Legal
Last updated: 11 June 2026
This policy explains how Lasting Lyrics ("we", "us", "our") collects, uses, stores and protects your personal information when you visit our website, place an order, or otherwise contact us. It also explains your rights under UK data protection law.
We are committed to handling your information — and the information of the people you tell us about when ordering a personalised song — responsibly, securely, and only for the purposes set out below.
Lasting Lyrics is the data controller responsible for your personal information for the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018).
Lasting Lyrics
Email: hello@lastinglyrics.co.uk
A postal address will be added here shortly. In the meantime, please use the email address above for any enquiries, including data protection requests.
If you have any questions about this policy or how we handle personal information, please contact us using the details above or on our Contact page.
We collect information in the following ways:
When you place an order or contact us, we collect the information you choose to provide. This may include:
Some of the information you give us about the person being celebrated may relate to a third party (for example, a parent, partner, or friend). By submitting this information, you confirm that you are authorised to share it with us for the purpose of creating your song, and that you have done so with their knowledge where appropriate — particularly for memorial or tribute songs, where we ask that you consider the wishes of close family members.
When you visit our website, certain information may be collected automatically through cookies and similar technologies, such as your IP address, browser type, device information, and how you interact with our site. See Section 8 for more detail.
When you make a payment, this is handled by our payment provider. We do not store your full card details ourselves — see Section 5 for more on how this is handled.
We use the information we collect to:
To create your song, the details you provide about the person being celebrated are used solely for the purpose of producing your order. This information is not used to build a profile about that person, and is not used for any purpose beyond creating and delivering the song you have ordered.
Under UK data protection law, we must have a valid legal basis to use your personal information. Depending on the circumstances, we rely on the following:
| Purpose | Lawful Basis |
|---|---|
| Taking your order, producing and delivering your song, and providing customer support | Performance of a contract with you |
| Processing payments | Performance of a contract, and compliance with legal obligations (e.g. fraud prevention) |
| Keeping records for accounting and tax purposes | Compliance with a legal obligation |
| Improving our website and services, and keeping our systems secure | Legitimate interests — to run and improve our business in a way that does not override your rights |
| Sending marketing communications | Consent — which you can withdraw at any time |
| Using non-essential cookies | Consent — managed via our cookie banner |
We do not sell your personal information to anyone. We work with a small number of trusted third-party service providers who help us run our business and deliver your order. These providers only receive the information they need to perform their function, and are required to handle it securely and in line with applicable data protection law.
We may also share information where required by law — for example, if requested by a regulatory authority, court, or to comply with a legal obligation, or to protect our rights, property, or safety, or that of our customers or others.
If our business is sold or restructured, your information may be transferred to the new owner, who would continue to use it in line with this policy (or a policy that is at least as protective).
Some of the third-party providers we use (see Section 5) may store or process information outside the UK, including in the United States or other countries. Where this happens, we take steps to ensure your information remains protected to UK standards, including by using providers that participate in recognised data protection frameworks, or by relying on standard contractual clauses or other safeguards approved under UK data protection law.
We keep your personal information only for as long as necessary for the purposes set out in this policy. As a general guide:
If you would like more information about how long specific information is retained, or would like us to delete information sooner, please contact us — see Section 14.
Our website may use cookies and similar technologies to make the site work properly, understand how it is used, and improve your experience.
Where required by law, we will ask for your consent before placing non-essential cookies, and you can change your preferences at any time. Most web browsers also allow you to control cookies through their settings.
We take the security of your personal information seriously and use appropriate technical and organisational measures to protect it against unauthorised access, loss, misuse, or disclosure. This includes restricting access to personal information to those who need it to fulfil your order, and using reputable, secure third-party providers for payment, storage and communication.
While we do everything we reasonably can to protect your information, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
Under UK data protection law, you have a number of rights in relation to your personal information. These include the right to:
Some of these rights may not apply in all circumstances — for example, where we need to retain certain information to meet a legal obligation. To exercise any of these rights, please contact us using the details in Section 14. We will respond within one month, as required by law.
Our services are intended for adults, and our order form should only be completed by individuals aged 18 or over. We do not knowingly collect personal information directly from children. Where personal information about a child is included as part of the details for a song (for example, a song written for or about a child), this is provided by the adult placing the order, who is responsible for ensuring this is appropriate and that they have the authority to share this information.
If you have agreed to receive marketing communications from us, we may contact you by email about new services, offers, or updates. You can opt out at any time by clicking the unsubscribe link in any marketing email, or by contacting us directly. Opting out of marketing will not affect transactional communications relating to your order, such as confirmation and delivery emails.
We may update this policy from time to time, for example to reflect changes in our practices, services, or legal requirements. Any changes will be posted on this page with an updated "last updated" date. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests relating to this policy or how we handle your personal information, please contact us:
Email: hello@lastinglyrics.co.uk
A postal address will be added here shortly.
If you are unhappy with how we have handled your personal information, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.
Website: ico.org.uk
Helpline: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
We would, however, appreciate the chance to address your concerns directly before you approach the ICO, so please do contact us first.