Collect little. Explain it plainly.

1. Who is responsible

EIPAW LIMITED is the controller of personal information used for Spring Meadow Park. We are registered in England and Wales under company number 09785386, with a registered office at 18–20 High Street, Shaftesbury, Dorset, SP7 8JG. Privacy questions and requests can be sent to info@eipaw.com.

2. What we collect now

• Website information: basic server and security logs such as IP address, browser, device, requested page, and time of access.
• Interest registration: if you ask to hear about the project, we collect only the email address you submit, the time you registered, and the page it came from. This does not create an account, claim, place, or profile.
• Preview account information: your name, email address, optional mobile number, date of birth, login, email- and phone-verification state, selected landscape interest, and the identifiers needed to return you to the same account, person and draft Life Room. Our authentication provider handles the login credential; we do not display or store your readable password in the Spring Meadow Park database.
• Draft Life Room information: any short inscription, recording title, public audio link, reduced wall image and its optional name or caption, or plain-text file you choose to save while testing your room. During this closed family-and-friends preview, your living stone, birth date, and saved Life Room contents can be visited by other signed-in preview members. They are not published on the open website. You can edit your own room, and a person you explicitly appoint as a Family Archive Steward or editor can edit the limited room fields covered by that role until it is revoked.
• Family Archive information: archive names and descriptions, invitations between existing preview accounts, membership and bounded care roles, family relationship labels, private draft records for people reported as deceased, and optional statements from members who say they recognise that person. These records support shared care and later review; they do not by themselves establish identity, death, legal kinship, authority, a Founding Registry claim, or a Park place.
• Shared Park presence: while you are inside the walkable preview, we briefly exchange your current virtual coordinates, whether you are outdoors or in a particular Life Room, facing direction, display name, chosen visitor style, and short-lived visible actions such as waving, jumping, using a torch or fishing, plus whether you occupy a shared development vehicle and which seat you hold, plus recent-presence time. This lets other signed-in visitors who are genuinely nearby—or genuinely inside the same Life Room—see you. People in another Life Room do not. Your latest presence row replaces the previous one. While the Park is active, the current realtime route may exchange changed presence roughly ten times per second; its database fallback runs about every half second. You stop appearing as live presence after about 15 seconds without an update.
• Shared development vehicle: the preview retains the buggy's latest accepted virtual coordinates and facing direction. While you occupy it, we briefly retain your account, person, seat number, and recent-activity time so multiple people cannot claim the same seat. The seat expires shortly after activity stops. The vehicle record is a shared world state, not your private journey history.
• Continuing journey position: we retain your latest accepted outdoor coordinates, view direction, Park world version, update time, and a technical revision number so your account can resume from the same place on another device. We keep only the latest accepted checkpoint in this preview, not a route history or frame-by-frame record. While you visit a Life Room, the retained journey position remains outside beside its stone.
• Contribution information: email address, payment status, amount, transaction reference, and any optional public name or pseudonym supplied at Stripe Checkout. Stripe processes card and bank details; Spring Meadow Park does not receive or store full payment-card numbers.
• Correspondence: information you include when you contact us or ask for support or a refund.
• Signup monitoring: during the closed preview, the project administrator receives a private email containing the name, email address, selected landscape interest, and signup time supplied with each new account. This helps us recognise invited testers and notice unexpected registrations.

The terrain simulation runs in your browser. If you continue through signup and account setup, the chosen landscape and development-stone position are stored or derived for the shared preview. They are not a Founding Registry claim or permanent allocation. This notice will be updated before real claims, formal identity verification, threads, or death confirmation decisions are collected.

3. Why we use it

• To record your interest and send occasional Spring Meadow Park progress and opening updates, where you have asked us to do so. This is based on your consent, which you can withdraw at any time.
• To create and secure your preview account, return you to the same draft Life Room, display living development stones and shared preview Life Rooms, show honest nearby visitor presence, return your continuing journey on another device, and let you test the walkable Park, because this is necessary to provide the preview you ask us to use.
• To let invited members create and participate in Family Archives, prepare private posthumous drafts, record recognitions, and grant or revoke bounded Life Room care roles, because this is necessary to provide the shared-care preview they choose to use.
• To operate, secure, diagnose, and improve the website, based on our legitimate interests in running a safe and reliable project.
• To process and administer a Founding Contribution, provide a receipt, handle a refund, and keep transaction records, because this is necessary for our agreement with you and our legal obligations.
• To publish your chosen name or pseudonym in the Founding Supporters record, only where you actively choose to supply one. You may withdraw that choice and request removal at any time.
• To answer messages and protect our legal rights, based on our legitimate interests and, where relevant, legal obligations.

We do not currently use this information for advertising or sell it to anyone.

4. Who receives it

We use service providers only where needed to operate this stage of the project: Neon provides the database and account authentication; Resend delivers project and account emails; Twilio sends and checks one-time SMS verification codes; Stripe processes hosted checkout and payments; Vercel hosts and delivers the website; and professional advisers or public authorities may receive information where reasonably necessary or legally required. These organisations may process information outside the UK using applicable adequacy arrangements or contractual safeguards.

Other signed-in members of the closed preview can receive the name, birth date, Life Room material, and live Park presence described above when they visit you in The Park. Members of a Family Archive can also receive the archive membership, family draft, recognition and care-role information shown inside that archive. Account security information remains private, and Life Room editing requires self authority or a separately granted Steward or editor role.

5. How long we keep it

• Interest-registration emails are kept until you withdraw, the update list closes, or we no longer reasonably need them for the purpose you requested.
• Payment and accounting records are normally retained for six years.
• A public supporter name is kept while the Founding Supporters record operates, unless you withdraw your choice or ask us to remove it.
• Support correspondence is normally retained for up to two years after resolution.
• Preview account, Family Archive and draft Life Room information is kept while the account or archive remains active or while reasonably needed to administer a closure request, preserve an audit trail, prevent abuse, resolve a dispute, or meet a legal obligation.
• Operational and security logs are retained only for as long as reasonably necessary for security, diagnosis, and hosting administration.

We may retain information longer where required for a dispute or legal obligation.

6. Your choices and rights

Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or object to its use. Where we rely on consent, you may withdraw it at any time. Email info@eipaw.com; we may need to confirm your identity before acting on a request.

If you are unhappy with our response, you can complain to the UK Information Commissioner's Office.

7. Cookies and similar technology

Spring Meadow Park does not currently use advertising or behavioural-tracking cookies. Essential technologies are used to keep you signed in, carry a landscape choice into setup, secure and deliver the service, and support payment checkout. Stripe's hosted checkout operates under Stripe's own cookie and privacy information. We will add an appropriate consent control before introducing non-essential tracking that requires one.

8. Security and changes

We use proportionate technical and organisational safeguards and keep payment handling with Stripe rather than storing card details ourselves. Access to the private account administration area is limited to explicitly authorised project administrators. Administrative password changes replace the unreadable credential hash and record an audit event; they do not reveal or retain the old or new readable password. No online service can promise absolute security. We may update this notice as the project changes and will make material changes clear before collecting new kinds of sensitive memorial information.

The contribution itself is governed by our Terms.