Privacy Statement

Your privacy is a top priority for Findmypast. We are dedicated to looking after your personal information in a way you feel is 100% safe and secure, handling it in a responsible manner and complying with data protection laws. When it comes to your privacy, we follow 3 main principles:

Simple. We want to make it simple for you to understand how we use your personal information. We aim to use easy-to-understand language to describe our privacy policy and processes to help you make informed choices.

Transparent. We want to be transparent about the personal information we collect, why we collect it and how we process it.

Control. We give you control over the personal information you provide to us. We let you choose how and when it is used, shared, kept or deleted.

Our full Privacy Statement is below and we suggest you take the time to read and understand it.

Note:If you are a resident of California, please turn to Section 17 of this Policy to see the Privacy Notice we have created for you in accordance with the California Consumer Privacy Act (CCPA). You may also like to read the rest of this Policy for more details of how we process your personal information, but please be aware that as California residents, sections 5 and 13 will not be relevant to you. If you have a disability, you may access this Privacy Policy in an alternative format by contacting support@findmypast.com.

This policy includes:


1. About Us

This website www.findmypast.com is owned and operated by Findmypast Limited (FMP), a company registered in England and Wales no. 04369607, having its registered offices at The Glebe, 6 Chapel Place, Rivington Street, London, EC2A 3DQ.

FMP is committed to protecting your privacy and maintaining the security of any personal information received from you. We strictly adhere to the requirements of the data protection legislation in the UK and we are registered on the Data Protection Public Register number Z6639808. Our Data Protection Officer will be happy to deal with any queries or requests regarding the data we hold about you. They can be contacted at dataprotectionofficer@findmypast.com or by post to Data Protection Officer, The Glebe, 6 Chapel Place, Rivington Street, London, EC2A 3DQ.

2. Information we collect

A. Information we collect about you

When you register on our website or place an order, we collect your name and email address. This allows us to process your registration, fulfil your order and send you important service messages. When you first register or create a family tree, we ask for your date of birth and postcode. Providing this information is optional. Knowing your postcode and date of birth allows Findmypast to see how people of different ages and locations use our site. It also allows us to give you more relevant content.

Sometimes, we may ask you to provide other contact details, such as phone number or address, to carry out our surveys. You will always be given the option to withhold these contact details at the time you complete the survey.

We do collect some information from cookies, pixels and similar software which allows us to understand how you arrive on our websites, how you use and navigate around them, and how you interact with our email. This information is used to improve our services and communication. We obtain information about your location to give us insight on usage across different geographic areas.

We obtain some information from Google Analytics and Facebook. The Facebook information we obtain is limited to your email address and only that which you have previously agreed with Facebook that they can share.

We do collect the mobile device identifier (device ID) provided by your mobile device operating system from users of the Findmypast App. The device ID allows us to link your device to your account as well as to send you push notifications if you choose to have notifications from the Findmypast App.

In order to purchase a subscription or credits for Findmypast you must be over 18 years old. More information about our age restrictions can be found in our terms and conditions.

B. Information you provide to us

If you create a family tree or create content on our website, we also collect that information, which may include personal information about you and other people (for example, names and birthdays of people in your family). You should ensure if you provide personal information about people in your family who are living and not deceased, that you have the consent from the relevant individual to include that personal information on the website.

We do not collect sensitive personal information (also known as "special categories of data") about you except when you specifically knowingly provide it and have consented to this. Examples are adding your religious belief to a family tree. More details about the privacy of the family tree are available below.

C. Personal Photograph Submissions

Some Findmypast members may choose to submit a personal photograph to the Findmypast Photo Collection. During the submission process, we will ask you for some additional information such as the name of the person in the photo, the time and place it was taken and any further contextual detail. The amount of information you provide is up to you, but the more information we have the better the experience will be for others who discover the photograph. We will ask for:

  • Description of the photograph
  • Names of people who appear in the photo
  • Date and location of the event
  • Your name and email address

We collect this information on the lawful basis of consent.

How will you use the photograph and information provided during the submission process?

Your full name will appear on the photograph as the copyright holder. Your name and all provided contextual information will appear on the transcript of the photograph.

By contributing a photograph to Findmypast’s Photo Collection, you understand that the photograph and all provided contextual information will be available to all registered Findmypast members. Members will be able to view, download and save the image to the device they use to access Findmypast. They can also copy the information found in the transcript. The information provided within the transcripts is intended to be used by individuals for research but Findmypast is under no obligation to ensure that it is used for this purpose.

We may also use the photo and accompany details for the following:

  • to add it to Findmypast and make it available to all website users
  • to make it available on other websites owned or operated by Findmypast;
  • to allow other users to download, print and save copies of your content for their private and non-commercial use;
  • for promotional purposes, such as marketing and advertising;
  • to help us improve our product and service offerings;
  • to form part of the Findmypast database that we build linking user content to records and datasets we hold;
  • to make it available to internet search engines;
  • for other services provided by Findmypast companies.

i. Removal

If you feel at any time that you no longer want your image and contextual information to appear on Findmypast, please contact us at support@findmypast.com and we will be happy to delete it from the Photo Collection and our systems. However, please keep in mind that if other users have downloaded or saved the photo, they may still have a copy and we will be unable to identify or contact them. For more information regarding your individual privacy rights please consult section 13.

We also reserve the right to remove a photograph if we receive a complaint or a person challenges the ownership of the photograph.

