Privacy Policy

Meet Your Past (“we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at meetyourpast.co.uk (the “Website”) or use our professional genealogy services. We operate as a sole trader based in Nottingham, UK, specializing in UK and Irish family history research, including document sourcing, family tree construction, and related services.

This policy complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other relevant UK data protection laws. If you have any questions about this policy or our data practices, please contact us at: gary@meetyourpast.co.uk or via the contact details provided at the end of this policy.

By using our Website or services, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use our Website or services.

1. Information We Collect

We may collect the following types of personal data:

a. Personal Information You Provide Directly

  • Contact details: Name, email address, phone number, postal address.
  • Genealogy-related information: Details about your family history, including names, dates, locations, and relationships of ancestors or relatives. This may include sensitive (special category) data such as ethnic origins, religious beliefs, or health information if relevant to your research request.
  • Payment information: Billing details (e.g., card information processed via secure third-party providers like Stripe or PayPal—we do not store full card details).
  • Communication data: Any information you share via emails, forms, or during consultations, such as queries about services or blog comments.

b. Automatically Collected Information

  • Device and usage data: IP address, browser type, operating system, pages visited, time spent on pages, and referral sources.
  • Cookies and tracking technologies: We use essential cookies for site functionality (e.g., session management) and analytics cookies (e.g., via Google Analytics) to understand user behaviour. For more details, see our Cookie Policy [link to Cookie Policy if separate, or integrate below].

c. Information from Third Parties

  • If you book a consultation via integrated tools (e.g., Calendly), we may receive scheduling details.
  • Public records or databases accessed during genealogy research (e.g., census data, birth/death records), but only with your explicit consent and as part of our contracted services.

We do not collect personal data from children under 16 without verifiable parental consent. If we become aware of such data, we will delete it promptly.

2. How We Collect Your Information

  • Directly from you: Through our contact form, booking system, email inquiries, or during the provision of genealogy services (e.g., sharing family documents).
  • Automatically: Via cookies, server logs, and analytics tools when you browse the Website.
  • During services: As part of research, we may gather historical data from public sources, but we treat any personal elements confidentially.

3. How We Use Your Information

We use your personal data for the following purposes, based on legitimate legal grounds under UK GDPR:

  • To provide and improve our services (legal basis: performance of a contract): Delivering genealogy research, creating family trees, communicating updates, and fulfilling orders (e.g., framed artworks).
  • To communicate with you (legal basis: consent or legitimate interests): Responding to inquiries, sending service-related emails, or newsletters (you can opt out at any time).
  • For payment processing (legal basis: performance of a contract): Handling transactions securely via third-party processors.
  • To enhance the Website (legal basis: legitimate interests): Analyzing usage patterns to improve content, navigation, and user experience.
  • For legal compliance (legal basis: legal obligation): Complying with laws, such as tax reporting or responding to lawful requests from authorities.
  • Marketing (legal basis: consent): If you opt in, we may send promotional offers about genealogy tips or new services.

For special category data (e.g., ethnic or health info in family histories), we process it only with your explicit consent and solely for the genealogy services you’ve requested.

4. Sharing Your Information

We do not sell your personal data. We may share it in limited circumstances:

  • Service providers: With trusted third parties who assist us, such as payment processors (e.g., Stripe), hosting providers (e.g., for the Website), or research databases (e.g., Ancestry.com, but only anonymized data where possible). These providers are bound by data protection agreements.
  • Legal requirements: If required by law, such as in response to a court order or regulatory authority.
  • Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new owner, with notice provided.

We do not transfer data outside the UK unless adequate safeguards are in place (e.g., UK adequacy decisions or standard contractual clauses).

5. Data Security and Retention

We implement reasonable security measures, including encryption, firewalls, and access controls, to protect your data from unauthorized access, loss, or breach. However, no system is completely secure, and we cannot guarantee absolute security.

We retain your data only as long as necessary:

  • Service-related data: For the duration of our contract plus 7 years for tax and legal purposes.
  • Inquiry data: Up to 2 years, unless you request deletion.
  • Analytics data: Anonymized and retained indefinitely for site improvements.

If a data breach occurs that risks your rights, we will notify you and the Information Commissioner’s Office (ICO) as required by law.

6. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Access: Request a copy of your data.
  • Rectification: Correct inaccurate data.
  • Erasure (“right to be forgotten”): Delete your data in certain circumstances.
  • Restriction: Limit processing.
  • Objection: Object to processing based on legitimate interests or for marketing.
  • Portability: Receive your data in a transferable format.
  • Withdraw consent: At any time, where processing relies on consent.

To exercise these rights, contact us at [insert email]. We will respond within one month. If unsatisfied, you can complain to the ICO at www.ico.org.uk.

7. Cookies and Tracking

Our Website uses cookies:

  • Essential cookies: Necessary for site operation (e.g., remembering your preferences).
  • Analytics cookies: To track visits and improve content (e.g., Google Analytics—data is anonymized).
  • Marketing cookies: If applicable, for targeted ads (opt-in only).

You can manage cookies via your browser settings. For more details, see our [Cookie Policy] (if separate) or note that refusing cookies may limit site functionality.

8. Third-Party Links

Our Website may link to external sites (e.g., genealogy databases). We are not responsible for their privacy practices. Review their policies before providing data.

9. Changes to This Privacy Policy

We may update this policy to reflect changes in our practices or legal requirements. We will post the revised version on the Website with an updated effective date. For significant changes, we may notify you via email.

10. Contact Us

If you have questions or concerns:

Data Controller: Gary Skerritt, trading as Meet Your Past.

This policy was last updated on 8th Decemeber 2025.