Legal
Privacy Policy
This Privacy Policy explains how Meridian Aurum Capital Ltd. ("Meridian Aurum," "we," "us") collects, uses, and protects personal data when you use this website or hold an account with us. This build targets users in the US and UK; data protection law differs between them, and the TODOs below mark where that matters most.
1. What we collect
- Account data: name, email, and identity-verification (KYC) information you provide when opening an account.
- Transaction data: orders, holdings, and payment information related to your account.
- Contact form data: whatever you submit via the Contact form: name, email, topic, and message.
- Technical data: standard web server logs (IP address, browser type, pages visited). This site does not load third-party analytics or advertising scripts by default; see our Cookie Policy.
2. Why we collect it
- To open and operate your account, including required identity verification and anti-money-laundering (AML) checks
- To process orders, storage, and delivery
- To respond to enquiries submitted through the Contact form
- To meet legal and regulatory obligations
- To maintain the security and integrity of the site
3. Third parties
We may share data with service providers who help operate the business, for example, identity-verification providers, payment processors, and vault/insurance partners, bound by their own confidentiality and data-protection obligations. TODO: verify — list the real named third-party processors and, where required (e.g. under UK GDPR), the legal basis for each transfer, before launch. We do not sell personal data.
4. International data transfers
Because this build serves both the US and UK, personal data may be transferred between jurisdictions with different data-protection standards. TODO: verify — for UK-to-non-UK transfers specifically, confirm the correct transfer mechanism (e.g. UK International Data Transfer Agreement or adequacy decision) with legal counsel before launch.
5. Data retention
We retain account and transaction data for as long as needed to provide the service and meet legal, tax, and AML record-keeping obligations, which can require retention for a number of years after an account closes. TODO: verify — confirm exact retention periods per data category and jurisdiction before launch.
6. Your rights
Depending on where you live, you may have rights to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion, subject to our legal retention obligations
- Object to or restrict certain processing
- Data portability
UK users have these rights under UK GDPR; US users' rights depend on their state of residence and applicable state privacy law. TODO: verify — confirm which specific US state privacy laws apply based on where users are actually located, and add any required state-specific disclosures (e.g. a "Do Not Sell or Share My Personal Information" mechanism, if applicable) before launch.
7. Security
We use reasonable technical and organizational measures to protect personal data. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored by us.
8. Children's privacy
This service is not directed at, and is not intended for use by, anyone under 18.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified through the site or by email before they take effect.
10. Contact
To exercise a privacy right or ask a question about this policy, contact meridianaurum@gmail.com or use our Contact page. TODO: verify — if operating in the UK, confirm whether a Data Protection Officer must be named here, and add contact details for the relevant supervisory authority (ICO in the UK) for complaints.