PIPA Compliant

Your Privacy, Your Legacy, Your Control

At One Last Farewell, we honor your trust by protecting your most precious memories with industry-leading security and full compliance with Bermuda's Personal Information Protection Act (PIPA).

Our Promise to You

Only the data you share is shared—and only with those you decide. Your messages, photos, and memories are protected with 256-bit encryption and stored securely. We never sell your data. We never share it without your permission. Your legacy is yours alone, and we're honored to help you preserve it.

What is PIPA?

The Personal Information Protection Act (PIPA) is Bermuda's comprehensive data protection law, designed to safeguard your personal information. At One Last Farewell, we embrace PIPA's principles because protecting your most precious memories and messages is at the heart of everything we do.

PIPA ensures your personal data is collected, used, and stored responsibly
It gives you control over who sees your information
It requires organizations to be transparent about data practices
It mandates strong security measures to protect your privacy

You Control Your Data

Your legacy is yours alone. We believe in complete transparency and control. Only the information you choose to share is shared—and only with the people you designate as messengers or memorial recipients.

You decide what personal information to include in your profile
You choose which messengers receive your messages
You control who can view your memorial pages
You can update or delete your information at any time
No data is ever sold or shared with third parties for marketing

256-Bit Encryption & Security

Your messages, photos, videos, and personal information are protected with industry-leading 256-bit encryption—the same standard used by banks and government institutions. This means your data is secured both in transit and at rest.

All data transmissions use 256-bit SSL/TLS encryption
Your messages are stored in encrypted format on secure servers
Access controls ensure only authorized individuals can view your content
Regular security audits and updates protect against emerging threats
Multi-factor authentication options for enhanced account security

What We Collect & Why

We only collect information necessary to provide our service—helping you create and deliver meaningful messages to your loved ones. We treat your data with the care and respect it deserves.

Account information: Name, email, and password to create your secure account
Message content: The messages, photos, videos, and audio you choose to preserve
Messenger details: Contact information for people you designate to receive messages
Delivery preferences: When and how you want messages delivered
Usage data: Technical information to improve service reliability and security

Limited, Purposeful Sharing

Your trust is sacred to us. We never sell your data. Information is only shared in specific, limited circumstances—and always with your explicit consent or legal requirement.

With your messengers: Only when you designate them to receive specific messages
With service providers: Trusted partners who help us deliver emails or store data securely (all bound by strict confidentiality agreements)
For legal compliance: Only when required by Bermuda law or valid legal process
With your consent: If you explicitly authorize sharing for a specific purpose

Your Rights Under PIPA

PIPA grants you important rights over your personal information, and we're committed to honoring them fully. Your data belongs to you, and we're here to help you exercise your rights.

Right to Access: Request a copy of all personal data we hold about you
Right to Correction: Update or correct any inaccurate information
Right to Deletion: Request deletion of your data (subject to legal retention requirements)
Right to Portability: Receive your data in a structured, commonly used format
Right to Object: Object to certain types of data processing
Right to Withdraw Consent: Change your mind about data sharing at any time

Bermuda Law Compliance

As a Bermuda-based service, we operate under the jurisdiction of Bermuda's robust data protection framework. We maintain full compliance with PIPA and work closely with the Office of the Privacy Commissioner for Bermuda.

Registered with the Bermuda Privacy Commissioner
Regular compliance audits and assessments
Data protection officer available for privacy concerns
Transparent privacy policies updated to reflect legal requirements
Incident response procedures aligned with PIPA notification requirements

Data Retention & Legacy

Your messages are designed to last—but you remain in control. We retain your data for as long as your account is active and as needed to fulfill your delivery instructions. You can modify or delete content at any time before delivery.

Active accounts: Data retained indefinitely to preserve your legacy
Delivered messages: Stored according to your delivery preferences
Inactive accounts: We'll contact you before taking any action
Account deletion: You can request full deletion at any time
Legal holds: Some data may be retained if required by law

Related Resources

Security Practices

Contact Privacy Team

Questions About Your Privacy?

We're here to help. If you have any questions about how we protect your data, your rights under PIPA, or our privacy practices, please don't hesitate to reach out.

Contact Our Privacy Team