Privacy
Framework

Document Ref: MVO-2026-PRIV-V2

1. DATA CONTROLLER & SCOPE

Memovo ("we", "us", or "our") operates as a Data Controller under the UK Data Protection Act 2018. This policy governs all data interactions on memovo.co.uk. We act as a neutral intermediary platform providing infrastructure for care seekers and care providers.

2. USER-GENERATED CONTENT & INTELLECTUAL PROPERTY

2.1 Ownership: Users retain all original copyright and intellectual property rights to the content (text, images, branding) uploaded to their listings. Memovo makes no claim of ownership over your business assets.

2.2 Usage License: By publishing a listing, you grant Memovo a non-exclusive, royalty-free, worldwide license to host, display, and distribute said content strictly for the purpose of operating the directory and dashboard services.

2.3 Responsibility: You represent and warrant that you own or have the necessary licenses for all content uploaded. Memovo is not liable for copyright infringements committed by users. We will respond to valid DMCA or UK copyright "take-down" notices immediately.

3. INFRASTRUCTURE & CLOUDFLARE

Our platform utilizes Cloudflare for DNS, SSL encryption, and Web Application Firewall (WAF) protection. Cloudflare may process log data (IP addresses, system configuration, and traffic metadata) to protect against DDoS attacks and ensure site performance. This data is processed at the "Edge" to minimize latency and maximize security.

4. FINANCIAL DATA (STRIPE)

All subscription payments are processed via Stripe. Memovo utilizes "Stripe Elements" and "Hosted Checkout," meaning your sensitive card details never touch our local database. Stripe processes your data according to their Global Privacy Policy and maintains full PCI-DSS compliance.

5. INFORMATION WE COLLECT

• Identity Data: Full name, Business name, and professional credentials.
• Contact Data: Verified email addresses via Google OAuth or Direct Registration.
• Technical Data: Device type, login timestamps, and session tokens stored in secure cookies.
• Listing Data: Geographical location of services, care specialisms, and facility images.

6. COOKIE & TRACKING POLICY

We use "Strictly Necessary" cookies for session management and "Functionality" cookies to remember your dashboard preferences. We do not use third-party tracking pixels for advertising purposes. Your browser can be set to refuse cookies, but certain dashboard features (like the Billing Portal) may fail to function as a result.

7. DATA RETENTION & DELETION

We retain your personal data only as long as your account is active. Upon account termination, we will delete or anonymise your data within 30 days, except where legal or financial reporting obligations (such as tax records related to Stripe payments) require longer retention.