Privacy policy

1. Who we are

Mint Marketing Production Ltd (trading as The Order of Service Co.), registered in England and Wales under number 14103770. Registered office: 6-8 Great Eastern Street, London, England, EC2A 3NT. We serve families and funeral directors across the UK. Data protection enquiries: hello@toosc.co.uk.

2. What we collect

• Account details: name, email address, password (stored hashed).
• Order details: delivery address, phone number, service date, booklet content.
• Booklet content you upload: photographs, names, dates and wording relating to the person who has died and their family.
• Payment information: handled by Stripe; we receive only a confirmation and the last four digits.
• Technical data: IP address, browser type and basic usage information.

3. Why we use it

• To create, print and deliver your booklets (performance of a contract).
• To send order confirmations, proofs and invoices (contract).
• To keep accounting and tax records (legal obligation).
• To secure the platform and prevent fraud (legitimate interests).

We do not send marketing email unless you ask us to, and you can unsubscribe at any time.

4. Who we share it with

• Our print partner, to produce and deliver your order.
• Stripe, to process card payments.
• Resend, to deliver transactional email.
• Our hosting and database providers, who store data on our behalf.
• Where a funeral director invited you, that funeral director can see the order they placed on your behalf and its status.

We never sell your personal data.

5. How long we keep it

Order records and invoices are kept for 7 years to meet UK accounting requirements. Booklet artwork and uploaded photographs are kept for 12 months after delivery so we can reprint on request, then deleted. You can ask us to delete them sooner.

6. Your rights

Under UK GDPR you can request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interests. Email hello@toosc.co.uk and we will respond within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.

7. International transfers and security

Some of our providers process data outside the UK. Where they do, transfers are covered by UK adequacy regulations or standard contractual clauses. Data is encrypted in transit and access is restricted to staff who need it.

8. Cookies

See our cookie policy for details of the cookies and local storage we use.