Privacy policy

Who we are

Meridianstacks ("we") is a software development team anchored by engineering hubs in Lagos, Nairobi and Johannesburg, serving clients in the UK, Ireland, Canada, the UAE and the Nordics. Contact for anything in this policy: [email protected].

What we collect, and why

• Contact form: name, work email, company, city/country, and your project brief — so a senior engineer can reply to your enquiry. Lawful basis: taking steps at your request before entering a contract (UK/EU GDPR Art. 6(1)(b)) and our legitimate interest in responding to business enquiries.
• Booking form: name, work email, company, your preferred day/time window, your timezone (detected by your browser so we can schedule on your clock), and an optional topic line — to confirm a scoping call.
• Technical data: the submitting IP address and browser user-agent are stored with each submission for spam prevention and abuse handling. Standard web-server logs may record requests.
• Nothing else. This site currently sets no analytics or advertising cookies and runs no third-party trackers. Fonts are loaded from Google Fonts, which receives your IP address when the font files are requested.

Where it lives, and for how long

Form submissions are stored in a database on our web-hosting server and are accessible only to authorised Meridianstacks staff (via an authenticated dashboard and API). We keep enquiry and booking data for up to 24 months after last contact, then delete it — sooner on request. We do not sell or rent personal data, ever.

International transfers

We are transparent about geography everywhere on this site, including here: our team works from hubs in Nigeria, Kenya and South Africa, none of which currently holds a UK or EU adequacy decision. Where we process personal data of UK/EEA individuals beyond this website's enquiry forms, we put the appropriate safeguards in place — the UK IDTA or EU Standard Contractual Clauses, plus the commitments in our DPA. For UAE clients we align with the PDPL; for Canadian clients, PIPEDA.

Your rights

Depending on your jurisdiction, you can ask us to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent where consent is the basis. Email [email protected] — we respond within one month. UK/EEA individuals may also complain to their supervisory authority (for the UK, the ICO).

Changes

If this policy changes materially, the "last reviewed" date above changes with it, and significant changes will be noted on the legal index.