Good Grief Privacy Policy

1. Introduction

Good Grief Enterprises LLC ("Good Grief," "we," "us," or "our") respects your privacy and is committed to protecting it.

This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit our website, use our products or services, or otherwise interact with us (collectively, the "Services").

We believe clarity matters. Death is complicated enough. Your data should not be.

2. Data Controller

For purposes of data protection laws, including the General Data Protection Regulation (GDPR), the data controller responsible for your personal data is:

3. Information We Collect

We collect information you provide directly to us, information collected automatically when you use the Services, and information from third parties.

Information You Provide to Us

• Name, email address, phone number, and other contact details
• Account information, including login credentials
• Payment information (processed by third-party payment providers; we do not store full payment details)
• Information submitted through forms, surveys, or questionnaires
• Documents, files, or content you upload related to planning, estate administration, or memorialization
• Communications with us, including emails and support requests

Because our Services assist individuals and families navigating loss, some information you provide may involve sensitive personal circumstances, including information about deceased individuals, estates, financial accounts, family relationships, or caregiving matters. We treat this information with heightened care.

Information We Collect Automatically

• IP address and general location data
• Browser type, device type, and operating system
• Pages viewed, features used, and time spent
• Referring URLs and usage analytics
• Cookies and similar tracking technologies

Information from Third Parties

We may receive information from:

• Service providers such as analytics, hosting, and payment processors
• Partners or vendors you choose to engage through the platform
• Publicly available sources where relevant to estate administration or related services

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process personal data under the following lawful bases:

• Contract Performance: Processing necessary to provide the Services you request, including creating accounts, coordinating services, and facilitating estate administration tasks.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our platform, ensuring security, preventing fraud, and analyzing usage.
• Legal Obligations: Processing necessary to comply with applicable laws, tax obligations, regulatory requirements, or lawful requests from authorities.
• Consent: Where required, we process certain information based on your consent, such as optional communications or non-essential cookies. You may withdraw consent at any time.

5. How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Services
• Create and manage user accounts
• Process transactions and payments
• Communicate with you about updates, support, and service-related notices
• Personalize your experience and surface relevant resources
• Conduct analytics, research, and product improvement
• Protect against fraud, misuse, and security threats
• Comply with legal obligations

We do not sell your personal information.

6. How We Share Your Information

We may share your information only in the following circumstances:

• Service Providers: With trusted service providers who perform services on our behalf such as hosting, infrastructure, analytics, customer support, or payment processing.
• Platform Vendors or Partners: With vendors, service providers, or professionals that you intentionally engage through the platform.
• Legal Requirements: When required by law, court order, or governmental request.
• Business Transfers: In connection with a merger, acquisition, financing, or sale of company assets.
• Consent or Direction: When you explicitly direct us to share information.

All third parties are required to protect your information and use it only for authorized purposes.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Enable core functionality of the Services
• Keep you logged in
• Understand how users interact with the Services
• Improve performance and user experience

Where required by law, we obtain your consent before placing non-essential cookies on your device.

You may control cookies through your browser settings. Disabling cookies may affect certain features of the Services.

8. Data Retention

We retain personal information only for as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes
• Enforce agreements

When information is no longer required, we take reasonable steps to securely delete or anonymize it.

9. Data Security

We use reasonable administrative, technical, and physical safeguards designed to protect your information from unauthorized access, disclosure, alteration, or destruction.

However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Your Privacy Rights

Depending on your location, you may have rights regarding your personal information.

GDPR and International Rights

Individuals in the European Economic Area, United Kingdom, and similar jurisdictions have the right to:

• Access personal data we hold about you
• Correct inaccurate or incomplete information
• Request deletion of your personal data
• Restrict processing of your data
• Object to certain types of processing
• Request data portability
• Withdraw consent where processing relies on consent
• Lodge a complaint with a data protection authority

California Privacy Rights

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to:

• Know what personal information we collect
• Request deletion of your personal information
• Access specific categories of collected information

Good Grief does not sell personal information as defined under the CCPA.

11. International Data Transfers

If you access the Services from outside the United States, your personal information may be transferred to and processed in the United States or other jurisdictions.

Where required by law, we rely on appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission or similar legal mechanisms.

12. Children's Privacy

The Services are not intended for children under the age of 13, or under 16 in certain jurisdictions.

We do not knowingly collect personal information from children.

13. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those third parties.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes will be reflected by updating the "Last Updated" date above. If material changes occur, we may also notify users through the Services.

15. Contact Information

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: