Privacy policy
Who is responsible
MERYDAN SA, Murten, Switzerland
Contact for privacy questions: invest@merydan.com
What we collect and why
Investor access request. First and last name, email, phone, country, investor profile, indicative amount and optional message. Purpose: to review your request and contact you. Basis: your consent.
Club enquiry (Build with MERYDAN). Club, country, division, your name, role, email and message. Purpose: to reply to you. Basis: your consent.
Investor area. For approved investors: email, name, a password stored only as a one-way hash, an authenticator secret, sign-in times and the documents you download. Purpose: secure access to confidential documents and proof of access. Basis: contract or pre-contractual steps and our legitimate interest in security.
Security data. To block abuse we keep short-lived counters based on a pseudonymised form of your IP address (never the IP itself) and a security log. The hosting server may record technical logs (IP address, time, requested page).
Who sees your data
Only authorised MERYDAN staff. We use Infomaniak Network SA (Switzerland) for hosting and email. We do not sell data and we do not use advertising or analytics services.
How long we keep it
Investor requests and club enquiries: as long as needed to handle your request and the resulting relationship, and in any case no longer than 24 months after our last contact unless a legal duty requires more. Investor accounts: until the end of the relationship. Security counters: at most 24 hours.
Your rights
You may ask for access to your data, correction, deletion, restriction, objection and, where applicable, portability, and you may withdraw consent at any time, by writing to invest@merydan.com. You may also complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or to your local authority.
Security
Connections are encrypted (HTTPS). Passwords are hashed, the investor and admin areas require two-step verification, documents are stored outside the public web folder and served only after sign-in.
Changes
We may update this policy. The version on this page applies.