Cette page n’existe qu’en anglais, et la version anglaise fait foi. Écrivez-nous si un point n’est pas clair.
What this covers.
This page describes how Meridian Governance Partners, a venture of NAH Group LLC, a Florida limited liability company, handles information from visitors to this website and from people who make an enquiry through it. NAH Group LLC is the controller of that information.
It does not describe how client information is handled inside an engagement. That is governed by the engagement instruments themselves, which are more restrictive than this page in every respect.
This site is read in many jurisdictions. The commitments below are written to meet the strictest of them, including the General Data Protection Regulation, the United Kingdom's data protection law and the California Consumer Privacy Act, and are extended as further regimes apply.
What is collected.
- When you read the site
- The site loads its typefaces, images and video from its own server and embeds nothing from a social network. The server records an address, a page and a time for security and reliability, and those records are deleted within thirty days. The one third party that runs on the site is described under Analytics below.
- Analytics
- The site uses Google Analytics to count visits and see which pages are read. It is configured so that addresses are anonymised, advertising features are off, no signal is shared with Google's advertising products, and reports are kept for fourteen months. In the European Economic Area, the United Kingdom and Switzerland it sets no cookie and records nothing that identifies a device unless you agree. Everywhere else it sets a first party cookie that lasts up to two years, which you can refuse in your browser or remove at any time.
- When you make an enquiry
- Whatever you choose to send: typically a name, an organisation, an email address, a role and your description of what prompted the enquiry. Nothing is required beyond a way to reply to you. What you send is delivered to the partners by email and is not stored in any database of this site.
- When you place yourself on the curve
- The five answers you give, and, if you ask for the paper, a name and an email address. The answers travel with the request and are not stored on this site. They are used to work out the stage, they are written into the letter sent to you and into the notification a partner receives, and they reach nothing else. The paper itself is the same document for every reader and carries nothing about you. Answering the questions without asking for the paper sends nothing at all, because the stage is worked out in your own browser. Anything that does arrive by email is kept for as long as an enquiry is kept, which is stated below.
- What is never collected here
- No financial information, no account details, no identity documents and no information about the assets an enterprise holds. If a conversation reaches the point where any of that is relevant, it happens under an engagement rather than through a website.
- Children
- This site is addressed to adults acting for enterprises. It is not directed at anyone under eighteen and we do not knowingly collect information from anyone under that age. If we learn that we have, we delete it.
Why it is held, and for how long.
- Why
- To reply to you, and to hold the thread of a conversation you started. Enquiry information is not used for marketing, is not added to any list, is not used to build a profile, and is not sold or shared for anybody else's purposes.
- On what basis
- Where a legal basis must be stated, it is your request that we respond, and our legitimate interest in operating a professional practice and keeping this site secure. For analytics in the jurisdictions that require it, the basis is your consent. Where consent is the basis, nothing runs before it is given and it can be withdrawn at any time.
- For how long
- An enquiry that does not become an engagement is deleted within twelve months, and sooner if you ask. An enquiry that becomes an engagement is governed by the engagement's own retention terms. Server records are kept for thirty days and analytics reports for fourteen months.
- Who sees it
- The partners of this firm. Information is disclosed to nobody else except the service providers named below, who act on our instructions, and where a law or a court requires it, in which case we tell you unless we are forbidden to.
Who handles it on our behalf.
- Hosting
- This site is hosted by Replit, Inc. on infrastructure in the United States. Replit sees the traffic needed to serve pages and nothing you type into a form beyond the moment it is delivered.
- Email delivery
- Enquiries and our acknowledgment of them are delivered by Resend, Inc. in the United States, and our own mail is handled by Google Workspace. Each processes the message in order to deliver it and for no other purpose.
- Analytics
- Google LLC provides Google Analytics on the terms described above. Google acts as our processor for that data and is bound by its data processing terms.
- What binds them
- Each provider is bound by written terms that forbid using what passes through it for any purpose of its own, and each is chosen because it commits to that in writing. We do not use any provider for advertising.
Where information is handled.
The firm is established in the United States and information sent to it is handled there. Where information originates in the European Economic Area, the United Kingdom or Switzerland, the transfer relies on the standard contractual clauses approved for that purpose, with the United Kingdom addendum where it applies. It also relies on the safeguards each provider named above has adopted.
A copy of the clauses we rely on is available on request.
How it is protected.
Everything sent to or from this site travels over an encrypted connection. Enquiries reach the partners' own mailboxes, which are protected by two-step verification, and are read by nobody else.
If information about you were ever lost, taken or exposed in a way that could harm you, we would tell you and the relevant authority without delay, and we would say what happened and what we did about it.
What you can ask for.
You may ask what is held about you, ask for a copy, and ask for it to be corrected or deleted. You may ask for its handling to be restricted, object to its handling, and withdraw any consent you have given. Where a jurisdiction gives you a right beyond these, that right applies here too.
There is no charge for any of it, no form to complete, and no requirement to explain why. Ask, and we do it within thirty days and confirm that it is done. If we cannot, we say which law prevents us. We may ask you to confirm that you are the person the information concerns, and we will not treat you differently for having asked.
If you are in California, you have the rights the California Consumer Privacy Act gives you, including to know, to delete, to correct and to opt out of sale or sharing. We do not sell or share personal information and have not done so in the preceding twelve months.
If you are unsatisfied, you may complain to the supervisory authority in your country. Tell us first if you can, and we will answer.
When this page changes.
Material changes are dated at the top of this page, and the previous position is available on request. This version adds the analytics the site began using in September 2026, names the service providers, and states the response time for requests.
To ask anything about this page, or to exercise any of the rights above, write to privacy@meridiangovernancepartners.com.
Cette page est en vigueur depuis le 9 septembre 2026.