Privacy Policy

Meridian Supply is operated by 上海葭莩化妆品有限公司, a company registered in China, with a remote team working in the UK. The operating company is responsible for the personal information described in this policy (the data controller). Its registered address is awaiting confirmation.

For privacy questions or requests, contact us through our website contact form or WhatsApp on +44 7561 753126.

• Information you submit through our contact form: your name, work email address, company and message.
• Information you provide in emails, calls or other correspondence, including relevant business requirements and contact details.
• Technical information processed when the website is delivered or secured, which may include IP address, browser information and request or error logs.

Please do not include sensitive personal information or information about other people unless it is necessary and you are entitled to share it.

• To respond to enquiries and arrange conversations: our legitimate interest in communicating with prospective business clients, or taking steps at your request before entering a contract where applicable.
• To manage client relationships and deliver agreed services: performance of a contract where you are a party, or our legitimate interests where you represent a business client.
• To maintain website security and resolve technical issues: our legitimate interest in operating a reliable, secure website.
• To comply with applicable legal, accounting and regulatory obligations: compliance with a legal obligation.

Submitting an enquiry is not consent to receive unrelated marketing. Where consent is required for marketing or optional tracking, it must be obtained separately and can be withdrawn.

Enquiries are stored using Lovable Cloud. Website hosting, storage and communication providers may process information on our behalf. Access should be limited to people and providers who need it to respond to enquiries, deliver services or operate the website.

Information may also be disclosed to professional advisers or authorities where necessary to meet legal obligations or establish, exercise or defend legal claims. We do not sell your personal information.

As the operating company is registered in China and the team works remotely in the UK, enquiry handling may involve access from both countries. Access is limited to the people and providers who need it, and appropriate safeguards are put in place where the law requires them.

Where information is transferred outside the UK, we take steps to meet applicable UK data protection requirements, which may include approved contractual protections. Contact us if you would like more information about the safeguards relevant to your data.

Information should be kept only for as long as reasonably necessary for the purpose for which it was collected, including responding to enquiries, managing client relationships and meeting legal requirements. Relevant factors include whether an enquiry is ongoing, whether you become a client and applicable record-keeping or limitation periods.

The business must confirm its retention periods and deletion procedures. You may contact us to ask about retention of your information or to request deletion, subject to applicable exceptions.

The private administration area uses a session cookie to keep authorised administrators signed in. This is separate from submitting a public enquiry.

The website loads fonts from Google Fonts; your browser connects to Google to retrieve them, which may disclose your IP address and request information. Our WhatsApp link opens WhatsApp only when you choose to follow it; no WhatsApp chat widget is embedded. WhatsApp processes information under its own privacy policy when you use that service.

We use first-party cookieless analytics to measure page visits, contact-button clicks and progress through the enquiry form. A daily-changing identifier is derived on the server from request information; it is not stored on your device. Analytics records do not contain the name, email address or message you enter in the form.

Hosting services may use necessary technologies for delivery and security. Any non-essential analytics or advertising technologies require a separate assessment and, where required by law, your consent before use. This policy does not itself provide that consent.

Under UK data protection law, depending on the circumstances, you may request access to your information, correction, erasure, restriction of processing or transfer of information. You may also object to processing based on legitimate interests and withdraw consent where processing relies on it. These rights are subject to legal conditions and exceptions.

Use our contact form or WhatsApp on +44 7561 753126 to make a request. We may need to verify your identity. Where UK data protection law applies, requests should normally be answered within one month; extensions are permitted in certain circumstances.

You can complain to the UK Information Commissioner’s Office at ico.org.uk. You do not need to contact us first, although we welcome the opportunity to address your concerns.

Appropriate technical and organisational measures should protect personal information. No internet transmission or storage system can be guaranteed completely secure.

This policy may be updated as our services or legal requirements change. The date above identifies the latest revision.