merakiconceptstudio

This Privacy & Cookie Notice explains how Meraki Concept Studio Ltd, trading as Meraki Concept Studio (“we”, “us”, “our”), collects, uses, stores and protects personal data when you visit www.merakiconceptstudio.com, submit an enquiry, book a consultation, or otherwise engage with us.

We comply with the UK General Data Protection Regulation (UK GDPR), the EU GDPR, and the Data Protection Act 2018.

If you have questions, contact us.

1. Who we are (Data Controller)

Data Controller: Jemma Rathore
Company Name: Meraki Concept Studio Ltd

2. What personal data we collect

a) Information you provide directly

We collect only the personal data necessary to respond to enquiries and deliver services. This may include:

• Name

• Email address

• Phone number

• Business name

• Project or enquiry details you choose to share

You are not required to provide information beyond what is necessary to make an enquiry.

We do not knowingly collect special category (sensitive) personal data.

b) Enquiry information

If you book a consultation via Acuity Scheduling, we collect the information required to administer that booking. Acuity acts as a data processor and processes data under its own GDPR-compliant terms.

c) Automatically collected data (website usage)

When you visit our website, limited technical data may be collected automatically, including:

• IP address

• Browser and device type

• Pages visited and interactions

• Approximate location (derived from IP address)

This data does not directly identify you and is used only for analytics, security and website performance.

3. How we use your personal data

We use personal data only for the following purposes:

• To respond to enquiries and communicate with you

• To assess suitability for working together

• To deliver services where a contract exists

• To administer bookings and consultations

• To manage our business relationship

• To improve our website and services using aggregated analytics

a) Marketing and future services

We may contact you about relevant future services only where:

• you are an existing or former client, or

• you have made an enquiry, and

• such contact is permitted under applicable law

You can opt out at any time.

We do not sell personal data, and we do not use automated decision-making or profiling.

4. Lawful bases for processing (UK GDPR Article 6)

We process personal data under the following lawful bases:

• Performance of a contract: responding to enquiries and delivering services

• Legitimate interests: managing client relationships and improving services, where this does not override your rights

• Consent: cookies, analytics, and marketing where required

• Legal obligations: accounting, tax or regulatory compliance

Where consent is relied upon, you may withdraw it at any time.

5. Cookies & tracking technologies

We use cookies (not the chocolate-chip kind) to ensure our website works properly and to understand how it is used.

a) What are cookies?

Cookies are small text files placed on your device when you visit a website. They help websites function correctly and provide usage insights.

b) Types of cookies we use

• Strictly necessary cookies (required for the operation of the website, these cannot be disabled)

• Analytics cookies (we use Google Analytics to understand how visitors use our website; data is collected in aggregated form and used to improve site performance)

Common examples include:

• _ga – distinguishes users (expires up to 2 years)

• _gid – distinguishes users (expires after 24 hours)

• _gat – limits request rates

IP anonymisation is enabled where available.

• Scheduling cookies (when booking via Acuity Scheduling, cookies may be set to enable booking functionality and session management)

c) Managing cookies and consent

You can manage cookies via:

• Our cookie consent banner

• Your browser settings

You may reject non-essential cookies at any time. Essential cookies cannot be disabled.

Disabling cookies may affect certain website features.

7. Third-party processors

We use the following GDPR-compliant service providers:

• Squarespace: website hosting, forms, essential cookies

• Google Analytics: website analytics

• Acuity Scheduling: appointment booking

Each provider processes data under its own privacy policy and data processing agreements.

8. Data retention

We retain personal data only for as long as necessary:

• Enquiry data: up to 24 months

• Client records: as required for contractual, legal, and accounting purposes

• Analytics data: aggregated and anonymised

Data is securely deleted or anonymised when no longer required.

9. Data security

We implement appropriate technical and organisational measures to protect personal data, including access controls and secure systems. No online system is completely secure, but we take reasonable steps to protect your information.

10. Your rights under GDPR

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion

• Restrict or object to processing

• Withdraw consent at any time

• Lodge a complaint with a supervisory authority

Requests can be made by emailing us.

UK residents may complain to the Information Commissioner’s Office (ICO).

11. Children’s data

Our services are not directed at individuals under 18, and we do not knowingly collect their data.

12. Updates to this notice

We may update this Privacy & Cookie Notice to reflect legal or operational changes. The latest version will always be available on this page. This notice was last updated on February 9, 2026.