Privacy Policy

InMemory (inmemory.lk) publishes death and funeral notices for Sri Lanka and its diaspora. Ziyan Junaideen, Colombo, operates InMemory and is the controller of the personal information described here.

This policy covers the public site, the family and funeral home portals, and the emails and messages we send. It sits alongside our Terms of Service.

A notice is, unavoidably, information about somebody who cannot consent to it. We rely on the person posting it having the family's authority, and on the family's continuing control of the page afterwards.

It also names living people — a spouse, children, grandchildren. If you are named in a notice and would rather not be, write to us and we will have it changed or removed. You do not need to explain why.

We ask families not to publish national identity card numbers, home addresses of people still living there, or the cause of death unless they want it known. If any of these appears on a notice, tell us and we will take it out.

Published notices are visible to anyone, without an account.

A notice stays a draft, visible only to you, until it is submitted and approved.

• To publish notices and tributes, and to let a family manage their own page.
• To review submissions before they appear, and to act on reports.
• To send the notifications you asked for — a service reminder, a new tribute awaiting approval, an anniversary.
• To send service messages you cannot opt out of while you hold an account: confirmation, password resets, and changes to these policies.
• To keep the service secure, prevent abuse and duplicate notices, and diagnose faults.
• To understand in aggregate how the site is used, so we can improve it.

We do not sell personal information. We do not use notice content or tributes to build advertising profiles, and we place no advertising on a notice page.

Published notices are indexed by search engines, so people can find a page by searching the person's name. Most families want exactly this — it is how old friends abroad hear.

If you would rather a notice were not indexed, tell us and we can mark that page so search engines exclude it. Search engines can be slow to drop a page they have already cached, so removal from their results may take some weeks after we act.

We send email to the address given for your account and mobile push alerts to registered devices for areas you follow. You can manage email preferences in your account settings and followed areas in the mobile app. You can also turn off push notifications in your device settings.

When you share a notice with relatives, we send only what you asked us to send, to the addresses you entered. We do not add those people to any list of our own.

We use a session cookie to keep you signed in, a small number of cookies to remember preferences such as your chosen colour theme, and a signed first-party identifier to avoid counting repeated vendor-profile loads from the same browser more than once per day.

We count vendor profile views and deliberate phone, WhatsApp, email and map actions so a funeral home can see aggregate activity around its listing. The identifier itself is never stored with those events: profile views receive a one-way key scoped to one vendor and one day, and contact actions carry no visitor identifier.

We do not use IP addresses, browser fingerprints or third-party advertising trackers for this measurement, and a funeral home cannot see who viewed or acted on its profile.

If InMemory were ever sold or merged, notices and accounts would pass to the new operator under this policy. We would say so on the site first.

Our servers and service providers are located both in Sri Lanka and abroad, so information is transferred internationally. We use providers who commit to appropriate safeguards.

The site is deliberately usable from anywhere — much of its purpose is to reach relatives overseas — so a notice will be read in many countries by design.

Notices are kept indefinitely, unless the family asks for removal. An anniversary should always have somewhere to go, and we do not delete a page because it is old or charge to keep it.

Accounts are kept while they are in use, and closed accounts are removed within a reasonable period after you ask. Reports and enquiries are kept for two years so we can see a pattern of abuse. Vendor-profile activity events and their first-party browser cookie are kept for thirteen months. Technical logs are kept for a short period, usually not more than ninety days.

Backups are retained on a rolling cycle, so removed content can persist in backup for a limited time after deletion from the live site.

You can ask us to:

• give you a copy of the personal information we hold about you;
• correct anything inaccurate, including a detail on a notice;
• remove a notice, a tribute, or your account;
• stop sending you notifications, or exclude a notice from search engines;
• explain why we hold something, or object to our holding it.

Write to privacy@inmemory.lk or use the contact form. We reply within one working day and act within thirty days. We may need to check you are connected to the notice in question, though we do not put a grieving family through that for a removal request about their own relative.

Accounts are for adults. A notice may of course be about a child, and children are often named among the family — that information is the family's to publish, correct or withdraw, and we will act on a parent's or guardian's request without argument.

If you believe a child has created an account here, tell us and we will remove it.

Traffic to the site is encrypted, passwords are stored hashed, and access to production data is limited to the few people who need it and is logged.

No service is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authority as required, and say plainly what happened.

We will update this policy as the service grows. Each version carries a version identifier and an effective date, and material changes are announced on the site and by email where we hold an address for you.

Write to privacy@inmemory.lk for anything about this policy, or hello@inmemory.lk for everything else. A person reads both.