Privacy notice
Meridian Keystone Ltd ("Meridian Keystone", "we", "us", "our") is committed to protecting your personal information. This notice explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
1. Who we are
Meridian Keystone Ltd is a company registered in England and Wales (company number 17412231) with its registered office at 78 York Street, London, W1H 1DP. We are the data controller for the personal data described in this notice.
If you have any questions about this notice or how we handle your information, please contact us:
Meridian Keystone Ltd
78 York Street, London, W1H 1DP
Email: info@meridiankeystone.co.uk
Telephone: +44 7867 086 086
2. Personal data we collect
- Enquiry information: your name, company, email address, telephone number, area of interest and the content of your message when you contact us through our website, by email or by phone.
- Client information: contact details of our clients' directors and staff, correspondence, meeting notes and information needed to deliver our services.
- Financial information: billing details and payment records for clients.
- Technical information: when you visit our website, our hosting provider automatically processes basic technical data such as your IP address, browser type and the pages requested, in order to deliver the website securely.
We do not knowingly collect special category data (such as health information) through our website. Please do not include such information in an enquiry.
3. How and why we use your data
| Purpose | Lawful basis |
|---|---|
| Responding to your enquiry and arranging an initial consultation | Legitimate interests (responding to people who contact us) and taking steps at your request before entering into a contract |
| Providing our consultancy services and managing our client relationship | Performance of a contract |
| Invoicing, accounting and record keeping | Legal obligation and performance of a contract |
| Keeping our website secure and working properly | Legitimate interests |
| Sending occasional updates or insights by email | Consent, or for existing clients the "soft opt-in" under PECR. You can unsubscribe at any time. |
4. Who we share your data with
We never sell your personal data. We share it only where necessary with:
- Service providers acting on our behalf, including our website host and form-handling provider (Netlify, Inc.), our email and office software provider (Microsoft) and our professional advisers, such as accountants and lawyers.
- Font provider: our website loads typefaces from Fontshare (Indian Type Foundry), which receives your IP address so that the fonts can be delivered to your browser. No cookies are set.
- Authorities such as HMRC or law enforcement, where we are legally required to do so.
All service providers are required to keep your data secure and to use it only in line with our instructions.
5. International transfers
Some of our service providers may process data outside the UK, including in the United States. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations (including the UK Extension to the EU-US Data Privacy Framework), the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.
6. How long we keep your data
- Enquiries that do not lead to an engagement: up to 2 years from our last contact.
- Client and engagement records: 6 years after the end of the engagement, in line with legal, tax and professional requirements.
- Marketing preferences: until you unsubscribe, after which we keep a suppression record so we do not contact you again.
7. How we protect your data
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) on our website, access controls and secure, reputable service providers.
8. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where there is no good reason for us to keep it;
- ask us to restrict or object to our use of your data, including for direct marketing;
- receive your data in a portable format, where applicable; and
- withdraw consent at any time, where we rely on consent.
To exercise any of these rights, please contact us using the details above. We will respond within one month. There is normally no charge.
9. Complaints
If you are unhappy with how we have handled your personal data, please contact us first so that we can try to put things right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint, telephone 0303 123 1113.
10. Cookies
Please see our cookie policy for information about cookies and similar technologies.
11. Changes to this notice
We may update this notice from time to time. The latest version will always be published on this page, with the date it was last updated.