Last updated July 24, 2026

Privacy policy

This template is written for a Canadian commercial pet-memorial service. Have it reviewed for your actual business, hosting providers, email service, and AI-production workflow before launch.

1. Who we are

AngelFur operates AngelFur. Privacy questions and requests can be sent to privacy@angelfur.com or mailed to Ingersoll, Ontario.

2. Information we collect

We collect account details such as your name, email address, encrypted password, email-verification status, login timestamps, and security logs. When you create a memorial, we collect the pet information, photograph, written tribute, dates, and page settings you provide. Song orders collect questionnaire responses, order details, e-transfer notes, revision requests, lyrics, and audio files. Condolence submissions may include a visitor’s name, optional email address, relationship, message, submission time, and a one-way hash derived from the connection address for abuse prevention.

3. Public memorial content

Published memorial pages are intentionally public and may be indexed, copied, cached, or shared by other people and search engines. Public content can include the pet’s name, dates, type, breed, photograph, tribute, approved condolences, and a song when the owner requests public playback. Do not submit private addresses, telephone numbers, financial information, confidential veterinary records, or information about another person without permission.

4. How we use information

We use personal information to create and manage accounts, verify email addresses, publish and edit memorials, moderate condolences, process and document e-transfer orders, create and deliver songs, provide support, prevent abuse, maintain security, comply with legal obligations, and keep operational and accounting records.

5. Service providers and AI tools

Information may be processed by the hosting company, email-delivery provider, backup provider, and music or language-generation services used to fulfil an order. Only provide information that is necessary for the memorial or song. Before launch, replace this paragraph with the names or categories of your actual providers, their processing locations, and any cross-border processing disclosures that apply.

6. Email

Account verification, password resets, order confirmations, payment updates, preview notices, revision notices, and delivery emails are transactional messages related to the service. Marketing email is not included in this MVP. A separate opt-in and unsubscribe process must be implemented before sending newsletters or promotional campaigns.

7. Cookies and session data

The site uses a necessary session cookie to keep users signed in and protect forms against cross-site request forgery. The MVP does not install behavioural advertising or analytics cookies. Update this policy and add an appropriate consent mechanism before adding non-essential tracking.

8. Retention

Account and memorial content is retained while the account or memorial remains active. Song order, payment, support, and accounting records may be retained for legal, fraud-prevention, tax, and business-record requirements. Rejected condolence content and security logs should be deleted on a documented schedule. Before launch, define specific retention periods and a backup-deletion process.

9. Safeguards

Safeguards include password hashing, email verification, prepared database queries, access controls, form tokens, upload validation, private song storage, rate limiting, restricted server directories, and encrypted HTTPS transport. No system is completely secure. The business will maintain a privacy-breach response process, keep required breach records, and provide notifications when required by applicable law.

10. Access, correction, export, and deletion

You may edit your memorial through the account dashboard. You may also request access to, correction of, export of, or deletion of personal information by contacting the privacy email above. Some transaction or legal records may need to be retained. Removal from the live site does not guarantee immediate removal from search-engine caches, third-party copies, or backups.

11. Children

Accounts and paid orders are intended for people who have reached the age of majority where they live. Do not knowingly submit a child’s personal information or photograph without the authority of the child’s parent or legal guardian.

12. Changes and complaints

Material changes will be posted with a revised effective date. Contact us first with privacy questions or complaints so we can investigate and respond.