New: link a theme to a roadmap item and see what the next release answers.Read the release notes

Skip to content
Meridel

Privacy policy

Last updated 1 November 2026.

Sample text for the theme’s demo. This page is written for Meridel, an invented company, and is not legal advice. Replace it with the text for your own product, and have that reviewed by someone qualified for your country before you publish.

This policy explains which personal data Meridel B.V. (“Meridel”, “we”) collects when you visit this website, contact us or use the Meridel service, why we do so, how long we keep it and what rights you have. If something in it is unclear, ask us.

Who is responsible

Meridel B.V., Voorbeeldstraat 1, 1234 AB Amsterdam, the Netherlands (Chamber of Commerce 00000000) is the controller for the personal data described in this policy. You can reach us about privacy at privacy@meridel.example. We have not appointed a data protection officer; our privacy contact handles every request.

The feedback in your workspace

The tickets, call notes, survey answers and reviews you connect to Meridel can contain personal data about your own customers. For that data, your organisation is the controller and we are its processor: we handle it only on your instructions, as set out in our data processing agreement, which is part of our terms of service. Meridel masks names, email addresses and phone numbers in feedback before storing it. Questions from your customers about that data should go to your organisation first.

What we collect, and why

  • When you write to us through the contact form or by email: your name, email address, company and message. We use them to answer you. Legal basis: our legitimate interest in replying to questions, or taking steps towards a contract at your request.
  • When you sign up for our newsletter: your email address. We use it to send the newsletter you asked for, and every issue has a link to unsubscribe. Legal basis: your consent, which you can withdraw at any time.
  • When you create an account: your name, work email address, password (stored only as a salted hash), your organisation’s name and your role in the workspace. We use them to provide the service, secure your account and send service messages such as sign-in codes and billing notices. Legal basis: the performance of our contract with you or your organisation.
  • When you pay: the billing name and address, VAT number and the plan you chose. Card or bank details go straight to our payment provider; we never see or store them. Legal basis: the performance of the contract, and our legal obligation to keep financial records.
  • When you use the service: technical data such as IP address, browser type, the time of each request and error reports. We use it to keep the service secure, find faults and plan capacity. Legal basis: our legitimate interest in running a secure and reliable service.

We do not sell personal data, use it for advertising or make decisions about you based solely on automated processing.

Cookies and similar technologies

This website does not use cookies for analytics, advertising or tracking, and it loads no third-party trackers. Two things are stored, and only when they are needed:

  • When you close the announcement at the top of a page, your browser remembers that choice in its local storage, so the announcement stays closed. It is never sent to us, and you can clear it in your browser’s settings.
  • When you sign in to the Meridel app, it sets a strictly necessary session cookie that keeps you signed in. Members of our team who preview unpublished pages of this website get a similar cookie from our content system.

Because these are strictly necessary for something you asked for, they do not need your consent. If we ever add anything else, we will ask first.

Who we share data with

We share personal data only with service providers that help us run Meridel, and only as far as each one needs it. They act as our processors under a written agreement and may not use the data for their own purposes. They are:

  • hosting and infrastructure providers, for the website and the service;
  • an email delivery service, for sign-in codes, service messages and the newsletter;
  • a form processing service, which receives the messages sent through our forms;
  • a payment provider, which handles payments and stores card and bank details;
  • our bookkeeping software and accountant, for invoices and the financial records the law requires.

We may also disclose data when the law requires it, for example to a tax authority or at the order of a court.

Where your data is stored

We store personal data in the European Union. Business plans can choose another hosting region for their workspace. If a provider transfers data outside the European Economic Area, we make sure an adequacy decision or the European Commission’s standard contractual clauses protect it.

How long we keep it

  • Messages to us: up to two years after our last contact, unless they become part of a customer relationship.
  • Newsletter: until you unsubscribe; we then keep only your address on a suppression list, so that we do not write to you again.
  • Account and workspace data: for as long as your account exists. When a workspace is closed, we delete its data within 30 days, and backups roll over within a further 30 days.
  • Invoices and payment records: seven years, as Dutch tax law requires.
  • Technical logs: up to 90 days, unless we need them longer to investigate a security incident.

Your rights

Under the General Data Protection Regulation you can ask us for access to your personal data, to correct or delete it, to restrict its use, or to receive it in a portable format. You can object to processing based on our legitimate interest, and you can withdraw consent at any time without affecting what we did before. Write to privacy@meridel.example; we answer within one month and may ask you to confirm your identity first.

If you think we handle your data wrongly, please tell us. You also have the right to lodge a complaint with a data protection authority, in particular in the EU country where you live or work. Our lead authority is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Security

We encrypt data in transit and at rest, limit access to the people who need it, and review that access regularly. If a breach puts your data at risk, we tell you and the authority as the law requires.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change matters for how we use your data, we tell account holders by email before it takes effect.

Contact

Meridel B.V., Voorbeeldstraat 1, 1234 AB Amsterdam, the Netherlands. Email: privacy@meridel.example.