Privacy policy

Who we are

Meridian Bureau is a design and engineering studio operating themeridianbureau.com. For any question about this policy or your information, contact us at info@themeridianbureau.com. Meridian Bureau is the data controller responsible for your personal information.

Information we collect

Information you give us

When you use our contact or project inquiry form, or otherwise reach out to us, we collect the details you choose to provide. This may include:

• Your name
• Your email address
• Your company or organization (optional)
• The project brief and any details you include — goals, timeline, budget range, and anything else you tell us
• The content of any emails, calls, or messages you send us

Please only send information you are comfortable sharing, and do not submit sensitive personal information (such as government ID numbers, health, or financial account details) through the form.

Information collected automatically

Our site is hosted on Vercel. Like most websites, our hosting provider automatically records standard server log data when you visit — such as your IP address, browser type, device information, referring pages, and the date and time of your request. This is used to operate, secure, and troubleshoot the site.

Cookies and tracking

We do not use advertising or third-party analytics cookies, and we do not track you across other websites. We use only what is strictly necessary to serve the site. If we introduce analytics or other cookies in the future, we will update this policy and, where required by law, ask for your consent first.

How we use your information

We use the information we collect to:

• Respond to your inquiry and communicate with you about your project
• Provide, scope, and deliver our services if we work together
• Operate, maintain, secure, and improve our website
• Keep records and comply with our legal obligations
• Detect, prevent, and address fraud, abuse, or security issues

We do not sell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

Legal bases (EU/UK visitors)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under the GDPR / UK GDPR: your consent (which you may withdraw at any time); the performance of a contract or steps taken at your request before entering one; our legitimate interests in responding to inquiries, running our business, and securing our site; and legal obligations where applicable.

How we share your information

We share personal information only in these limited circumstances:

• Service providers. With vendors who help us run the business — for example our website host (Vercel) and email provider — who process data on our behalf under confidentiality obligations.
• Legal reasons. When required to comply with the law, a valid legal request, or to protect our rights, safety, or property.
• Business transfers. In connection with a merger, acquisition, or sale of assets, subject to this policy.

We never sell or rent your personal information to third parties.

Data retention

We keep your information only for as long as needed for the purposes above — typically for the duration of our correspondence or engagement, plus a reasonable period afterward for records, legal, and tax purposes. We delete or anonymize information when it is no longer needed. You may ask us to delete your information at any time (see your rights below).

Data security

We use reasonable technical and organizational measures to protect your information against loss, misuse, and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Your rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access the information we hold about you
• Correct inaccurate or incomplete information
• Delete your information
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your information in a portable format
• Not receive discriminatory treatment for exercising these rights

California residents (CCPA/CPRA): you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share your personal information as those terms are defined under California law.

To exercise any right, email us at info@themeridianbureau.com. We will respond within the timeframe required by applicable law. You may also authorize an agent to make a request on your behalf. If you are in the EEA or UK and believe we have not handled your data properly, you may lodge a complaint with your local data protection authority.

International transfers

We operate in the United States, and your information may be processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your country. Where required, we use appropriate safeguards for such transfers.

Children's privacy

Our site is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

Third-party links

Our site may link to third-party websites we do not control. This policy does not apply to those sites, and we are not responsible for their privacy practices. Review their policies before providing information.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be made clear on this page. Your continued use of the site after an update means you accept the revised policy.

Contact us

Questions or requests about this policy or your information? Email info@themeridianbureau.com. See also our Terms & conditions.