Last updated July 24, 2026
Privacy policy
This template is written for a Canadian commercial pet-memorial service. Have it reviewed for your actual business, hosting providers, email service, and AI-production workflow before launch.
1. Who we are
AngelFur operates AngelFur. Privacy questions and requests can be sent to privacy@angelfur.com or mailed to Ingersoll, Ontario.
2. Information we collect
We collect account details such as your name, email address, encrypted password, email-verification status, login timestamps, and security logs. When you create a memorial, we collect the pet information, photograph, written tribute, dates, and page settings you provide. Song orders collect questionnaire responses, order details, e-transfer notes, revision requests, lyrics, and audio files. Condolence submissions may include a visitor’s name, optional email address, relationship, message, submission time, and a one-way hash derived from the connection address for abuse prevention.
3. Public memorial content
Published memorial pages are intentionally public and may be indexed, copied, cached, or shared by other people and search engines. Public content can include the pet’s name, dates, type, breed, photograph, tribute, approved condolences, and a song when the owner requests public playback. Do not submit private addresses, telephone numbers, financial information, confidential veterinary records, or information about another person without permission.
4. How we use information
We use personal information to create and manage accounts, verify email addresses, publish and edit memorials, moderate condolences, process and document e-transfer orders, create and deliver songs, provide support, prevent abuse, maintain security, comply with legal obligations, and keep operational and accounting records.
5. Service providers and AI tools
Information may be processed by the hosting company, email-delivery provider, backup provider, and music or language-generation services used to fulfil an order. Only provide information that is necessary for the memorial or song. Before launch, replace this paragraph with the names or categories of your actual providers, their processing locations, and any cross-border processing disclosures that apply.
6. Email
Account verification, password resets, order confirmations, payment updates, preview notices, revision notices, and delivery emails are transactional messages related to the service. Marketing email is not included in this MVP. A separate opt-in and unsubscribe process must be implemented before sending newsletters or promotional campaigns.
7. Cookies and session data
The site uses a necessary session cookie to keep users signed in and protect forms against cross-site request forgery. The MVP does not install behavioural advertising or analytics cookies. Update this policy and add an appropriate consent mechanism before adding non-essential tracking.
8. Retention
Account and memorial content is retained while the account or memorial remains active. Song order, payment, support, and accounting records may be retained for legal, fraud-prevention, tax, and business-record requirements. Rejected condolence content and security logs should be deleted on a documented schedule. Before launch, define specific retention periods and a backup-deletion process.
9. Safeguards
Safeguards include password hashing, email verification, prepared database queries, access controls, form tokens, upload validation, private song storage, rate limiting, restricted server directories, and encrypted HTTPS transport. No system is completely secure. The business will maintain a privacy-breach response process, keep required breach records, and provide notifications when required by applicable law.
10. Access, correction, export, and deletion
You may edit your memorial through the account dashboard. You may also request access to, correction of, export of, or deletion of personal information by contacting the privacy email above. Some transaction or legal records may need to be retained. Removal from the live site does not guarantee immediate removal from search-engine caches, third-party copies, or backups.
11. Children
Accounts and paid orders are intended for people who have reached the age of majority where they live. Do not knowingly submit a child’s personal information or photograph without the authority of the child’s parent or legal guardian.
12. Changes and complaints
Material changes will be posted with a revised effective date. Contact us first with privacy questions or complaints so we can investigate and respond.