Legal · Privacy
Privacy & cookie notice
A short notice, because the site does very little. Meridian Data Limited is a fictional firm; this notice describes the behaviour of the demonstration deployment you are currently reading.
In one paragraph
No accounts, no cookies, no analytics, no advertising, no third-party scripts, no fonts or assets loaded from anywhere other than this server. The contact form stores nothing. The only personal data the deployment could see is what appears in ordinary web-server request logs, which are retained briefly for operations and then discarded.
Who is responsible
The site is operated by the party who deployed it, not by any real “Meridian Data Limited”. For a demonstration deployment, the controller is whoever runs the container. Inquiries should be directed to that operator rather than to the fictional addresses shown elsewhere on the site.
What we collect
- Contact form. Your name, firm, email address, topic and message are used once to render a confirmation page and are then discarded. They are not written to disk, not inserted into a database, not emailed and not included in application logs.
- Server logs. The CDN or reverse proxy in front of this site may record the usual request metadata: IP address, timestamp, method, path, user agent and response status. This is used for availability and abuse handling only.
- Nothing else. No account system, no newsletter, no payment flow, no upload, no third-party embed.
Cookies and local storage
This site sets no cookies and writes nothing to localStorage or sessionStorage. There is no consent-management SDK and no tag manager. The regulatory notice shown at the foot of the page is dismissed purely by a CSS state toggle in your browser; nothing about that action is recorded, and the notice will appear again on your next page load.
Third parties
The pages load no external resources: no fonts, no icon libraries, no analytics, no social widgets, no CDN-hosted scripts. The stylesheet is served from this origin and compiled at image build time. Outbound links, where present, go only to pages within this site.
Legal bases and retention
Where the GDPR or UK GDPR would apply to a real deployment of this software, the operator's basis for processing request logs would typically be legitimate interests in keeping the service available and secure, and logs would be retained for the shortest period consistent with that purpose. Contact-form content is not retained at all and therefore has no retention period.
Your rights
Because the application holds no personal data, there is nothing to access, correct, export or erase. Rights relating to server logs should be raised with the operator of the deployment, who can be identified from the hosting arrangement rather than from this page.
Complaints
If this were a real service in the United Kingdom, you would be able to complain to the Information Commissioner's Office. As it is a fictional firm with no data, there is nothing to complain about — but the operator of the deployment remains the correct point of contact for any concern.
Changes
Any change to this notice will be published on this page with a revised date. The current version is dated 12 October 2026.