How we use and protect your personal data
For clarity, when we use “we” or ‘’the Association’’ it refers to NAFPP Ltd. operating as the National Association of Funeral Plan Providers and we run and operate www.nafpp.org.uk.
You can find more information about us by clicking here: www.nafpp.org.uk/about-us/.
NAFPP is registered with the Information Commissioners Office Registration No. ZB589471.
We take the collection, usage and security of your personal data seriously. The privacy and security of your personal information is important to us so we want to assure you that your information will be properly managed and protected when it’s in our hands.
We will only use your personal data if we have a good and lawful reason for doing so. Examples of those reasons include:
A legitimate interest is when we have a business reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.
You may give us information about your lost plan to start a trace online, including your name (including any previous or maiden names (as applicable)); your current and past address details; your email address; date of birth; your plan number (s). We will collect this from the plan holder directly or via the plan holder’s authorised representative who has confirmed that they are authorised to provide this information on behalf of the plan holder.
With regard to each of your visits, our website may automatically collect some or all of the following information:
Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), cookies and methods used to browse away the page.
Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.
We will use your information for the purpose of helping to trace your lost plan.
Help and Support – We will use your data if you contact us for help or support in using our site or finalising your request to trace the plan.
We may share with third parties, including funeral plan providers authorised by the FCA with whom you may have had plan which that has been lost; our website provider, analytics and search engine providers that assist us in the improvement and optimisation of the website.
We will retain your personal information for as long as you use our search facilities, three months to complete the search application from the date of application and for a reasonable time thereafter, a further nine months to assist with customer enquiries. After 12 months your personal information will be stored in an aggregated and anonymised format.
The Data Protection Laws give you the right to access information held about you. Your right of access can be exercised in accordance with Data Protection Laws by contacting us at firstname.lastname@example.org
If you have provided your consent to processing your data, you may withdraw your consent to such processing of your personal data at any time by contacting email@example.com
You have the right to rectify any personal data held about you. Your right of rectification can be exercised by contacting us at firstname.lastname@example.org
You may have the right to erasure of personal data held about you by contacting us at email@example.com
In the event that you wish to object to or make a complaint about how we process your personal data, please contact us in the first instance at firstname.lastname@example.org and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the UK’s Information Commissioner’s Office (https://ico.org.uk/global/contact-us/).