3. How we use the information

A. We will use your personal information for a number of purposes including:

  • To manage our website (including your account);
  • To provide you with a free trial (if requested);
  • To process orders and provide our services, goods or online content, to provide you with information about them and to deal with your requests and queries;
  • For administration purposes. This means we may contact you regarding goods or services ordered or online content you have signed up for, to let you know that a service or online site has been suspended for maintenance, if your subscription is about to expire to ask if you wish to renew it, or if an online account has become dormant to ask if you wish to retain the account before we close it;
  • To provide advanced website features to you and others;
  • (For IP addresses and device identifiers) to identify the location of users, to establish the number of visits from different countries, to limit/cap adverts of a certain type, and to personalise content and emails;
  • To undertake analysis and research to improve our services and goods offered;
  • To improve your search results;
  • To tailor a certain amount of advertising to individual users based on viewing and/or purchase habits. This is a common practice known as online behavioural advertising;
  • To show you relevant advertising on third party sites (e.g. Facebook, Google, and Twitter). Some third party sites allow you to request not to see messages from specific advertisers;
  • To conduct surveys with you (where you have consented to us contacting you for such purpose);
  • To provide personalised communications (more details below);
  • To offer users a more relevant, tailored service, based on our analysis of personal information you provide and your activity on our (and other) services; and
  • To undertake marketing and strategic development activities, where we will only use and disclose information in aggregate (so no individuals are identified).

B. Communications

i. Service messages

We send service emails to you to administer the service. Service emails include registration and payment confirmations and emails that provide useful information about how to use a service or feature when you sign up or start using it. We will also send you a service email if we make a fundamental change to the website, or to our terms & conditions that we think we need to make you aware of, or to let you know important information about your account.

ii. Marketing messages

We use your email address to update you on new products, services and subscription offers. We will only contact you with your consent. You are entitled to withhold this consent and refrain from receiving such communications by selecting the appropriate option on the web form that collects your details. You can also update these options at any time by logging into your account and adjusting your preferences, by contacting us by email at support@findmypast.com, by calling +44 (0)20 3326 6300 [UK, IE, AU] / +1 (855) 246-8234 [US] or by post to Findmypast, 6 Chapel Place, Rivington Street, London EC2A 3DQ. We will always provide you with a way of opting out of receiving future marketing messages from us each time we send them to you.

iii. Tree hints and related records

Tree hints and record matching are part of the Findmypast service. As you build your family tree we will send you family tree hints and missions by email using the information you have provided and matching that against the records we hold in our historical records. We will also notify you of records related to the records you have recently viewed. You can use these valuable hints and records to add more information to your family tree. This is part of the Findmypast service, but it you wish to stop the hint emails you can change your preferences through the Communication Preferences centre available within your account.

4. What if I don’t provide some or all of the information requested?

The impact of this will depend on what information you withhold, but the main impacts may be:

  • We will not be able to process or fully process your order;
  • We will not be able to contact you to let you know of problems regarding your order or the goods/services provided;
  • We will not be able to respond fully to requests and queries you may have;
  • We cannot personalise the service you receive. So, if you are online you will have to search more for the content type you normally view or for similar/related products; and/or
  • We won’t be able to limit online adverts to products or services you have shown interest in and so you may receive adverts that are not related to your interests.

5. What grounds (legal basis) are we processing the data under?

There are a number of grounds under which we process your personal information. These are:

  • Contractual – we need the information to perform the contract for goods or services you have requested/ordered including payment, delivery etc;
  • Legal – should we be legally required to contact you concerning a purchase or service;
  • Legitimate interest – this means the processing is in Findmypast’s interest. It allows us to manage the customer relationship effectively and efficiently and improve the goods and/or services we provide by better understanding how our online provisions are used and which goods are popular with which groups of individuals; and/or
  • Consent – where you have given us consent to market to you.

6. Family Tree

Building your family tree is an immensely valuable activity while you are exploring your family history. Trees allow you to store all your family history in one central area. You can attach historic records that you find on our site to your trees. At Findmypast, we are continuously improving our family trees and finding new ways for you to get the most out of your Findmypast experience. Recently, we have introduced tree-to-tree hinting (“Tree 2 Tree Hinting”).

A. Privacy. One of the most valuable resources for a community of users researching and building their family trees is access to the historical research of others. Many people, often unknown to each other, share common ancestors within a few generations, and those people know different parts of the family tree. By joining forces and connecting this knowledge, we can all discover new parts of our family history – parts we never had access to before.

B. Features Findmypast offers features to improve your family tree and to share your family history with other users. We provide you with privacy controls to manage your family tree and control who can see the information in it within the Tree Settings page. You are in charge of your family tree privacy and should familiarise yourself with how these controls work.

  • i. Tree 2 Tree Hinting
  • Sharing information about deceased ancestors is vital for Tree 2 Tree Hinting. When you create your family tree or upload a GEDCOM (a file format used for exchanging genealogical data), the privacy settings are set to share deceased ancestors by default. the privacy settings are set to share details of your deceased ancestors by default. This means that information on your deceased ancestors may be offered to other members as a hint if their tree appears to share common ancestors with your tree.

    • a. When participating in Tree 2 Tree Hinting and ‘Sharing Deceased Ancestors’ is switched on
    • All personal information about living people remains private to you. Information on your deceased ancestors may be offered to other members as explained above. For deceased ancestors, the following information may be offered as part of a hint:

      • Timelines
      • Facts and events – together with sources and attached records
      • Notes
      • Photographs and media will not be shared. In the future, we will introduce more granular privacy controls to enable the selective sharing of photographs.

