transfers
Where personal information is transferred outside the United Kingdom, Peedhee shall implement appropriate safeguards including contractual protections and transfer mechanisms.
11. Data Security
Appropriate technical and organisational measures are maintained to reduce risks associated with unauthorised access, disclosure, alteration or destruction.
12. Retention Periods
Information is retained only for as long as reasonably necessary for operational, legal, compliance, security and heritage preservation purposes.
13. User Rights
Users may have rights of access, rectification, erasure, restriction, objection, portability and complaint under applicable privacy laws.
14. Subject Access Requests
Requests concerning personal information may be submitted to Peedhee. Identity verification may be required before disclosure.
15. Family Data Export
Users may request export of eligible information in available formats, subject to verification and privacy safeguards.
16. AI Processing
Automated tools may analyse genealogy information to provide suggestions, relationship recommendations and duplicate detection features.
17. Data Sharing
Information may be shared with service providers, hosting providers, professional advisers, regulators and lawful authorities where necessary.
18. Data Breaches
Peedhee maintains incident response procedures designed to identify, investigate and respond to security incidents.
19. Complaints
Users may contact Peedhee or the UK Information Commissioner's Office where they believe their privacy rights have been affected.
20. Changes to this Policy
Peedhee reserves the right to update this Privacy Policy periodically to reflect legal, technical or operational developments.