Privacy Policy

Not So Grave (https://notsograve.co.uk, the "Site") is owned and operated by Alveta Media Limited, a company registered in England and Wales (Company Number 15017010), whose registered office is at 124 City Road, London, United Kingdom, EC1V 2NX.

Alveta Media Limited is the data controller of your personal data and is registered with the Information Commissioner's Office (ICO), the UK's data protection regulator, under registration number ZB722403. You can view our registration on the ICO's public register here.

This policy explains what personal data we collect, why we collect it, what we do with it, and your rights. Please read it before using the Site.

The short version

We collect as little as possible. You can read every page of the Site, and download every free template and guide, without giving us any personal data at all. Our downloads are not gated behind sign-up forms, and we do not sell or share your personal data with anyone for their own marketing purposes.

Personal data we collect

Data collected automatically. When you visit the Site, we automatically collect limited technical information about your device and your visit, such as browser type, IP address, time zone, the pages you view, the site or search terms that referred you, and how you interact with the Site ("Device Information"). This is collected through cookies and similar technologies set by our website platform, Hostinger, whose built-in analytics we use.

Data you choose to give us. You may provide personal data directly, for example:

• your name and email address if you contact us through the Site;

• your email address and any preferences if you subscribe to our newsletter;

• your name, email address and payment confirmation if you make a donation (your payment card details are collected and processed by our payment provider, not by us); and

• your name, email address and booking details if you book a call with us.
  

You are never required to provide personal data to read the Site or download our templates. If you choose not to provide personal data, the only consequence is that you cannot use the features that need it, such as receiving the newsletter or booking a call.

Why we process your data, and our lawful bases

Under UK data protection law (the UK GDPR and the Data Protection Act 2018), we need a lawful basis for each use of your personal data. Ours are:

• Responding to your enquiries (contact form or email): our legitimate interest in responding to people who contact us.

• Sending our newsletter: your consent, which you may withdraw at any time using the unsubscribe link in any email or by contacting us.

• Processing donations and bookings: performance of a contract with you, and our legal obligations to keep basic accounting records.

• Site analytics and abuse prevention (Device Information): our legitimate interest in understanding how the Site is used, keeping it secure, and identifying potential abuse. Analytics data is used in aggregate and is not used to identify individual visitors.
  

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share data with

We do not sell your personal data, and we do not share it with third parties for their own marketing. We use a small number of service providers ("processors") who handle data on our behalf to run the Site and its services:

• Hostinger, which hosts the Site and provides our email newsletter platform;

• Stripe, which processes donations (Stripe acts as an independent controller of your payment data under its own privacy policy);

• Calendly, which manages call bookings
  

We may also disclose personal data where required or permitted by law, for example to comply with a court order, or where we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, to investigate fraud, or to respond to a lawful request from a public authority.

International transfers

Some of our service providers store or process data outside the United Kingdom, including in the United States. Where personal data is transferred outside the UK, we ensure an appropriate safeguard is in place, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework (the "UK-US Data Bridge"), or the ICO's International Data Transfer Agreement or Addendum incorporating standard contractual clauses.

How long we keep your data

We keep personal data only as long as we need it for the purpose we collected it for:

• enquiry correspondence: up to 12 months after the enquiry is resolved;

• newsletter data: until you unsubscribe, after which you are removed from the mailing list (we may retain a minimal suppression record so we do not email you again);

• donation and booking records: 6 years, in line with UK accounting and tax record-keeping requirements; and

• analytics data: held in aggregate form only.
  

Your rights

You have the following rights in relation to your personal data:

• the right to be informed;

• the right of access;

• the right to rectification;

• the right to erasure;

• the right to restrict processing;

• the right to data portability;

• the right to object; and

• rights in relation to automated decision-making and profiling.
  

To exercise any of these rights, contact us using the details below. We will respond within one month. There is normally no charge.

You also have the right to complain to the Information Commissioner's Office if you are unhappy with how we handle your personal data. You can do so at ico.org.uk/make-a-complaint or by calling 0303 123 1113. We would appreciate the chance to address your concerns first, but you are not required to contact us before going to the ICO.

Cookies

The Site uses cookies. Essential cookies are necessary for the Site to function and are always active. Optional cookies, including any used for analytics or set by third-party services embedded in the Site, are only set with your consent, which you can give or withdraw through the cookie banner. You can also control cookies through your browser settings, though blocking essential cookies may affect how the Site works.

Links to other websites

The Site contains links to websites we do not own or control. We are not responsible for their privacy practices. We encourage you to read the privacy policy of any site you visit.

Children

The Site is intended for adults planning their own affairs. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.

Security

We take reasonable administrative, technical and physical measures to protect personal data against unauthorised access, use, alteration or disclosure. No transmission over the internet can be completely secure, however, so we cannot promise absolute security; we can promise to take the protection of your data seriously and to act quickly if something goes wrong.

Changes to this policy

We may update this policy from time to time, for example if our services or providers change. The current version will always be published on this page, and we will update the "Last updated" date whenever we make changes.

Contact

For anything relating to this policy or your personal data, contact us via our contact page, or by post to Alveta Media Limited at the registered office address at the top of this policy.

Last updated: August 2026.