Privacy Policy

Meridian Supply is the business responsible for the personal information described in this policy (the data controller). Its full legal entity name and registered or business address are awaiting confirmation.

For privacy questions or requests, contact hello@meridiansupply.co.uk.

• Information you submit through our contact form: your name, work email address, company and message.
• Information you provide in emails, calls or other correspondence, including relevant business requirements and contact details.
• Technical information processed when the website is delivered or secured, which may include IP address, browser information and request or error logs.

Please do not include sensitive personal information or information about other people unless it is necessary and you are entitled to share it.

• To respond to enquiries and arrange conversations: our legitimate interest in communicating with prospective business clients, or taking steps at your request before entering a contract where applicable.
• To manage client relationships and deliver agreed services: performance of a contract where you are a party, or our legitimate interests where you represent a business client.
• To maintain website security and resolve technical issues: our legitimate interest in operating a reliable, secure website.
• To comply with applicable legal, accounting and regulatory obligations: compliance with a legal obligation.

Submitting an enquiry is not consent to receive unrelated marketing. Where consent is required for marketing or optional tracking, it must be obtained separately and can be withdrawn.

Enquiries are stored using Lovable Cloud. Website hosting, storage and communication providers may process information on our behalf. Access should be limited to people and providers who need it to respond to enquiries, deliver services or operate the website.

Information may also be disclosed to professional advisers or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims. We do not sell your personal information.

If information is transferred outside the UK, applicable UK data protection requirements must be met, including adequacy regulations or appropriate safeguards such as approved contractual protections where required. Contact us for information about safeguards relevant to your data. Provider locations and transfer arrangements must be confirmed as part of reviewing this policy.

Information should be kept only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, managing client relationships and meeting legal requirements. Relevant factors include whether an enquiry is ongoing, whether you become a client and applicable record-keeping or limitation periods.

The business must confirm its retention periods and deletion procedures. You may contact us to ask about retention of your information or to request deletion, subject to applicable exceptions.

The private administration area uses a session cookie to keep authorised administrators signed in. This is separate from submitting a public enquiry.

The website loads fonts from Google Fonts; your browser connects to Google to retrieve them, which may disclose your IP address and request information. External links, such as LinkedIn, are governed by the destination service’s own privacy policy.

Hosting services may use necessary technologies for delivery and security. Any non-essential analytics or advertising technologies require a separate assessment and, where required by law, your consent before use. This policy does not itself provide that consent.

Under UK data protection law, depending on the circumstances, you may request access to your information, correction, erasure, restriction of processing or transfer of information. You may also object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights are subject to legal conditions and exceptions.

Email hello@meridiansupply.co.uk to make a request. We may need to verify your identity. Requests should normally be answered within one month; extensions are permitted in certain circumstances.

You can complain to the UK Information Commissioner’s Office at ico.org.uk. You do not need to contact us first, although we welcome the opportunity to address your concerns.

Appropriate technical and organisational measures should protect personal information. No internet transmission or storage system can be guaranteed completely secure.

This policy may be updated as our services or legal requirements change. The date above identifies the latest revision.