Privacy Policy — Meridian Bank

This Privacy Policy explains how Meridian Bank (“Bank”, “we”, “us”) collects, uses, stores, shares, and protects personal data in connection with our websites, digital banking platform, support channels, and related services (the “Services”). We process personal data in accordance with applicable data protection laws, including principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and confidentiality.

1. Who we are

Meridian Bank is the controller of personal data processed for account administration, service delivery, security, and compliance, except where we act as a processor on documented instructions of another controller. For privacy enquiries, contact support@meridianbank.online.

2. Data we collect

2.1 Data you provide

Identity and profile data (name, title, date-related membership information, contact details).
Account credentials and security-related inputs (processed in protected form where applicable).
Correspondence, support tickets, and messages you send to us.
Information submitted through public contact forms.

2.2 Data generated through use of the Services

Account numbers, balances, transaction records, references, statuses, and related ledger metadata.
Login timestamps, session identifiers, device and browser characteristics, IP addresses, and security event logs.
Preferences and settings associated with your profile.
Notifications delivered within the platform.

2.3 Data from other sources

Where permitted by law, we may receive information from identity verification providers, fraud-prevention partners, correspondent institutions, public registers, or regulators, solely for legitimate compliance and risk purposes.

3. Purposes and legal bases

We process personal data for the following purposes:

Contract performance: opening and operating accounts, executing instructions, providing statements, and delivering customer support.
Legitimate interests: securing systems, preventing fraud and abuse, improving service reliability, and defending legal claims — balanced against your rights and expectations.
Legal obligations: record-keeping, responding to lawful requests, sanctions and financial-crime controls, and regulatory reporting where applicable.
Consent: where we rely on consent (for example certain optional communications), you may withdraw it without affecting prior lawful processing.

4. How we use data in practice

Examples of processing include authenticating users; displaying balances and history; processing transfers and adjustments; enforcing account restrictions; sending operational notifications; investigating incidents; and analysing aggregated, non-identifying trends to maintain service quality. We do not sell personal data.

5. Sharing and disclosure

We may share personal data with:

Service providers who support hosting, email delivery, security monitoring, or customer communications, under contractual confidentiality and processing terms.
Payment and banking counterparties strictly as needed to carry out your instructions.
Professional advisers, auditors, and insurers under duty of confidence.
Competent authorities, courts, or regulators when required by law or to protect vital interests and the integrity of the financial system.
Successors in the event of a reorganisation, merger, or transfer of services, subject to appropriate safeguards.

We require processors to process data only on our instructions and to implement appropriate technical and organisational measures.

6. International transfers

Where data is transferred to countries that do not provide an equivalent level of data protection, we implement appropriate safeguards such as contractual clauses approved under applicable law, or rely on other lawful transfer mechanisms. You may request information about relevant safeguards via the contact details above.

7. Retention

We retain personal data only as long as necessary for the purposes described, including contractual, accounting, dispute, and regulatory retention periods. Transaction and identity records may be kept for extended periods where financial-crime or bookkeeping rules require. When retention ends, data is deleted or irreversibly anonymised where feasible.

8. Security measures

We implement administrative, technical, and physical safeguards designed to protect personal data against unauthorised access, alteration, disclosure, or destruction. Measures include access controls, encryption in transit where appropriate, session management, monitoring, and staff confidentiality obligations. No method of transmission or storage is perfectly secure; we continuously improve controls as threats evolve.

You play an important role by protecting credentials, using secure devices, and notifying us of suspected compromise without delay.

9. Cookies and similar technologies

Our websites may use essential cookies required for session integrity, security, and core functionality. Where we use non-essential analytics or preference cookies, we will do so in line with applicable consent rules. You can control cookies through browser settings; disabling essential cookies may impair the Services.

10. Your rights

Subject to applicable law, you may have the right to:

Access personal data we hold about you;
Request rectification of inaccurate data;
Request erasure in certain circumstances;
Restrict or object to certain processing;
Data portability for data you provided where processing is automated and based on contract or consent;
Withdraw consent where processing is consent-based;
Lodge a complaint with a supervisory authority.

Requests can be submitted to support@meridianbank.online. We may need to verify your identity before fulfilling a request. Some rights are limited where we must retain data for legal compliance, security, or establishment of legal claims.

11. Children’s data

The Services are not directed to children. We do not knowingly collect personal data from individuals who are not eligible to hold an account under our acceptance criteria. If you believe we have collected such data in error, contact us so we can take appropriate steps.

12. Automated decision-making

We may use automated tools to detect anomalous login or transaction patterns for fraud and security purposes. Significant decisions with legal or similarly significant effects that rely solely on automated processing will be handled in accordance with applicable law, including any required human review pathways.

13. Marketing communications

Operational messages (security alerts, transaction notices, policy updates) are part of the service relationship. Optional marketing, if offered, will be based on consent or soft opt-in where lawful, with a clear unsubscribe mechanism.

14. Third-party links

Our sites may link to external websites. We are not responsible for their privacy practices. Review their policies before providing personal data.

15. Changes to this policy

We may update this Privacy Policy to reflect legal, technical, or business developments. The effective date at the top will change when updates occur. Material changes will be communicated through the Services or other appropriate channels where required.

16. Contact and complaints

For privacy requests or concerns, email support@meridianbank.online or use authenticated support tickets. If you are unsatisfied with our response, you may contact the data protection authority in your jurisdiction.

17. Additional notices for European clients

Where the GDPR or equivalent frameworks apply, our lawful bases are as described in Section 3. You may exercise the rights listed in Section 10. Representative or DPO contact details, if required by local establishment rules, will be published through official Bank channels when applicable.

18. Summary of key points

We collect data needed to run accounts, secure the platform, and meet legal duties.
We do not sell personal data.
Access is controlled; monitoring supports fraud prevention.
You can request access, correction, and other rights under applicable law.
Contact support@meridianbank.online for privacy matters.