How we use and protect your personal data

Who are we?

For clarity, when we use “we” or ‘’the Association’’ it refers to NAFPP Ltd. operating as the National Association of Funeral Plan Providers and we run and operate

You can find more information about us by clicking here:

NAFPP is registered with the Information Commissioners Office Registration No. ZB589471.

Our Commitment and Obligations to you

We take the collection, usage and security of your personal data seriously.  The privacy and security of your personal information is important to us so we want to assure you that your information will be properly managed and protected when it’s in our hands.

We will only use your personal data if we have a good and lawful reason for doing so. Examples of those reasons include:

  • If you have given your consent; or
  • If we have a legal duty; or
  • If it is within our legitimate interest.

A legitimate interest is when we have a business reason to use your information. But even then, it must not unfairly go against what is right and best for you. If we rely on our legitimate interest, we will tell you what that is.

Types of Personal Data

  • Contact details (including historical names, addresses and other contact information);
  • Identification information;
  • Technical Information (IP / Cookies).

What Personal Data We Collect and Where From

You may give us information about your lost plan to start a trace online, including your name (including any previous or maiden names (as applicable)); your current and past address details; your email address; date of birth; your plan number (s). We will collect this from the plan holder directly or via the plan holder’s authorised representative who has confirmed that they are authorised to provide this information on behalf of the plan holder.

Information we collect about you

With regard to each of your visits, our website may automatically collect some or all of the following information:

Technical information, including the Internet protocol (IP) address used to connect your computer to the Internet, your browser type and version, time zone setting, browser plug-in types and versions, operating system and platform; and information about your visit, including the full Uniform Resource Locators (URL) clickstream to, through and from our site (including date and time); products you viewed or searched for, page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), cookies and methods used to browse away the page.

What do we use your personal information for?

Here is a list of all the ways that we may use your personal information, and which of the reasons we rely on to do so. This is also where we tell you what our legitimate interests are.

Reasons we will use your personal data

We will use your information for the purpose of helping to trace your lost plan.

Help and Support – We will use your data if you contact us for help or support in using our site or finalising your request to trace the plan.

How we share your personal data

  • We take your privacy very seriously and we’ll only share your information where;
  • We need to for the purposes of providing you with a service you have requested;
  • We have a public or legal duty to do so;
  • We have asked you for your permission to share it, and you’ve agreed.

Sharing your information

We may share with third parties, including funeral plan providers authorised by the FCA with whom you may have had plan which that has been lost; our website provider, analytics and search engine providers that assist us in the improvement and optimisation of the website.

How long we keep your information

We will retain your personal information for as long as you use our search facilities, three months to complete the search application from the date of application and for a reasonable time thereafter, a further nine months to assist with customer enquiries. After 12 months your personal information will be stored in an aggregated and anonymised format.

Your rights

The Data Protection Laws give you the right to access information held about you. Your right of access can be exercised in accordance with Data Protection Laws by contacting us at


If you have provided your consent to processing your data, you may withdraw your consent to such processing of your personal data at any time by contacting


You have the right to rectify any personal data held about you. Your right of rectification can be exercised by contacting us at


You may have the right to erasure of personal data held about you by contacting us at

Objections or Complaints

In the event that you wish to object to or make a complaint about how we process your personal data, please contact us in the first instance at and we will endeavour to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the UK’s Information Commissioner’s Office (

Changes to our Privacy Policy

Any changes we may make to the Privacy Policy in the future will be posted on this page and, where appropriate, notified to you by email. Please check this page frequently to see any updates or changes to this Privacy Policy.


Questions, comments and requests regarding this Privacy Policy are welcomed and should be addressed to