      If your ancestors are not marked as deceased but were born more than 110 years ago we will assume they are deceased. Please contact support@findmypast.com if this is incorrect.

    • b. When not participating in Tree 2 Tree Hinting and sharing Deceased Ancestors is switched off
    • You will not benefit from the Tree 2 Tree Hinting service and the historical information contained in the trees of the Findmypast community.

      Other users will not be able to receive hints relating to deceased ancestors in your tree.

  • ii. Tree Sharing
  • You can share your family tree with your friends and family. You will find the tree sharing option on the left side of your family tree.

    • a. View Only. Sharing your tree gives others the right to view your entire tree. By inviting others to your tree, they will be able to view all the living and deceased people in the tree. You're invited friends and family will be able to view all the information in your family tree including dates, events, and media. No one will be able to delete or rename your tree.
    • The person you invite to read your tree, must register with Findmypast before they can view your tree. The tree sharing link will expire after 30 days. It can only be used by one person and it is a one-time use link.

      You are responsible for any information you add or share within your family tree. Anyone with access to your family tree can copy and share the details they read. You should have permission of the living people in your tree to share their information.

    • b. Remove access. If you wish to remove an individual’s access to your tree, please contact our customer support team at customersupport@findmypast.com.
    • iii. Direct Messaging
    • We have created direct messaging to allow you to reach out to others who share ancestors. The direct messaging feature is available through Tree 2 Tree hints. Now, when you see you have a common ancestor with another Findmypast member, you can reach out and share more about your family history.

      To start a direct message, you need to have a Findmypast subscription. You do not need to have a subscription to receive a message.

      What personal information is shared with direct messaging?

      When you send a message, the other Findmypast member will see you full name. It is the same name you have registered on your Findmypast account. Within the direct message you can decide how much personal information you want to share.

      Opt out

      If you wish to opt out or be removed from direct messaging, please contact our customer support team.

      Abuse/Blocking

      If you wish to block another member from messaging or you have received abuse from another member, please contact our customer support team immediately at support@findmypast.com.

    C. Tree deletion. Within the View All Trees area you can find an option to Remove Tree. This option will remove your tree from your tree view. Findmypast will delete all the data related to living people. In cases where a person is not noted as deceased, we will remove all the data for those who were born less than 110 years ago. If you want your entire tree deleted from Findmypast, please contact privacy@findmypast.com. If you have participated in Tree 2 Tree Hinting, deleting your tree will not delete branches you have shared with other users.

    D. Removal of unauthorised data. We reserve the right (at our own discretion) to remove any personal information which you have included in your family tree about people who are living if we are alerted to the fact that this personal information was used without that person’s permission. If you become aware that your personal information has been included in somebody else's tree without your permission or is being misused in any other way on the website, please send an email to our Customer Support team support@findmypast.com with details and we will investigate and, if necessary, remove this information. The information added about deceased persons is not considered personal data under this policy.

    E. Sharing family tree data with FamilySearch. Findmypast no longer shares family tree d with our partner FamilySearch. If you created a family tree between 1 November 2018 and 31 March 2019 (when we were testing a new community shared tree product) and you gave your consent, we shared your personal information with FamilySearch in order to provide you with the community shared tree service. The following items would have been shared with FamilySearch:

    • Name
    • Birthdate
    • Gender
    • IP Address
    • Contributions to the community shared tree

    FamilySearch is a data controller with a separate privacy policy. This policy was made available to all users who consented to share their data with FamilySearch and is available here. If you have any questions or concerns about your personal information please contact privacy@findmypast.com.

    7. Historic records and record matching

    A. Historic Records

    Findmypast works with a number of trust third parties to bring you millions of historical records to assist you with your family history research. A full list of our partners is available on the Our Partners page on our website. Historic records on the site are reproduced under a third party agreement with licensors or we reproduce records that are within the public domain. We will continue to host these records as long as we retain an agreement with the licensor or as long as they are within the public domain.

    You will find information about living individuals in some of our records. Examples of these records include civil birth and marriage indexes, electoral registers, the Companies House register, and more. The records we hold which contain the names of living people are public record and we provide the data based on our legitimate interest. In the examples, the records have been made public by the General Register Office or the Electoral Register. Records of living individuals allow users to build their family tree and research their family history from the current generation.

    If you have any questions about these records, please contact our customer support at privacy@findmypast.co.uk. We will remove records of living people if it is requested by the individual named in the record. If you want to be removed from the UK Electoral Register records you will need to contact 192.com, who we use to access these records.

    B. Record matching

    Findmypast uses record matching technologies to suggest possible matches between historical records on Findmypast and associated partner trees on Family Historian or Roots Magic, family tree building software.

    Record matching on Findmypast automatically matches historical records for your family tree. These records are pulled from our vast records database. Record matching will save you time with your research and allow you to make fascinating discoveries through historical records such as birth, marriage and death documents and census records.

    When record matching is enabled within partner sites such as Family Historian, Roots Magic, or other Desktop Software partners, information from small parts of your family tree is passed between the sites without you having to do anything, to a matching service on the Findmypast website. This information includes basic information such as names, dates and places associated with individuals and their close relatives. Findmypast uses this data to find accurate matches for relevant individuals. The matching service provides partner site users with suggested matches of ancestors’ birth, marriage, and death records. We will also provide matches for census records. As a Findmypast customer, you can then add these records to your tree. The service will match against living relatives.

