Legal
Privacy Policy
Effective date: 20 July 2026
StoryStone™ ('we', 'us', 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, hold, use and disclose personal information, and how we comply with the Australian Privacy Principles ('APPs') under the Privacy Act 1988 (Cth). By using our Service, you consent to the handling of your personal information as described in this policy.
1. What personal information we collect
We may collect the following types of personal information:
- Account information — your name, email address, password and contact details.
- Memorial content — information about a deceased person, including their name, dates, biography, photographs, videos, audio recordings, family relationships and life events that you choose to upload.
- Guestbook and contact information — names, relationships, messages and enquiries submitted through the Service.
- Payment information — where you make a purchase, billing details processed by our payment providers (we do not store full card numbers).
- Technical and usage information — IP address, device and browser type, pages visited, and interactions with the Service, collected automatically including through cookies.
2. Sensitive information
Memorial content may include sensitive information, such as details about a person’s racial or ethnic origin, religious beliefs, cultural heritage, military service or health. We only collect sensitive information where you provide it to us for inclusion in a memorial, and by doing so you consent to us handling that information for the purpose of creating and displaying the memorial.
3. How we collect personal information
- directly from you when you create an account, build a memorial, make an enquiry or contact us;
- automatically as you interact with the Service (for example, through cookies and analytics); and
- from third parties, such as payment providers or people you authorise to contribute to a memorial.
4. Why we collect, hold, use and disclose your information
We collect and use personal information to:
- create, host and display digital memorials and generate associated QR codes;
- provide, maintain, personalise and improve the Service;
- process payments and manage subscriptions;
- respond to your enquiries and provide customer support;
- send you service-related and, where permitted, marketing communications; and
- comply with our legal obligations and protect our lawful interests.
5. Cookies and analytics
We use cookies and similar technologies to operate the Service, remember your preferences and understand how the Service is used. You can control cookies through your browser settings, although disabling them may affect functionality.
6. Disclosure of personal information
We may disclose personal information to:
- service providers who help us operate the Service, such as cloud hosting, storage, email and payment providers;
- visitors to a memorial, to the extent you have made memorial content publicly accessible;
- law enforcement or government bodies where required or authorised by law; and
- a purchaser in connection with any sale or restructure of our business, subject to appropriate protections.
We do not sell your personal information.
7. Overseas disclosure
Some of our service providers (including cloud hosting and storage) may store or process data on servers located outside Australia. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs.
8. Security of your information
We take reasonable steps to protect personal information from misuse, interference and loss, and from unauthorised access, modification or disclosure, using measures such as encryption in transit, access controls and secure hosting. However, no method of transmission or storage is completely secure.
9. Retention of information
Because memorials are intended to be lasting, we generally retain memorial content for as long as the memorial remains active. We retain other personal information for as long as necessary to provide the Service and to meet our legal obligations, after which we take reasonable steps to destroy or de-identify it.
10. Information about deceased persons
While the Privacy Act generally applies to living individuals, we treat information about deceased persons with care and respect. We rely on the person creating a memorial to have the authority and any necessary consents to publish that information, and we will consider reasonable requests from family members regarding memorial content.
11. Direct marketing
We may send you marketing communications about our Service where permitted by law. You can opt out at any time by using the unsubscribe facility in our communications or by contacting us. We will not use sensitive information for marketing without your consent.
12. Anonymity and pseudonymity
Where lawful and practicable, you may interact with us anonymously or using a pseudonym — for example, when leaving a guestbook message. However, we may be unable to provide certain features, such as account management or paid services, without identifying you.
13. Accessing and correcting your information
You may request access to the personal information we hold about you, and ask us to correct it if it is inaccurate, out of date or incomplete. We will respond within a reasonable time. In limited circumstances we may decline a request, in which case we will explain why.
14. Making a complaint
If you believe we have breached the APPs or mishandled your personal information, please contact our Privacy Officer (see below). We will investigate and respond to your complaint. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au or by calling 1300 363 992.
15. Children
The Service is intended for use by adults. We do not knowingly collect personal information directly from children under 18 without the involvement of a parent or guardian.
16. Changes to this policy
We may update this Privacy Policy from time to time. The current version will always be available on our website, and we will indicate the effective date at the top of the policy.
17. Contact us
To exercise your rights, ask a question, or make a privacy complaint, please contact our Privacy Officer through our contact page.
This document is provided for general information and does not constitute legal advice. StoryStone™ recommends obtaining independent legal advice to ensure these terms suit your particular circumstances.