Privacy Policy

Last updated: 28 September 2026

This privacy policy explains how San Meridian (“we”, “us”, “our”) collects, uses and protects your personal information when you visit sanmeridian.com, contact us, or work with us. We are committed to handling your information fairly, lawfully and securely under the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).

1. Who we are

San Meridian is a digital marketing business based in London, United Kingdom. For the purposes of data protection law, we are the data controller of the personal information described in this policy.

If you have any questions about this policy or how we handle your information, contact us at:

• Email: sales@sanmeridian.com
• Phone: +44 7405 962892
• Location: London, United Kingdom

2. The information we collect

Information you give us

• Contact form: your name, email address, phone number and the content of your message.
• Direct contact: any information you share when you email, call or message us on WhatsApp, including your business details.
• Client work: if you become a client, the business and contact information needed to deliver our services, invoice you and keep proper records. This may include access details for accounts such as your website, Google Business Profile or social media, which you choose to share with us.

Information collected automatically

• Technical and security data: when you visit our website, our hosting and content delivery provider automatically records technical information such as your IP address, browser type, device, the pages you request and the date and time. This is used to deliver the website, keep it secure and protect it against abuse such as spam, hacking attempts and denial-of-service attacks.

We do not use analytics, advertising or tracking cookies on this website, and we do not build profiles of visitors.

3. How we use your information and our lawful basis

• To reply to your enquiry and arrange a call: our legitimate interests in responding to people who contact us, and taking steps at your request before entering into a contract.
• To provide our services to clients: performance of our contract with you.
• To keep business, accounting and tax records: compliance with our legal obligations.
• To keep our website and systems secure: our legitimate interests in protecting our website, our business and our visitors.
• To send you marketing emails: only if you have given us your consent, which you can withdraw at any time. We will never add you to a mailing list just because you contacted us.

We do not use your information for automated decision-making or profiling that has legal or similarly significant effects on you.

4. Cookies and similar technologies

This website only uses cookies that are strictly necessary for it to work and stay secure, for example cookies that keep a website administrator logged in. These do not require your consent under PECR.

Google Maps: the map on our contact page is not loaded until you choose to show it. If you click “Show the map”, the map is provided by Google, which may set its own cookies and collect information under Google’s privacy policy.

WhatsApp: if you contact us through a WhatsApp link, your conversation is handled by WhatsApp (Meta) under WhatsApp’s privacy policy.

If we ever add optional cookies, such as analytics, we will ask for your consent first and update this policy.

5. Who we share your information with

We never sell your personal information. We only share it where needed with:

• Our team: some of our developers and contractors work remotely from outside the UK, including Pakistan, and may access client information when it is needed to deliver our services. They are bound by confidentiality obligations.
• Our service providers, who process it on our behalf under contract: our website hosting, content delivery, security and email provider (Hostinger), and the business software we use to communicate with you and run our business.
• Third-party platforms you ask us to work on, such as Google, Meta or your website provider, when we deliver services for you.
• Professional advisers, such as accountants or lawyers, where necessary.
• Authorities, such as HMRC, law enforcement or regulators, where the law requires it.

6. International transfers

Some of our team members and service providers may store, access or process information outside the United Kingdom, including in Pakistan. Where this happens, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum approved by the Information Commissioner’s Office (ICO), and we only give access to the information each person needs for their work.

7. How long we keep your information

• Enquiries that do not lead to work together: up to 12 months after our last contact, then deleted.
• Client records: for the length of our relationship and up to 6 years afterwards, to meet accounting, tax and legal requirements.
• Security logs: kept only as long as needed to protect the website, normally no longer than 90 days.

8. How we protect your information

We use appropriate technical and organisational measures to protect your information, including encrypted HTTPS connections, a content delivery network with protection against malicious traffic, limits on login attempts, regular software updates and restricted access to personal information. No website can be guaranteed to be completely secure, but we work hard to keep your information safe and will act promptly if anything goes wrong.

9. Your rights

Under UK data protection law you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or incomplete;
• ask us to delete your information;
• ask us to restrict how we use your information;
• object to us using your information based on our legitimate interests;
• ask for your information to be transferred to another organisation (data portability);
• withdraw your consent at any time, where we rely on consent.

To use any of these rights, email sales@sanmeridian.com. There is normally no charge, and we will respond within one month.

10. Complaints

If you are unhappy with how we have handled your information, please contact us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK regulator for data protection: ico.org.uk/make-a-complaint or 0303 123 1113.

11. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 13.

12. Changes to this policy

We may update this policy from time to time. The latest version will always be published on this page, with the date it was last updated shown at the top.