Privacy notice
How Life and Loss uses your information. Version 1.0, last updated 10 October 2026.
Who we are
Life and Loss is provided by Phrenetech Ltd, a company registered in England and Wales (company number 13302186). Our registered office is 14 Cotton's Gardens, London E2 8DN. Phrenetech Ltd is the data controller for this website, and is registered with the Information Commissioner's Office under number ZB289309.
Phrenetech also runs FuneralExperts.com, a separate service with its own privacy notice.
Our Data Protection Lead is Jason Ghous, Chief Executive. Contact him about anything in this notice, including any request about your information, at jason.ghous@phrenetech.com.
At a glance
| What you do | What we keep | Why | Lawful basis |
|---|---|---|---|
| Read the website | Nothing that identifies you | Not applicable | Not applicable |
| Register your interest in My Life and Loss | First name, email address, your consent and when you gave it, IP address, browser type | To email you about My Life and Loss, to prove you agreed, and to stop misuse of the form | Consent; legal obligation; legitimate interests |
| Send us a message | Name, email address, your message, organisation details if you give them, IP address, browser type | To read and reply to you, and to stop misuse of the form | Legitimate interests |
You do not have to give us any information. If you choose not to, we cannot register your interest or reply to your message. We do not make any decisions about you by automated means, and we do not create profiles.
Reading our website
You can read everything on this website without telling us who you are. We set no cookies and use no analytics, advertising, heatmap, session-replay or fingerprinting technology. Our web server does not record your IP address in its access logs. If you choose where a death happened on the Someone has died page, your browser remembers the choice until you close the tab; it never reaches us (see our cookies page).
Registering your interest in My Life and Loss
We record your first name, your email address, the date and time, that you ticked the consent box, the exact wording you agreed to, the page you used, the IP address our server saw, and your browser's user-agent string.
We use your name and email address only to tell you about My Life and Loss. Your registration is kept separately from every other list and enquiry, and it does not sign you up to anything else. We keep the consent details as evidence that you agreed. The IP address and user-agent string help us detect and limit automated misuse of the form. We do not currently send a confirmation email when you register.
Contacting us
If you use our contact form, we record your name, email address, the type of enquiry and your message, and for organisations the organisation's name and type. We also record the date and time, the IP address our server saw and your browser's user-agent string, to help us detect and limit misuse of the form. We use this only to read and reply to your enquiry. Please do not include medical or financial details in your message.
The earlier launch list
Before this website launched, people could ask to be told when it was ready. If you did, we will use your details only to send that one launch email, and then delete them as set out below.
Personal support through your organisation
Personal support is arranged by the organisations that take part, and you reach it through the referral link or details your organisation gives you. You will be given privacy information when you use that support. Nothing you enter on this website is shared with a participating organisation.
Our lawful bases
- Emailing you about My Life and Loss, or about the website launch: your consent, under Article 6(1)(a) of the UK GDPR and regulation 22 of the Privacy and Electronic Communications Regulations 2003.
- Keeping a record that you consented: our legal obligation to be able to show that you consented, under Articles 5(2) and 7(1) of the UK GDPR.
- Replying to a message you send us: our legitimate interests in answering the people and organisations who contact us, under Article 6(1)(f) of the UK GDPR.
- Keeping the forms secure: our legitimate interests in protecting this service from misuse, under Article 6(1)(f) of the UK GDPR. This covers the IP address and user-agent string.
Who else handles your information
We do not sell your information or share it for anyone else's marketing. Two service providers handle it for us: IONOS, which hosts the server this website runs on, and Microsoft, which provides our email system. Both work under contract terms that require them to keep your information secure and to use it only on our instructions.
When someone registers their interest or sends a message, our own staff receive an internal email with the details, so that it can be answered and misuse spotted. For registrations this includes the IP address. These emails stay inside Phrenetech. We do not use IP addresses for profiling, advertising or working out where you are.
Where your information is held
Your information is held on a server hosted by IONOS in the United Kingdom. Internal emails are held in our Microsoft 365 mailboxes. Microsoft may sometimes access information from outside the UK, for example to provide technical support. When it does, its contract with us applies the safeguards that UK data protection law requires for international transfers.
How long we keep it
| Information | How long we keep it |
|---|---|
| My Life and Loss registration | Until 90 days after our email announcing that My Life and Loss is available |
| Earlier launch list registration | Until 90 days after the launch email |
| Record that you consented | 24 months after our last email to that list |
| IP address and browser type | 30 days |
| Messages sent through the contact form | 12 months from when we receive them |
| Internal email notifications | Sign-up notifications: deleted within 30 days. Contact form notifications: deleted within 12 months. |
| Backup copies | Overwritten within 7 days |
If you unsubscribe, we keep only your email address, so that we do not email you again. We delete it when we delete the rest of that list.
Keeping it safe
Your information is encrypted when it travels between your browser and our server. Only named staff can reach the server and the data, and our application logs never record your name, email address, message or IP address. If a data breach puts your information at risk, we report it to the Information Commissioner's Office within 72 hours of finding out, and tell you without undue delay if the risk to you is high.
Your rights
You can ask us for a copy of the information we hold about you, and ask us to correct it, delete it, restrict how we use it, or object to how we use it. You can also ask for it in a portable form. Email jason.ghous@phrenetech.com. There is no charge. We will reply within one month, or tell you within that month if a complex request needs up to two months more. We may ask you to confirm your identity first, but only as far as is reasonable.
Withdrawing your consent
You can withdraw your consent at any time, as easily as you gave it: use the unsubscribe link in any email we send you, or email jason.ghous@phrenetech.com. Withdrawing does not affect anything we did before.
Complaints
If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the Information Commissioner's Office at ico.org.uk (external website) or on 0303 123 1113.
Changes to this notice
We review this notice at least once a year, and whenever we change how we use personal information. The date at the top shows when it last changed.