    Please note this information is not retained by Findmypast and is deleted automatically after matches are calculated and displayed to you. Only partner site users receive Findmypast hints. Findmypast users do not receive hints about trees on the partner site.

    The partner site will show matches in its search window where matches are found. To find out more about these matches, follow the links provided and review them. You will then be able to accept or reject matches. Please note that some matches can be viewed and confirmed for free, while others require a Findmypast data subscription. In order to review these matches, you will need to subscribe to Findmypast and create an account.

    The information passed to Findmypast is never used for any other purpose and will never be displayed, sold, licensed or used in any manner whatsoever. If you have any question or concerns, you can email support@findmypast.com or call Customer Support on +44(0)20 3326 6300 [UK, IE, AU]; +1 (855) 246-8234 [US]

    8. FindmypastDNA

    Findmypast and Living DNA have come together to introduce FindmypastDNA, which includes the Living DNA family ancestry test with a detailed ethnicity breakdown (including, if you choose, Family Networks matching) as well as a subscription to Findmypast and the ability to build a free family tree. This combined experience means your DNA analysis results will allow Findmypast to search and find records based on your regional ancestry breakdown.

    This statement explains Findmypast’s privacy practices as they apply to FindmypastDNA and how specific personal data and genetic data that is collected and derived from your DNA test analysis is received and processed by Findmypast. The full Findmypast privacy policy also explains our collection of personal data in connection with our website that you visit to register, activate and use your Findmypast subscription. We recommend that you read our full privacy policy both now and later on our website when you are ready to complete your full Findmypast registration and activate your subscription with us. As explained, this privacy statement forms a part of our full privacy policy.

    Living DNA’s Privacy Statement details how Living DNA will process and collect your personal data, and genetic data as a result of using FindmypastDNA and Living DNA’s services. Living DNA also has a Cookie Policy that describes how Living DNA uses cookies and similar tracking technologies when you are on the Living DNA website through which FindmypastDNA is available.

    A. Through FindmypastDNA, Findmypast receives and uses your information as follows:

    What personal information does Findmypast receive and use if you choose FindmypastDNA?

    When collectedType of informationPurposeLegal basis
    When purchasing your Findmypast subscription and free DNA bundle Name, email, phone numbers and shipping address It is necessary to send this information to Living DNA to process and ship your free FindmypastDNA kit order. Contractual - in order to complete our contractual obligation to provide you with a DNA kit and FMP subscription
    When activating your DNA kit and linking your Findmypast and Living DNA accounts Your name, email address, kit number, order identification To deal with your requests and queries. For subscription administration purposes. To provide personalised communications We process this information in our legitimate interest in order to administer the Findmypast subscription set-up processes, to communicate how to activate the Findmypast subscription and to help with subscription and account registration questions
    When activating your DNA kit and linking your Findmypast and Living DNA accounts Name and email address To send Findmypast marketing communications about Findmypast products, services and offers or surveys (if you choose to receive these) Where you give us your consent to receiving FindmyPast marketing communications.
    When you receive your DNA results Genetic data and ethnicity breakdown Findmypast will use this data to suggest historical records related to your ethnicity breakdown, to enhance your Findmypast search results, and provide other customised content features such as personalised communications or dashboards. Where you give us your specific consent to this use.
    Family Networks matching (if you choose to participate in Family Networks, and depending on choices you make in respect of that service) Name, date of birth and sex, ethnicity breakdown, genetic data Family Networks matches To provide you with information related to your genetic DNA matches through the Family Networks service. Where you give us your specific consent to this use.
    When you use the Living DNA website Cookies, IP Address, device identifiers; and aggregate information about visitors to [PRODUCT NAME] and activation pages on the Living DNA website. To help us understand how best to optimise FindmypastDNA content on both Living DNA and Findmypast websites, and which may be used to place advertisements for FindmypastDNA or Findmypast services on our website or across other websites you may visit and to track conversion rates for our advertising across other websites. For more information about how Findmypast uses cookies see our cookies policy As permitted by the settings of your device or where you consent on the living DNA website to use of cookies under the terms of Living DNA's cookies policy.

    Please note: we understand that you control the use of your DNA and your genetic data. If new products are developed, Findmypast will only ever use your genetic data for any new products with your explicit consent.

    B. What information is not shared with Findmypast?

    Findmypast will not have access to your payment details in relation to the purchase of FindmypastDNA.

    Findmypast will not have access to your biological sample, which is sent to and tested in the secure laboratory.

    Living DNA use fully accredited professional laboratories to receive your mouth swab sample, to extract your DNA from the sample and to convert this into your DNA genetic data file. It is your genetic data which Findmypast may then receive where you consent to our use of your genetic data as described above, to provide enhanced ancestry insights and search results. Living DNA also receives your gender alongside the genetic data and will securely store your genetic data for us. Further information is available within Living DNA’s privacy statement.

    C. What if I do not provide some or all of the information requested?

    If you do not want to share your personal information and genetic data with Findmypast, it will not be possible to activate your Living DNA test and to participate in FindmypastDNA.

