Privacy Policy

1. Introduction

Meridian Strategy Partners LLC (Meridian, we, us, or our) is an independent business advisory and compliance consulting firm based in California, United States.

We respect the privacy of individuals who visit our website at https://advisorymeridian.com (the Website) or communicate with us through its contact features.

This Privacy Policy explains what personal information we collect, how we use and disclose it, how long we retain it, and how individuals may contact us regarding their information.

This Policy applies to information collected through the Website and related website inquiries. It does not automatically govern separate client engagements, which may be subject to additional contractual confidentiality and data protection provisions.

2. Information We Collect

2.1 Information You Provide

When you contact us through our Website, we may collect:

• Name
• Company or organization
• Email address
• Telephone number, if provided
• Inquiry type
• Preferred website language
• Information contained in your message
• Other information you voluntarily provide

We ask visitors not to submit sensitive personal information, confidential legal documents, privileged communications, financial account credentials, or other highly sensitive materials through the general contact form.

2.2 Information Collected Automatically

When you access the Website, our hosting and infrastructure providers may process technical information necessary to deliver the Website and maintain its operation and security.

Depending on the technologies deployed, this information may include IP addresses, browser information, device characteristics, access times, requested pages, and technical error information.

The Website is hosted on the Lovable platform, which delivers the Website through Cloudflare network infrastructure. The hosting platform provides us with aggregate website analytics reporting pages visited, referring websites, device type, approximate country, visit duration, and bounce rate. These reports are made available to us in aggregated form and do not identify individual visitors to us by name, email address, or IP address.

Our hosting and infrastructure providers may also process and log IP addresses and related technical information at the infrastructure level for purposes such as content delivery, security, and abuse prevention. Such processing and any related log retention are governed by those providers' own practices, and we do not control or have routine access to these logs.

When the contact form is submitted, the IP address of the submitting device is used temporarily to limit repeated submissions and prevent abuse. We do not store it in a website database. This temporary use is separate from any infrastructure-level processing described above.

We do not treat the mere use of the Website as permission to collect information beyond the purposes described in this Policy.

3. How We Use Personal Information

We use personal information for legitimate website operations and business communication, including:

• Responding to inquiries and requests for information.
• Evaluating prospective business consulting engagements.
• Communicating with prospective or existing business contacts.
• Maintaining the security, integrity, and functionality of the Website.
• Preventing spam, abuse, unauthorized access, and fraudulent submissions.
• Maintaining appropriate business and correspondence records.
• Complying with applicable laws and lawful governmental requests.
• Protecting our legal rights and legitimate business interests.

Submitting an inquiry does not automatically establish a consulting, advisory, attorney-client, or other professional relationship with Meridian.

We do not use information submitted through the general contact form to make automated decisions producing legal or similarly significant effects concerning individuals.

4. Cookies and Website Analytics

The Website may rely on technical infrastructure that uses cookies or similar technologies necessary for essential functions, security, or website operation.

The Website's own code does not set cookies and does not include advertising trackers or third-party analytics or tracking scripts. Our infrastructure provider, Cloudflare, sets a cookie named __cf_bm, which is used to help distinguish human visitors from automated traffic. According to Cloudflare's documentation, it expires after approximately 30 minutes of continuous inactivity, and it is not accessible to website scripts.

The Website stores your selected display language (English, Simplified Chinese, or Spanish) in your browser's local storage so that the preference is remembered. This value remains on your device and is not transmitted to us.

The hosting platform provides aggregate website analytics as described in Section 2.2.

If we enable additional analytics or tracking technologies, this Policy will be updated to describe the relevant technologies, purposes, and categories of information processed.

5. Third-Party Service Providers

We use third-party technology providers to operate the Website and communicate with visitors.

These may include providers of:

• Website hosting and infrastructure.
• Contact form processing.
• Transactional email delivery.
• Business email hosting.
• Website security and abuse prevention.

Our contact form uses a verified transactional email sending domain associated with notify.advisorymeridian.com to deliver inquiries to our designated business email system.

