Privacy Policy

Last Updated: February 2026
 

Meridian Bastion (“we”, “us”, or “our”) is committed to protecting and respecting your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
 

1. Important Information and Who We Are

Meridian Bastion is the data controller responsible for your personal data. Our website is a technical information platform; we do not maintain a live database of user profiles or personal information on this website.

Contact Details: Email: [Insert Email Address]

Registered Address: [Insert Registered Office Address]
 

2. The Data We Collect

We may collect, use, and store different kinds of personal data about you, which we process manually:

• Identity Data: Name, title, and company name.

• Contact Data: Email address, telephone numbers, and billing address.

• Project Data: Commercially sensitive information, financial assumptions, and property details provided for the purpose of technical modelling.

• Technical Data: IP address and browser type (collected via cookies/site analytics).
   

3. How We Collect Your Data

We use different methods to collect data from and about you:

• Direct Interactions: You may give us your Identity and Contact data by corresponding with us by email or through our website contact channels.

• Manual Entry: We record client information in our internal, offline project management systems (including manual Excel-based ledgers) to manage our technical engagements.
   

4. How We Use Your Personal Data

We only use your data when the law allows us to. Most commonly, we use it to:

• Perform the contract we are about to enter into or have entered into with you (Technical Modelling & Analysis).

• Comply with a legal or regulatory obligation.

• Pursue our legitimate interests (such as responding to enquiries and maintaining professional records).
   

5. Data Security & Storage

We take the security of your data seriously:

• No Website Database: Your personal and project data is not stored on our website’s server.

• Google Workspace: We use Google Workspace for our corporate environment. Your data is stored within this secure, encrypted cloud infrastructure.

• Manual Ledgers: Our client databases are maintained manually in Excel format within our secure Google Drive environment, protected by Multi-Factor Authentication (MFA).

• Confidentiality: We treat all financial and project data as strictly confidential. We do not provide investment advice or share your project data with third-party lenders without your explicit instruction.
   

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. By law, we must keep basic information about our clients for six years after they cease being clients for tax purposes.
 

7. Your Legal Rights

Under the UK GDPR, you have the right to:

• Request access to your personal data.

• Request correction of the data we hold.

• Request erasure of your personal data (where legal obligations do not prevent us from doing so).

• Object to processing or request restriction of processing.
   

8. Third-Party Links

This website may include links to third-party websites. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
 

9. Cookies

Our website uses essential cookies to ensure functionality and analytical cookies to understand site traffic. You can set your browser to refuse all or some browser cookies, but this may affect how the website functions.