MEIKAIIntroduction
This Privacy Policy describes how MEIKAI LTD ("Meikai", "we", "our", or "us") collects, uses, stores, and protects personal data when you access or use the Meikai website and software platform (together, the "Service").
Meikai processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the UK GDPR where applicable, and other European data protection laws.
Use of the platform is also governed by our Terms of Service. Enterprise customers may execute a separate Data Processing Addendum for Customer Personal Data processed on their behalf.
1.Data Controller
MEIKAI LTD · Company number: 16607357 · Registered office: 51h Wickham Road, London, England, SE4 1LT
Privacy and data-protection enquiries, including requests to exercise your rights, should be sent to legal@meikai.ai.
Where Article 27 of the GDPR requires us to designate a representative in the European Union, current contact details are available on request.
2.Scope of This Policy
This Policy applies to visitors of https://www.meikai.ai, users of the Meikai platform, and representatives or authorised users of customer companies.
When Meikai processes personal data on behalf of enterprise customers (including tracking pixel events and CDN log analytics for customer websites), Meikai acts as a processor. That processing is governed by the applicable customer agreement and Data Processing Addendum (DPA), not this Policy.
The Service is not directed at children under 16, and we do not knowingly collect personal data from children.
3.Personal Data We Collect
3.1 Data Provided Directly
- Communications sent to Meikai
- Account credentials
- Company name and role
- Professional email address
- Name and surname
3.2 Data Collected Through Use of the Service
- Configuration settings and preferences
- Usage data and feature interactions
- Login and access logs
3.3 Technical and Device Data
- Date and time of access
- Operating system
- Browser and device information
- IP address
3.4 Analytics Data (Google Analytics)
We use Google Analytics (GA4) to analyse website usage. Collected data may include anonymised IP address, pages visited, navigation paths, device and browser data, approximate location, and timestamps. Google Analytics cookies are placed only after your explicit consent. See our Cookie Policy for details.
4.Purposes and Legal Bases of Processing
| Purpose | Legal Basis |
|---|---|
| Website analytics (Google Analytics) | Consent (Article 6(1)(a) GDPR) |
| Account creation and management | Contract performance |
| Service delivery | Contract performance |
| Customer support | Legitimate interest |
| Security and fraud prevention | Legitimate interest |
| Legal obligations | Legal obligation |
5.AI Processing
The Service uses automated analysis and AI-based systems to generate insights. No automated decision-making producing legal or similarly significant effects is performed solely on the basis of such processing.
6.Data Recipients and Subprocessors
Personal data may be accessed by authorised Meikai personnel and trusted service providers acting on our instructions, including cloud infrastructure providers (such as Google Cloud Platform) and, where you have consented, Google LLC for analytics.
Customer Personal Data in the Meikai platform is primarily hosted in the European Union (Google Cloud). See our Subprocessors notice for locations and transfer safeguards.
A current list is published on our Subprocessors page. Enterprise customers receive the full DPA Annex III and may object to changes as described in the DPA.
7.International Data Transfers
Some data may be transferred outside the EEA or UK, notably to the United States via Google Analytics. Platform hosting is primarily in the EU; any transfers outside the EEA or UK are governed by appropriate safeguards, including Standard Contractual Clauses, the UK Addendum, the IDTA, and, where applicable, adequacy frameworks.
8.Data Retention
We retain personal data only for as long as necessary for the purposes described in this Policy, our contractual commitments, and applicable law. Typical retention periods are set out below.
| Category | Retention period |
|---|---|
| Account and profile data (platform users) | Duration of the active subscription or contract; deleted or returned within 30 days of a valid erasure request after termination, unless longer retention is required by law |
| Support and sales communications | Up to 3 years from the last relevant interaction, or longer if required for legal claims or obligations |
| Platform usage, configuration, and access logs | Duration of the active subscription or contract, plus a limited period for security monitoring and backup rotation where applicable |
| Website analytics (Google Analytics 4) | Up to 14 months in GA4; analytics cookies up to 13 months. See Cookie Policy |
| Website cookies (non-analytics) | Session cookies: deleted when you close your browser. See Cookie Policy |
| Tracking pixel events (customer website visitors) | Processed on behalf of the Customer under the DPA; retention per the applicable agreement |
| Raw CDN logs (including visitor IP) | 30 days in production storage, then automatic deletion; human visitor IPs are not loaded into analytics tables |
| Curated bot / crawler analytics | Duration of the customer agreement, as set out in the DPA |
9.Data Security
Meikai implements appropriate technical and organisational measures to protect personal data.
Further detail is published on our Security overview page.
If we become aware of a personal data breach affecting personal data for which Meikai is Controller, we will notify the relevant supervisory authority and affected individuals where required by applicable law.
10.Your Rights
You have the right to access, rectify, erase, restrict, object to processing, and request data portability where applicable.
You may withdraw consent to analytics cookies at any time via cookie settings on the Website.
To exercise your rights, contact us using the privacy contact in section 1 with sufficient detail to identify your request. We respond within one month of receipt, extendable by up to two further months where requests are complex, as permitted under GDPR Article 12(3). We may request reasonable information to verify your identity.
11.Complaints
You may lodge a complaint with a competent supervisory authority. UK residents may contact the ICO; EU residents may contact their local authority (including the CNIL in France where applicable).
12.Cookies
Cookies and similar technologies on the Website are described in our Cookie Policy.
13.Changes
This Policy may be updated from time to time. The "Last updated" date reflects the current version. We encourage you to review this page periodically.
14.Contact
Privacy and data-protection enquiries, including requests to exercise your rights, should be sent to legal@meikai.ai. Company: MEIKAI LTD.
Related documents
- Legal centre: all policies and enterprise information
- Standard Terms: customer agreement terms
- Terms of Service: public platform terms
- Cookie Policy: cookies on the website
- Subprocessors: service providers
- Security overview: technical and organisational measures