    D. Retention of genetic data

    Findmypast will retain your genetic data as needed to continue to provide you with the features associated with your purchase, to continuously update your Family Networks, and improve Living DNA ethnicity estimates unless you ask us to delete it sooner. Findmypast will review the need to retain your genetic data every ten years. You have the right to request the deletion of your personal data or genetic data at any time.

    E. Contacting Living DNA

    For more information about our partner Living DNA please review Living DNA’s Privacy Statement. You can contact Living DNA at:

    Email: help@livingdna.com

    Phone: +44 203 424 3482

    Post: K10 the Courtyard

    Jenson Avenue

    Commerce Park

    Frome BA11 2FG

    United Kingdom

    9. Sharing your information with third parties

    We may from time to time provide your personal information to third parties for the purposes of providing you with our services. These third-party providers include payment processors, providers of card validation services, and credit referencing providers. This is necessary for the performance of the contract. We do not keep a record of your credit or debit card details in our systems. Our payment processors do not decide what is done with your data and only process it on our behalf. These third parties may be located outside the European Economic Area; however, we only use providers that provide adequate protection for your personal information at all times.

    When transferring and storing any personal information outside the EEA we only do so under one of the legally recognised transfer mechanisms for ensuring the information is safeguarded. These are:

    • The country in question has been deemed safe for data transfer by the European Commission (also known as an ‘adequacy finding’);
    • The contract for data processing contains the standard contractual clauses laid down by the European Commission to safeguard the transfer of personal information;
    • Binding corporate rules – this is where a large company’s own internal processes for international data transfer have been signed off and agreed by the European Commission as safeguarding the information;
    • If the information is going to the USA it can be safely transferred to a company that is certified under the EU-US Privacy Shield; and
    • Appropriate certification schemes.

    We will disclose your personal information in order to comply with any legal obligation. This includes disclosing information to organisations for the purposes of fraud protection, credit risk reduction, or the order of a court or regulator.

    We also share your details with service providers who assist us with hosting our marketing campaigns and surveys but only in cases where you have consented to marketing or surveys. We will not provide your personal information to other third parties for marketing purposes unless you have specifically consented to this when you first provided your information to us. You are entitled to decline to receive such third-party communications by not selecting the appropriate box on the web form that collects your details or at any subsequent time by logging into your account and adjusting your preferences, by contacting us by email at support@findmypast.com or by post to Findmypast, 6 Chapel Place, Rivington Street, London EC2A 3DQ.

    10. Sale of the Business

    In the event that we undergo re-organisation or are sold to a third party, any personal information we hold about you may be transferred to that re-organised entity or third party.

    11. Cookies

    This website uses cookies. For more information about what cookies are, what we use them for and how you can delete them, please read our cookies policy.

    We do collect some information from cookies and similar software that allows us to understand how you arrive on our websites and use and navigate around them so we can improve the sites. We obtain some information from Google Analytics and Facebook. The Facebook information provided is limited to your email address and only that which you have previously agreed with Facebook that they can share.

    12. How we protect your information

    Findmypast follows strict security procedures in the storage and disclosure of personal information and genetic data which we receive and that you have given us, to prevent unauthorised access to, and loss, misuse or alteration of your information in accordance with UK data protection legislation. We are committed to international security standards and Findmypast are ISO 27001 certified for our information security controls.

    You are responsible for keeping secret any confidential passwords or other login or access details that you select or which we allocate to you. While we take steps to ensure the security of your information, there is a risk that any information transmitted over the Internet and stored on a computer may be intercepted or accessed by an unauthorised party. If you think that someone has accessed your information held by us without your permission or gained unauthorised access to your login details, you must notify us at support@findmypast.com.

    We also recommend that if you use a shared computer or a computer in a public place such as a library that you close your browser when you have finished your session.

    13. Your rights regarding your Personal Information

    Under the Data Protection law, you have a number of rights with respect to your personal information, which are:

  • Correcting your Information
  • You are entitled to have your personal information updated to ensure it is up to date and accurate. In order to maintain the accuracy of the information we hold, you can update your personal details through your ‘My Account’ page or by sending us an email to support@findmypast.com.

  • Withdrawing Consent
  • You have the right to withdraw your consent to any processing that is currently being done under your consent, such as marketing. Consent can be withdrawn by updating your preferences in the email preference centre or through ‘My Account’. You can also email to support@findmypast.com.

  • Obtaining a copy of your Information
  • You have the right to receive a copy of the personal information we hold about you. You can do this by contacting support@findmypast.com from the email address attached to your account, providing the full name attached to your account.

  • Deleting your information
  • You can request that we delete personal information in certain circumstances. These will be specific to each case. You can do this by contacting support@findmypast.com from the email address attached to your account, providing the full name attached to your account.

  • Data Portability
  • You have the right to ask us to transfer the personal information that you have given us to another controller.

  • Restricting Processing
  • You can request a restriction on the processing of your data in some limited circumstances. Examples are concerns over data accuracy or we no longer need to hold your data but you have requested its retention by us to aid you in a legal matter. You can do this by contacting support@findmypast.com from the email address attached to your account, providing the full name attached to your account.

  • Right to object to Processing
  • You have the right to request that we stop processing your data for marketing purposes and in other limited circumstances such as asking us not to process your data by wholly automated means or not to analyse your information for targeted content etc. (also known as profiling).

    You can action any of these rights by contacting our Customer Support Team or by contacting us by email at dataprotectionofficer@findmypast.com or by post to Data Protection Officer, Findmypast, 6 Chapel Place, Rivington Street, London EC2A 3DQ.

    14. Right of complaint to the Regulator for Data Protection

    The data protection laws in the UK are regulated and enforced by the Information Commissioner’s Office (ICO). Each individual has the right to raise a concern/complaint to the ICO if they have any concerns about how their personal information and/or privacy is treated. You can do this via the ICO’s website, follow the links or have an online Live Chat.

    Call the ICO helpline on 0303 123 1113

    Email casework@ico.org.uk

    Postal address: Information Commissioner's Office

    Wycliffe House

    Water Lane

    Wilmslow, Cheshire,

    SK9 5AF

    15. How long we hold your data for

    Some of the information you provide to us will be necessary to carry out repeated tasks, such as verifying your identity or payment details when signing in to use an account, providing our services to you or when you are using an online checkout. We will keep this information for as long as you remain a registered user of any of our sites and for so long as reasonably necessary. After this time, we may need to hold your personal data in order to meet our financial obligations or identify or resolve issues or causes of action. If your account is inactive for more than ten years and you are no longer paying for a service, we reserve the right to delete any information you have provided to us, including all information in your family tree.

    Genetic data

    Findmypast will retain your genetic data as needed to continue to provide you with the features associated with your purchase, to continuously update your Family Networks, and improve Living DNA ethnicity estimates unless you ask us to delete it sooner. Findmypast will review the need to retain your genetic data every ten years. You have the right to request the deletion of your personal data or genetic data at any time.

    16. Links to third-party websites

    Our website contains links to other websites belonging to third parties which are not covered by this privacy policy. If you want to go through to a third-party website, please make sure that you read the privacy policy for that website.

    Privacy Notice for Residents of California

    This Privacy Notice for California Residents supplements the information contained in Findmypast’s Privacy Policy and applies solely to all visitors, users, and others who reside in the State of California (”consumers” or “you”). We adopt this notice to comply with the California Consumer Privacy Act of 2018 (“CCPA”) and any terms defined in the CCPA have the same meaning when used in this Notice.

    A. Personal Information We Collection

    We collect a variety of personal information about our visitors, users and other people who reside in California. For the purpose of this Section 17, as defined by the CCPA, “personal information” means information that identifies, relates to, describes or references a particular consumer, household or device. It can also include information that could be associated or linked with a particular consumer, household, or device. However, personal information does not include:

    • Publicly available information from government records, or
    • Information that cannot be used to identify a consumer, household or device because it has been anonymised.

    In particular, we have collected the following categories of personal information from our consumers within the last twelve (12) months:

    Category of personal information Examples Where we source this information Why we process this information Third parties we share this information with
    Identifiers Your real name, for example your forename, surname or an alias you are known by
    Your postal address
    Your unique personal identifier(s) such as an online username, e-mail address or account name
    Your I.P. address
    From you, the consumer, when you register to use our products and services or you add information to your family tree
    From social media networks you may have used to interact with us (with your consent)
    To manage your account with us, including any free trial
    To fulfil your orders and requests
    To communicate with you
    To tailor our products and services to your needs and circumstances
    To administer our products and services and ensure they work correctly and securely
    To understand where our consumers are located
    To analyse and research how our products and services are used and can be improved
    To assist with marketing and advertising
    To enable us to send you surveys
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage
    Companies who process payments on our behalf,
    Companies who help us with marketing campaigns, advertising and surveys
    Where required, law enforcement agencies
    Information that relates to characteristics that are protected under California or federal law Your age

    Your race or color

    Your nationality

    Your religion or creed

    Your marital status

    Your sex

    Your gender

    Your medical condition or status (including pregnancy and related medical conditions)

    Your sexual orientation

    Your veteran or military status

    Your genetic information, limited to a summary of the geographical make-up and origins of your genes
    From you, the consumer, when you add information to your family tree To populate your family tree at your request

    To provide you with advanced website features such as record ‘hints’

    To improve your search results on our site

    To communicate with you

    To tailor our products and services to your needs and circumstances
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage
    Commercial information Records of our products and services that you have purchased or considered From you, the consumer, when you make or consider making a purchase from us To fulfil your orders and requests

    To communicate with you

    To administer our products and services and ensure they work correctly and securely

    To analyse and research how our products and services are used and can be improved

    To assist with marketing and advertising
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage

    Companies who process payments on our behalf,

    Companies who help us with marketing campaigns, advertising and surveys

    Where required, law enforcement agencies

    Our parent company, for accounting and financial purposes
    Biometric information Your genetic information, limited to a summary of the geographical make-up and origins of your genes From you, the consumer, via our partner LivingDNA (see section 8. Findmypast DNA) To help you search for relevant content on our site Companies who help to provide our technology such as our databases, customer relationship management system and document storage
    Internet activity Information about your activity on our website

    Information about how you use our products and services, including things you search for (such as particular records)

    Information about how you interact with Findmypast advertisements, for example on social media
    From you, the consumer, via cookies we place on your device, third party analytics providers (such as Google Analytics) and social media partners (such as Facebook) To communicate with you

    To tailor our products and services to your needs and circumstances

    To understand where our consumers are located

    To analyse and research how our products and services are used and can be improved

    To assist with marketing and advertising

    To provide you with advanced website features such as record ‘hints’

    To improve your search results on our site
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage

    Companies who help us with marketing campaigns, advertising and surveys

    Advertising partners including social media companies

    Where required, law enforcement agencies
    Geolocation data Your I.P. address

    Your device identifier(s)
    From you, the consumer, via cookies we place on your device and third party analytics providers (such as Google Analytics) To understand where our consumers are located

    To analyse and research how our products and services are used and can be improved

    To assist with marketing and advertising
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage

    Companies who help us with marketing campaigns, advertising and surveys

    Advertising partners including social media companies

    Where required, law enforcement agencies
    Sensory data (e.g. audio) Recordings of conversations when you call us about our products and services From you, the consumer, when you call us To manage your account with us, including any free trial

    To fulfil your orders and requests

    To administer our products and services and ensure they work correctly and securely
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage software
    Professional or employment-related information Details of your current or previous occupation(s) From you, the consumer, when you add information to your family tree  To populate your family tree at your request Companies who help to provide our technology such as our databases, customer relationship management system and document storage software
    Inferences drawn from other personal information Information we have inferred about your preferences or characteristics, based on other information we hold about you From our internal records

    From you, the consumer, via cookies we place on your device and third party analytics providers (such as Google Analytics)
    To communicate with you

    To analyse and research how our products and services are used and can be improved

    To assist with marketing and advertising

    To enable us to send you surveys
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage

    Companies who help us with marketing campaigns, advertising and surveys

    Advertising partners including social media companies

    Where required, law enforcement agencies
    Personal information categories per
    The California Customer Records statute (Cal. Civ. Code § 1798.80(e))
    Some personal information included in this category may be covered in other categories.  Examples include:


    Your name

    Your telephone number

    Your photo

    Details of your payment card
    From you, the consumer

    From social media networks you may have used to interact with us (with your consent)
    To manage your account with us, including any free trial

    To fulfil your orders and requests

    To communicate with you

    To tailor our products and services to your needs and circumstances

    To administer our products and services and ensure they work correctly and securely

    To understand where our consumers are located

    To analyse and research how our products and services are used and can be improved

    To assist with marketing and advertising

    To enable us to send you surveys
    Companies who help to provide our technology such as our databases, customer relationship management system and document storage

    Companies who process payments on our behalf,

    Companies who help us with marketing campaigns, advertising and surveys

    Where required, law enforcement agencies

    B. Sharing Personal Information

    We may disclose your personal information to a third party for a business purpose. When we do this, we enter into a contract that describes the purpose and requires the recipient to both keep that personal information confidential and not use it for any purpose except performing the contract or as otherwise permitted under the CCPA.

    We share your personal information with the following categories of third parties:

    • Analytics Partners. These parties provide analytics on web traffic or usage of the products or service. They include:
      • Companies that track how users found or were referred to the products or services
      • Companies that track how users interact with the product or services
    • Companies hosting our technology such as our databases, customer relationship management system and document storage
    • Companies who help us to keep our technology and services secure and to prevent and detect fraud
    • Companies who process payments on our behalf
    • Companies who support our marketing and advertising activity
    • Companies who help us to conduct consumer surveys
    • Our parent company (D.C. Thomson & Co. Ltd, a UK-registered company)
    • Law enforcement agencies, if we are legally required to do so.
    • Parties you authorise, access or authenticate
    Disclosures of Personal Information for a Business Purpose

    In the past 12 months, we have disclosed the following categories of personal information for a business purpose:

    • Identifiers
    • Information that relates to characteristics that are protected under California or federal law
    • Commercial information
    • Biometric information (limited to a summary of the geographical make-up and origins of your genes)
    • Internet activity
    • Geolocation data
    • Sensory data
    • Professional or employment-related information
    • Inferences drawn from other personal information
    • Personal information categories per The California Customer Records statute

    For business purposes we disclose your personal information to the categories of third parties listed in the table under “Personal Information We Collect”, above – see the column “Third parties we share this information with”.

    Sales of Personal Information

    In the past 12 months, we have not sold personal information.

    Based on our current understanding of the CCPA, we do not “sell” your personal information as defined in the legislation. However, like many companies that operate online, we do use services provided by Google, Facebook and other advertising companies that track website visitor activity to help deliver interest-based ads to you (known as behavioural advertising). Behavioural advertising is described in more detail here. Use of these services could constitute a “sale” of personal information under the CCPA if you did not consent to your activity being tracked in this way.

    Data that is not personal information

    We may create aggregated, de-identified or anonymised data from the personal information we collect, including by removing information that makes the data personally identifiable to a particular user. We may use such aggregated, de-identified or anonymised data and share it with third parties for our lawful business purposes, including to analyse, build and improve our products and services and promote our business, provided that we will not share such data in a manner that could identify you.

    Security and Retention

    We seek to protect your personal information from unauthorised access, use and disclosure using appropriate physical, technical, and administrative security measures and storage and processing practices based on the type of personal information. For example, our website uses industry standard HTTPS protocols which encrypt your connection to us and the personal information you provide to us using Transport Layer Security (TLS) technology. Although we work to protect the security of your account and other data that we hold in our records, please be aware that no method of transmitting data or storing data over the Internet is completely secure. We cannot guarantee the complete security of any data you share with us, and except as expressly required by law, we are not responsible for the theft, destruction, loss or inadvertent disclosure of your information or content.

    We retain personal information about you in accordance with Section 15 of this privacy notice, to comply with our legal obligations, resolve disputes, or as otherwise permitted or required by applicable law, rule or regulation. We may further retain information in an anonymous or aggregated form where that information would not identify you personally.

    C. Your Rights and Choices

    The CCPA provides consumers (California residents) with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise those rights.

    Your Right to Know

    You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive your request and verify that it’s from you (see “How to exercise your rights”), we will disclose to you:

    • The categories of personal information we have collected about you
    • The categories of sources from which we collected the information
    • Our purposes for collecting the information
    • The categories of third parties with whom we share the information
    • The specific pieces of personal information we collected about you
    • If we sold or disclosed your personal information for a business purpose, two separate lists showing:
    • Sales we made, identifying the personal information categories that each category of recipient purchased; and
    • Disclosures we made for a business purpose, identifying the personal information categories that each category of recipient received.

    Your Right to Request Deletion

    You have the right to request that we delete any of your personal information that we collected from you and retained, subject to certain exceptions. Once we receive your request and verify that it’s from you (see “How to exercise your rights”), we will delete your personal information from our records, unless an exception applies. We will also ask our service providers to delete any personal information we have disclosed to them.

    We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

    • Complete the transaction for which we collected the personal information, provide a product or service that you requested, take actions you would reasonably expect as part of our ongoing relationship with you (e.g. resolving a question or complaint), fulfil the terms of a written warranty or product recall, or do anything else required to honour our contract with you
    • Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
    • Debug products to identify and repair errors that adversely affect how they function
    • Exercise free speech, ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
    • Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et. seq.)
    • Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws, if you have previously consented to this and if deleting the information would significantly affect the research
    • Comply with a legal obligation
    • Make internal use of the information for purposes that are lawful and that you would reasonably expect when you provided the information (e.g. quality control)

    Your Right to Non-Discrimination

    At Findmypast we are committed to treating consumers fairly and we will not discriminate against you for exercising any of your rights under the CCPA, for example by charging you a higher price or denying you access to our products and services.

    How to Exercise your Rights

    To exercise your rights as described above, please submit your request to us by:

    • Calling us at +1 (855) 246-8234, or
    • E-mailing us at privacy@findmypast.com

    Only you, or someone legally authorised to act on your behalf, may make a request related to your personal information and you may only make two requests within a 12-month period.

    To help us respond to your request, please ensure it is clear, specific and detailed enough that we can understand it and provide what you require. Please also note that we will be unable to respond or provide any personal information unless we can verify that your request is genuine (and if you are making the request on someone else’s behalf, that you are legally authorised to do so). To enable us to act on your request, we will need you to provide sufficient information to verify your identity. For Findmypast users, this may include the following:

    • If we are able to verify your request through a password-protected account, we may do so, and we will ask you to re-authenticate yourself before we disclose or delete your data.
    • If we are not able to verify your request through a password-protected account, we will require additional information to verify your identity. Such information will depend on the type of request and the sensitivity of the personal information. For example, we may ask you to confirm your current subscription plan and details, information from your family tree, and/or other identifying information associated with your use of Findmypast that allows us to verify your identity before we act on your request.
    • If your request is for specific pieces of personal information, we may also require a signed declaration under penalty of perjury to verify your identity.
    • If you have an account with Findmypast, you can also access personal information associated with your account through your account settings once you are logged in.

    You may also authorize an agent (an “Authorized Agent”) to exercise your rights on your behalf. To do this, you must provide your Authorized Agent with written permission to exercise your rights on your behalf, and we may request a copy of this written permission from your Authorized Agent when they make a request on your behalf. We may deny requests from Authorized Agents if we do not receive sufficient proof of authorization on your behalf.

    When and How we will Respond

    We will endeavour to respond to a request we have been able to verify within 45 days of receiving it. If for any reason we are unable to comply or if we need more time (up to additional 45 days), we will let you know and explain why in writing. We will deliver our response electronically unless you ask us otherwise; please note that as we are UK-based, a postal response will take longer to reach you. If you are requesting personal information from your family tree(s), we will provide you with instructions so you can download the information in a GEDCOM file, which is a standard file format used by genealogical organisations.

    We will not charge you a fee for making a request unless your request(s) is excessive, repetitive or manifestly unfounded.

    Other California Rights

    California residents are entitled to contact us to prevent disclosure of personal information to third parties for such third parties’ direct marketing purposes, under California Civil Code Sections 1798.83-1798.84. If you would like to submit such a request, please contact us at support@findmypast.com.

    Nevada Resident Rights

    If you are a resident of Nevada, you have the right to opt-out of the sale of certain personal information to third parties who intend to license or sell that personal information. You can exercise this right by contacting us at support@findmypast.com with the subject line “Nevada Do Not Sell Request” and providing us with your name and the email address associated with your account. Please note that we do not currently sell your personal information as sales are defined in Nevada Revised Statutes Chapter 603A.

    19. Updates to this policy

    We may update this policy at any time without notice. We may tell you that we have updated the policy by emailing you at the email address you have provided to us and/or by posting an announcement on the website. By continuing to use the website after we have emailed you or posted a notice informing you of an update, you accept the changes to this Policy.

    Privacy statement last updated 2 September 2020.

    20. Contacting us

    If you have any questions about privacy or wish to update your details or have them removed from our mailing list at any time, please contact us at:

    Email: support@findmypast.com

    Phone: +44 (0)20 3326 6300 [UK, IE, AU] / +1 (855) 246-8234 [US]

    Post: Data Protection Officer

    Findmypast

    6 Chapel Place

    Rivington Street

    London EC2A 3DQ