Introduction

---

Memory Card is committed to protecting your privacy and handling your personal data responsibly. This Privacy Policy explains how we collect, use, store and protect personal information when you use our website, application and related services.

This policy is intended to help you understand what information we collect, why we collect it, how we use it, and the rights you may have under applicable data protection laws, including UK GDPR.

Who We Are

---

Memory Card provides a greeting card scheduling service that allows users to plan cards in advance for birthdays, anniversaries and other important occasions.

If you have any questions about this Privacy Policy or how we process your personal data, you can contact us at support@memory-card.co.uk.

What Personal Data We Collect

---

We may collect and process the following categories of personal data:

• Your name, email address, telephone number and account details.
• Billing and delivery information.
• Recipient names, household names, addresses and related scheduling information that you choose to store in your account.
• Order details, scheduled occasions, card preferences and purchase history.
• Customer support communications and account-related correspondence.
• Marketing preferences and responses to promotions or campaigns.
• Review information, including your first name and last name initial where you choose to leave a review.
• Technical information such as IP address, browser type, device information and site usage data.

How We Collect Your Data

---

We collect data in a number of ways, including:

• Directly from you when you create an account, place an order, schedule a card, contact support or update your details.
• When you add contacts, households, addresses or occasions to your account.
• When you ask us to send a WhatsApp or email notification containing a secure link so a contact can provide their own details.
• Automatically through cookies, analytics tools and website usage technologies.
• From payment processors and service providers where necessary to complete transactions or protect against fraud.

How We Use Your Data

---

We use personal data to operate and improve the Memory Card service. This includes:

• Creating and managing user accounts.
• Processing orders and arranging delivery.
• Storing scheduled occasions and reminders within your account.
• Saving contacts and household addresses for future card scheduling.
• Sending account notifications, order updates and service messages.
• Sending secure WhatsApp or email links where requested so contacts can provide their own details.
• Handling customer support requests and resolving complaints.
• Displaying product reviews, including first name and last initial where applicable.
• Improving our website, products and services.
• Sending marketing communications where you have opted in or where otherwise permitted by law.
• Detecting fraud, protecting the platform and complying with legal obligations.

Our Lawful Bases for Processing

---

Under UK GDPR, we rely on one or more of the following lawful bases when processing personal data:

• Contractual necessity where processing is required to provide the Memory Card service, fulfil an order or manage your account.
• Legitimate interests where we need to operate, improve and secure our service in a proportionate way.
• Consent where you have chosen to receive marketing communications or where consent is otherwise required.
• Legal obligation where we must retain or disclose information to comply with the law.

Third-Party Personal Data You Add

---

Memory Card allows users to store details relating to other people, such as recipients, contacts and household members. By entering this information into the platform, you confirm that you have the authority or permission to provide that personal data for the purpose of arranging greeting card scheduling, delivery or related notifications.

Marketing Communications

---

Where you have chosen to receive marketing communications, we may send you updates about Memory Card, offers, news and product information.

You may opt out of marketing communications at any time by updating the appropriate preference within your user account or by clicking the unsubscribe link included in our marketing emails.

Reviews and Display of Names

---

If you leave a review on a Memory Card product, we may display that review publicly on our website.

To help maintain trust and authenticity, reviews may be displayed together with your first name and the initial of your surname, for example Sarah J.

If you would prefer your review to be anonymised or removed, you may contact us at support@memory-card.co.uk.

Cookies and Similar Technologies

---

We use cookies and similar technologies to operate the website, maintain account sessions, analyse usage and improve performance.

Some cookies are essential for the operation of the service. Others help us understand how visitors use the site or support marketing activity where permitted.

For more information, please see our Cookie Policy.

Fraud Prevention and Security

---

We may use information relating to transactions, devices and account behaviour to help detect suspicious activity, prevent fraud and protect the Memory Card platform, our users and our service providers.

How We Share Your Data

---

We may share personal data with trusted third parties where necessary to provide our services, including:

• Payment processors.
• Delivery and fulfilment providers.
• Technology providers, hosting providers and security partners.
• Analytics and communication providers.
• Professional advisers or authorities where required by law.

We do not sell your personal data.

International Data Transfers

---

Some of our service providers may process data outside the UK. Where this happens, we take reasonable steps to ensure appropriate safeguards are in place so that your data remains protected in accordance with applicable data protection law.

Data Retention

---

We retain personal data only for as long as necessary for the purposes set out in this policy, including providing the service, meeting legal obligations, resolving disputes and protecting our business.

Certain records may need to be retained for accounting, fraud prevention, audit, legal or operational purposes.

Data Security

---

We take reasonable technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction. This includes the use of encryption and other safeguards where appropriate.

However, no internet-based service can be completely secure and we cannot guarantee absolute security.

Deletion, Anonymisation and Inactive Records

---

You may request deletion of your personal data in accordance with applicable law. Where reasonably possible, we will delete or anonymise personal data in response to valid requests.

In some circumstances, complete deletion may not be technically possible without affecting database integrity, fraud prevention controls, security measures or legal record-keeping obligations. In those cases, relevant records may instead be securely retained in an inactive or restricted state and will no longer be actively used except where necessary for legitimate operational or legal purposes.

Your Rights

---

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request portability of your data where applicable.
• Lodge a complaint with the Information Commissioner’s Office or another relevant supervisory authority.

To exercise your rights, contact us at support@memory-card.co.uk.

Children's Privacy

---

Memory Card is not directed at children and we do not knowingly collect personal data from children in a manner that would require parental consent under applicable law. If you believe a child has provided personal data to us inappropriately, please contact us.

Changes to This Privacy Policy

---

We may update this Privacy Policy from time to time to reflect changes in our services, operations or legal obligations. Updated versions will be published on this page and, where appropriate, we may notify users by email or website notice.

Contact Us

---

If you have any questions about this Privacy Policy or our handling of personal data, please contact us at support@memory-card.co.uk.

Effective Date

---

Effective date: 09/03/2026