Skip to content

Legal

Privacy

Draft notice for review. It describes the member record and membership payment. It is not an approved privacy notice.

Draft for review. This is not an approved legal document, and it does not open membership applications.

Who this draft is about

This draft describes information SOOCH uses to run a member’s own SOOCH record and SOOCH Community Membership. It is not approved. The organisation’s legal name, address, and the person responsible for data protection have not been confirmed.

Account and profile

When someone creates an account, SOOCH keeps the details they provide for that record, such as their name and contact details, so they can sign in and keep their own information up to date.

Next of kin, family, and dependants

A member may record next of kin, and family or dependants they look after. SOOCH uses that information so the member’s record is useful if the family later needs practical help.

Recording a family member or dependant does not create an account for them, does not make them a paid member, and does not let them see the member’s private record.

Preferences and faith or belief

A member may record personal preferences, including wishes about burial, cremation, or repatriation. If they choose to record a faith or belief, SOOCH keeps it so the family and SOOCH can understand what mattered to the member.

Faith or belief information is especially sensitive. This draft does not decide the legal basis for recording it. That must be confirmed before the notice is approved.

Important information

A member may add important information they want available to their family. The current record does not ask for an NHS number. SOOCH does not provide medical care.

If an NHS number was saved before this change, it is kept and is not shown in the member record. Asking for it again would need a separate decision. That decision has not been made.

Private documents

A member may store private documents with their record. SOOCH uses them so the member, and later the people helping their family, can find papers that the member chose to keep. Documents are not a public page.

Bereavement cases

A report of a death can open a bereavement case. SOOCH may use the member’s recorded wishes, next of kin, documents, and membership status while providing practical support. Opening a case does not by itself create a payment.

Membership and payments

SOOCH keeps the membership status, membership number, the dates of a confirmed period, and a record of each contribution it has confirmed. A contribution may be paid by bank transfer. The payment reference should be the person's name, and should not include sensitive personal or medical information. The contribution supports SOOCH’s community services. It is not held as a personal funeral balance.

If you accept membership terms, SOOCH keeps the version you accepted, the date and time, and the text of that version. A later edit of the website does not replace the text already recorded.

One-off card gifts are taken by Stripe on Stripe’s own page. SOOCH does not ask for the card number or card security code, and does not store them. Stripe’s own privacy notice applies to that payment page.

Donations

A person can give a one-off gift without creating an account. SOOCH may keep the name if one is given, an email address if one is given or returned by Stripe for the payment, the amount, the area of work the donor asked to support, whether they asked not to have their name displayed, and the payment reference.

That preference is not a public profile. SOOCH does not publish a donor list. Choosing not to display a name does not hide the transaction from Stripe or from SOOCH’s payment record.

A gift does not create a membership and does not create an entitlement for any particular person. Gift Aid is not available.

Contact messages

The contact form keeps the name, email address, topic, and message so SOOCH can reply. It should not be used for a SOOCH record, identity documents, or a detailed account of a death.

Security records

SOOCH keeps a limited record of important changes to a member’s information, and of security events needed to look after the service. Those records are used to protect the account and to understand what changed. They are not a public profile.

Why the information is used

The information is used to provide the member’s SOOCH record, to operate community membership, to support a family with practical arrangements after a death, to record a confirmed membership contribution, and to reply to messages.

The lawful basis for each use has not been confirmed in this draft, especially where the information is a faith, belief, or other sensitive detail.

Who else may receive it

Stripe receives the payment details needed to take a one-off card gift. A membership contribution paid by bank transfer is received in SOOCH’s bank account. During bereavement support, SOOCH may contact an organisation the member or family has asked it to speak with, such as a funeral director or another provider. Those organisations are independent.

SOOCH does not sell member information. Other providers, and any transfer of information outside the United Kingdom, must be confirmed before this notice is approved.

How long it is kept

A member’s account and SOOCH record remain when a membership ends, so the member can still sign in and look after their information. Retention periods for each kind of information have not been set in this draft and need legal confirmation.

Asking about your information

A member can see and correct their own record while they are signed in. They can also ask SOOCH about their information using the contact page. The precise legal rights, and any limit on them, must be confirmed before this notice is approved. This draft does not state a statutory right that has not been checked.

Still to be confirmed

Before this notice can be approved, a reviewer needs to confirm the data controller’s identity and address, whether a data-protection lead is required, the lawful basis for each purpose, the condition for faith or belief information, how long each kind of information is kept, and whether Stripe or another provider moves information outside the United Kingdom.