Family Access Privacy Notice
St. John Memorial Garden collects a small amount of personal information so that only verified relatives can view memorial records through the family portal. This notice explains what we keep and why, in line with the Data Privacy Act of 2012 (Republic Act No. 10173).
What we collect
- Your name, email address, and phone number (optional).
- Your family name, relationship to the deceased, and the names or plot numbers you give us.
- Any message you include to help staff verify your request, and reports you send from the portal.
- Basic security information, such as sign-in times and failed login attempts with the device's IP address.
Why we use it
- To verify that you are related to the people whose records you ask to see.
- To give your account access to the correct grave records, and only those records.
- To contact you about your request, your account, or reports you send.
- To protect accounts from misuse.
Your information is only seen by authorised cemetery staff. We do not sell it or share it with third parties, except where the law requires us to.
How long we keep it
- Requests that are never confirmed by email are deleted after 7 days.
- Requests that are not approved are deleted 180 days after review.
- Closed reports are deleted 365 days after they are resolved.
- Security records are deleted after 365 days.
- Your account details are kept while your account is active.
Your rights
You may ask us to correct the information we hold about you, or to delete your account and its data. To do this, contact the cemetery office at ryan.lanic@gmail.com.