Legal

Privacy Policy

Meridian Capital Holdings Limited. Last updated: 1 October 2026

Meridian Capital Holdings Limited, trading as Meridian International ("Meridian," "we," "us"), is the data controller for personal data collected through meridianinternational.io and in the course of providing sourcing and procurement services.

---

1. Data We Collect

• Contact and enquiry data: name, email, company, country, and message content submitted via contact/enquiry forms.
• Client account data: name, contact details, company information, and transaction records held in our operations platform.
• Correspondence: email communications sent to or received from admin@meridianinternational.io and related addresses.
• Supplier data: business contact details of suppliers engaged on Client's behalf.
• Invoicing data: billing details processed through our accounting system.

2. How We Use Data

We process personal data to: respond to enquiries; provide trade compliance assessment services under an engagement; prepare documentation; issue invoices; and comply with legal obligations. We do not sell personal data.

3. Legal Basis for Processing (where GDPR applies)

Where you are located in the European Economic Area or United Kingdom, we process your data on the basis of: performance of a contract (or steps taken at your request prior to entering one), our legitimate interests in operating and marketing our services, and compliance with legal obligations.

4. Service Providers

We use the following third-party service providers, which may process personal data on our behalf: Supabase (database and authentication), Netlify (hosting), Resend (transactional email), Zoho Mail (email hosting), Zoho Books (accounting), Statrys (banking, for payment processing purposes only), and Anthropic (AI-assisted processing of certain internal workflows). Each provider processes data under its own data processing terms; we take reasonable steps to ensure appropriate safeguards are in place.

5. International Data Transfers

Meridian is based in Hong Kong. Hong Kong does not currently hold an adequacy decision from the European Commission. Where we process personal data originating in the EEA or UK, we rely on Standard Contractual Clauses or equivalent safeguards with our service providers where required.

6. Data Retention

We retain personal data for as long as necessary to provide services, comply with legal/accounting obligations (including Hong Kong recordkeeping requirements), and resolve disputes, after which it is deleted or anonymised.

7. Your Rights

Subject to applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, and (where GDPR applies) to data portability and to object to processing. To exercise these rights, contact admin@meridianinternational.io.

8. Security

We use reasonable technical and organisational measures to protect personal data, including access controls and encrypted storage via our service providers.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by an updated "Last updated" date.

10. Contact

Meridian Capital Holdings Limited
9/F Amtel Building, 148 Des Voeux Road Central, Central, Hong Kong
admin@meridianinternational.io

---