Privacy Policy

Heritage Registry Inc., a Texas corporation doing business as Grandma’s Registry (“Grandma’s Registry,” “we,” “our,” “us”), operates the digital registry service and physical QR sticker product available at grandmasregistry.com.

This Privacy Policy explains how we collect, use, share, and protect information about you when you use our service, visit our website, or interact with us.

We use the information we collect to:

• Create and manage your account and subscription
• Fulfill sticker pack orders and ship physical materials
• Generate, host, and display your registry content
• Process payments, prevent fraud, and manage renewals
• Send transactional communications — receipts, renewal notices, shipping updates, security alerts
• Respond to support requests and improve the service
• Operate the memorialization process, including verifying death certificates and publishing QR-linked item pages under the terms described in Section 6
• Comply with legal obligations and enforce our Terms

We do not sell your personal information.

We share personal information only in the following circumstances:

Service providers. Vendors who help us operate the service, including hosting, payment processing (Stripe), email delivery, analytics, customer support tooling, and shipping. These providers are contractually required to protect the information and use it only for the purposes we specify.

Legal and safety. When we believe disclosure is necessary to comply with law, respond to lawful requests, enforce our Terms, or protect the safety and rights of Grandma’s Registry, our members, or the public.

Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to continued protection of personal information.

With your consent. For any other purpose disclosed to you at the time we collect the information.

Each sticker carries a unique QR code that links to the corresponding item page in your registry. You control the privacy of each item:

• Private items return only a generic response confirming the item belongs to a Grandma’s Registry account. No details are shown.
• Items visible to heirs show the information you have chosen to make visible — which may include the title, photos, category, and inheritance notes.

Anyone with physical access to a sticker can scan its QR code. Treat QR codes the way you would treat any label attached to an object: if you would not want a visitor, mover, or contractor to learn something by scanning it, keep that information private within your registry.

Memorialization materially changes the privacy posture of a deceased member’s registry. Upon our verification of a valid certified death certificate:

• The account is locked to read-only; no further edits are accepted.
• Item pages become printable, and a PDF copy of the registry is provided to the verified requester.
• QR codes associated with the account publish publicly for one (1) year — unless the member opted out of memorial publication.

You choose this at signup. Memorial publication is a setting you select when you create your account, and you can change it at any time in your account preferences. If you opt out, your QR codes will not be made public and access is limited to the verified requester. Individual items you have marked private remain private unless you have chosen otherwise.

Certified death certificates and supporting documentation are used solely to verify the request and are retained as part of the account record.

We use cookies and similar technologies to keep you signed in, remember your preferences, measure site usage, and maintain the security of the service. You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

We retain your personal information for as long as your account is active.

Accounts more than thirty (30) days past due are locked to read-only. Your registry remains intact and viewable during this period, and you may reactivate by settling the outstanding balance. We reserve the right to delete registry data from accounts that remain inactive, after notice to the email address on file.

Registry records are made available for printing and export through the memorialization process described in Section 6, not from an active or read-only account.

Data associated with memorialized accounts is retained during the one-year public-access period and thereafter is subject to deletion or anonymization.

We may retain certain records — for example, billing invoices — for longer where required by tax, accounting, or other legal obligations.

Depending on where you live, you may have rights to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data, subject to limited legal-retention exceptions
• Object to or restrict certain processing, or withdraw consent where processing is based on consent
• Lodge a complaint with your state attorney general or applicable authority

To exercise these rights, contact us using the details in Section 13. We will respond within the timeframes required by applicable law and will not discriminate against you for exercising your rights.

Grandma’s Registry is not directed to anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information to us, contact us and we will take steps to delete it.

We maintain administrative, technical, and physical safeguards designed to protect your personal information, including encryption of data in transit, access controls, and regular security reviews. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

If we become aware of a security breach affecting your personal information, we will notify you and applicable regulators as required by law.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a prominent notice in the service before they take effect. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

Questions, requests, or complaints about this Privacy Policy can be directed to: