Form on the Website
There is a contact form and “Leave A Comment” (blog/memorial service section) on the website which collect data (eg “name, email address etc) and the Notice on this should be slightly different:
“All personal data/special category data herein are processed in accordance with UK data protection legislation, including UK GDPR. All feasible security measures are in place.”