Personal information submitted through the contact form may therefore be processed by the relevant website infrastructure, email delivery providers, and business email services for the purpose of transmitting and managing inquiries.

These service providers process information according to their respective contractual arrangements and applicable privacy and security obligations.

We do not sell or rent personal information collected through the Website.

We do not disclose contact-form information to third parties for their independent direct marketing purposes.

We may disclose personal information when reasonably necessary to comply with applicable law, respond to lawful legal process, protect rights or safety, or facilitate a legitimate business transaction, subject to applicable legal requirements.

6. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy.

Inquiry correspondence may be retained to evaluate prospective engagements, maintain business records, respond to follow-up communications, resolve disputes, and comply with applicable legal or recordkeeping obligations.

Inquiry messages submitted through the contact form are delivered by email and may remain in our business email system, and in the systems of the relevant email delivery and email hosting providers, in accordance with their respective retention practices.

Retention periods may vary according to the nature of the information, the purpose of processing, and applicable legal requirements.

When information is no longer reasonably required, we take appropriate steps to delete, anonymize, or otherwise securely dispose of it.

Individuals may request deletion of their information as described below. Certain information may need to be retained where permitted or required by law.

7. Information Security

We take reasonable administrative, technical, and organizational measures appropriate to the nature of the information processed and the size and operations of our business.

We also rely on third-party infrastructure and email service providers for certain technical security functions.

However, no method of internet transmission or electronic storage can be guaranteed to be completely secure.

Visitors should avoid submitting highly sensitive or confidential information through the general inquiry form.

8. Privacy Requests and Choices

Individuals may contact us to request information about personal data they have submitted through the Website.

Subject to applicable law, individuals may request that we:

• Confirm whether we retain information associated with their inquiry.
• Provide access to information reasonably identifiable as relating to them.
• Correct inaccurate information.
• Delete information that is no longer required.
• Address questions or concerns regarding our privacy practices.

Requests may be submitted to:

We may request reasonable verification of identity or authority before disclosing or modifying personal information.

We will review and respond to requests within applicable legal requirements and reasonable operational timeframes.

Some requests may be limited by legal obligations, recordkeeping requirements, the rights of others, or other applicable exceptions.

9. California Privacy Disclosures

Meridian is based in California and seeks to provide transparency regarding personal information collected through its Website.

This Policy is intended to address applicable online privacy disclosure requirements, including the California Online Privacy Protection Act (CalOPPA).

California law may provide additional rights depending on the nature of the business, the information processed, and the applicable statutory requirements.

Nothing in this Policy limits privacy rights that individuals may have under applicable law.

Online Tracking and Do Not Track

The Website does not currently respond differently to browser Do Not Track (DNT) or Global Privacy Control (GPC) signals.

This statement describes the Website's current technical behavior only. It is not a statement regarding whether any particular California privacy law, including the California Consumer Privacy Act, applies to Meridian.

The Website does not use advertising or cross-site tracking technologies, and its code does not include third-party scripts that collect information about visitors' activities across other websites over time. Aggregate analytics provided by our hosting platform are described in Section 2.2.

10. International Visitors

The Website may be accessed by individuals located outside the United States.

Information submitted through the Website may be processed and stored in the United States or other jurisdictions where our service providers operate.

Privacy and data protection laws may differ among jurisdictions.

Where additional requirements apply to particular information processing activities or individuals, we will address those requirements as applicable.

11. Children's Privacy

The Website is intended for business and professional audiences and is not directed to children under the age of 13.

We do not knowingly solicit personal information from children under 13 through the Website.

If we become aware that such information has been collected, we will take appropriate steps to address it in accordance with applicable law.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our operations, website functionality, service providers, or applicable legal requirements.

Revisions to this Privacy Policy take effect when the updated Policy is posted on the Website.

Material changes will be communicated through an appropriate notice on the Website or another method where required by law.

We encourage visitors to review this Policy periodically.

13. Contact Information

For questions or requests relating to this Privacy Policy, contact: