Privacy Policy

Effective date: October 2026
Controller: Meroi Security, Pastoor van Arslaan 6A, 5622 CK Eindhoven, The Netherlands
Email: [email protected] KvK: 77783077

1. Purpose and Scope

This Policy explains how Meroi Security (“Meroi Security”, “we”, “us”) collects, uses, and protects personal data obtained through our website www.meroisecurity.com, including our contact form.
We process your information in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable privacy laws.

2. Legal Bases for Processing (Art. 6 GDPR)

You may withdraw consent at any time without affecting prior lawful processing.

3. Categories of Data We Process

• Name and surname

• Company name

• Email address and (optional) phone

• Country and business location

• The content of any message you send us through the contact form or by email

• Technical data (IP address, browser type, device, usage logs)

• Cookie and tracking data (see Section 7)

We do not intentionally collect special-category data (Art. 9 GDPR) or data from children under 16.

4. Data Retention (Art. 5 (1)(e))

• Contact form messages and related correspondence are retained only as long as needed to respond to your request and for a reasonable follow-up period.

• A copy of each contact form submission is also stored on our own web server for 90 days, after which it is deleted automatically. This copy exists so that an enquiry cannot be lost if email delivery fails, and it is accessible only to us over an authenticated connection.

• Analytics data is retained for no longer than 14 months, in line with our Google Analytics configuration.

• Statutory or contractual retention periods override these limits where required by law.

5. Recipients and International Transfers (Arts. 28–46)

All processors listed above except Ahrefs act under written Data-Processing Agreements and provide adequate safeguards for international transfers (Art. 46).

We never sell or trade your personal data.

6. Data Security (Art. 32)

We apply technical and organisational measures to protect personal data, including encryption (HTTPS/TLS 1.2+), firewall protection, role-based access control, and regular security audits.

7. Cookies and Similar Technologies

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website.
They enable basic functions, usage analysis, and personalisation.

7.2 Cookies We Actually Set

We use two categories only. We do not use marketing, advertising, profiling or cross-site tracking cookies of any kind.

Until you make a choice, no cookie is stored on your device at all. If you decline, Google Analytics receives only anonymous, cookieless signals that let us count page views in aggregate — no identifier is stored on your device and you are not recognised across visits.

The spam protection on our contact form (Cloudflare Turnstile) sets no cookie on this website and does not profile visitors.

We also use Ahrefs Web Analytics to measure how this website is used. It sets no cookie. It is loaded for every visitor and is not controlled by the cookie choice above. According to Ahrefs, it records the page address, the referring page, your browser, operating system and device type (from the user agent), your country and city (derived from your IP address), your language preferences, and page views, link clicks and form submissions. It counts unique visitors with a hash of your IP address and user agent combined with a value that is replaced every 24 hours, and Ahrefs states that it does not store the raw IP address. The script also sends page titles, screen dimensions and pixel ratio, clicked link destinations and form-action URLs. Page and link addresses can include query parameters. Ahrefs states that it uses aggregated data for studies and service improvement. See Ahrefs’ description of its analytics processing. Our legal basis for this processing is our legitimate interest in understanding how this website is used (Art. 6 (1)(f)).

We have also connected Ahrefs to our Cloudflare account for its Bot Analytics service, which shows us which search engines and AI crawlers visit this website. A Cloudflare Worker sends Ahrefs details of requests to this website, which can include your IP address and user agent. This also runs for every visitor and relies on the same legal basis.

7.3 Cookie Consent and Control

On your first visit you choose whether to allow analytics cookies. Declining is one click, exactly like accepting.
You may change or withdraw your choice at any time from the cookie preferences link in the site footer, or through your browser settings.
Withdrawing consent deletes the analytics cookies immediately. Declining does not limit any part of this website.

7.4 Retention of Cookie Data

Analytics cookies expire after 13 months; your consent record expires after 6 months (Art. 5 (1)(e)).

8. Your Rights (Arts. 12–23 GDPR)

You have the right to:

• Access your personal data (Art. 15)

• Rectify inaccuracies (Art. 16)

• Request erasure (Art. 17)

• Restrict processing (Art. 18)

• Object to processing (Art. 21)

• Port your data to another controller (Art. 20)

• Withdraw consent at any time (Art. 7 (3))

To exercise your rights, email [email protected].
We respond within one month.
You may also lodge a complaint with your national supervisory authority or the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Children Under 16

Our services are not intended for minors under 16. If you believe we have collected data from a child without consent, please contact us immediately.

10. Changes to This Policy

We may update this Policy to reflect legal or technical developments.
The latest version is always available at www.meroisecurity.com.
Significant changes will be announced on the website.

11. Contact for Privacy Matters

Meroi Security
Pastoor van Arslaan 6A, 5622 CK Eindhoven, The Netherlands
Phone: +886 979-192-891
Email: [email protected]