Privacy Policy

1. What information we collect

We collect personal information only when you provide it to us directly, including:

• —Contact information (name, email address, company name) submitted via website forms
• —Business information you provide in the course of enquiries or onboarding (revenue range, vertical, business description)
• —Access credentials for analytics platforms (Google Search Console, GA4) provided as part of an engagement — stored securely and used only for the purpose stated
• —Communications exchanged by email in the course of business

We do not use third-party tracking scripts, advertising pixels, or behavioural analytics tools on this website. Standard server logs (IP address, pages visited, timestamp) may be retained by our hosting provider (Netlify) in the ordinary course of hosting operations.

2. How we use your information

We use personal information collected via our website forms to:

• —Respond to enquiries and schedule introductory calls
• —Deliver audit reports and retainer work product
• —Invoice and process payment for services
• —Send service-related communications (scope updates, report delivery, renewal notices)

We do not sell, rent, or trade personal information to third parties. We do not use personal information for marketing to third parties.

3. Disclosure to third parties

Personal information may be processed by third-party service providers acting on our behalf, including our hosting provider (Netlify), our email provider, and our invoicing software. These providers are contractually obligated to use personal information only for the purposes we specify and to maintain appropriate security measures. We do not disclose personal information to any other third party except as required by law.

4. Data retention

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact information from website form submissions is retained for up to 24 months if no engagement follows. Client information is retained for seven years following the end of an engagement, consistent with standard Canadian accounting requirements.

5. Your rights under PIPEDA

Under PIPEDA, you have the right to:

• —Access personal information we hold about you
• —Request correction of inaccurate personal information
• —Withdraw consent to the collection or use of your personal information (subject to legal and contractual restrictions)
• —File a complaint with the Office of the Privacy Commissioner of Canada if you believe your rights have been violated

To exercise any of these rights, contact us at hello@meridiansearch.io. Requests are responded to within 30 days.

6. Security

We maintain physical, technical, and organisational measures appropriate to the sensitivity of the personal information we hold. Analytics platform credentials provided by clients are stored using encrypted credential management software and are deleted within 30 days of engagement termination unless required for reporting purposes.

7. Contact

Questions or concerns about this Privacy Policy or our privacy practices should be directed to: hello@meridiansearch.io

Meridian Search, Canada.