Privacy Policy | Meridian Advisory Group

Effective date: 1 January 2026

Meridian Advisory Group Ltd ("we", "us", "our") is committed to protecting the privacy of individuals who visit our website and engage with our strategic mentoring and consulting services. This Privacy Policy explains how we collect, use, store, and share your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Meridian Advisory Group Ltd is registered in England and Wales and acts as the data controller for the personal data described in this policy.

1. Data We Collect

We may collect and process the following categories of personal data:

Identity data — full name, job title, and professional role
Contact data — email address, telephone number, postal address, and organisation name
Engagement data — details relating to mentoring sessions, consulting mandates, and correspondence
Technical data — IP address, browser type and version, operating system, time zone, and pages visited on our website
Marketing preferences — your choices regarding communications from us
Financial data — invoicing and payment details where relevant to a service engagement

2. How We Collect Your Data

We collect personal data through the following means:

When you complete a contact or enquiry form on our website
When you correspond with us by email, telephone, or post
When you engage our mentoring or consulting services
When you subscribe to our insights or blog updates
Automatically through cookies and similar technologies when you browse our website (see our Cookie Policy)
From publicly available professional sources such as LinkedIn or Companies House

3. Legal Basis for Processing

We process your personal data on one or more of the following lawful bases under Article 6 of the UK GDPR:

Consent — where you have given clear consent for us to process your data for a specific purpose (e.g. marketing communications)
Contract — where processing is necessary for the performance of a consulting or mentoring engagement
Legitimate interests — where processing is necessary for our legitimate business interests (e.g. improving our services, responding to enquiries) and those interests are not overridden by your rights
Legal obligation — where we are required to process data to comply with a legal obligation

4. How We Use Your Data

We use the personal data we collect for the following purposes:

To respond to enquiries and provide information about our services
To deliver and administer mentoring and consulting engagements
To manage scheduling, invoicing, and contractual obligations
To send relevant insights, articles, or updates where you have opted in
To analyse website usage and improve our digital presence
To comply with legal and regulatory requirements

5. Data Sharing

We do not sell your personal data to third parties. We may share your data in limited circumstances:

Service providers — trusted suppliers who assist with IT infrastructure, email hosting, analytics, and payment processing, each bound by contractual data protection obligations
Professional advisers — our accountants, lawyers, or auditors where necessary
Legal requirements — where disclosure is required by law, regulation, or court order

All third-party recipients are required to process your data in accordance with applicable data protection legislation.

6. International Transfers

Your personal data is primarily stored and processed within the United Kingdom. Where any data is transferred outside the UK, we ensure appropriate safeguards are in place, such as standard contractual clauses approved by the Information Commissioner's Office (ICO), or transfers to countries with an adequate level of data protection.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements. Retention periods vary depending on the nature of the data:

Enquiry and contact data — up to 24 months following last contact
Client engagement records — up to 7 years following the end of an engagement
Marketing consent records — until consent is withdrawn
Website analytics data — up to 26 months

When data is no longer required, it is securely deleted or anonymised.

8. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access — to request a copy of the personal data we hold about you
Right to rectification — to request correction of inaccurate or incomplete data
Right to erasure — to request deletion of your personal data where there is no compelling reason for continued processing
Right to restrict processing — to request that we limit how we use your data
Right to data portability — to receive your data in a structured, commonly used format
Right to object — to object to processing based on legitimate interests or for direct marketing purposes
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, please contact us at enquiries@whisperhavengrid.com. We will respond to your request within one calendar month.

9. Cookies

Our website uses cookies and similar technologies to enhance your browsing experience, analyse traffic, and understand how visitors interact with our site. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction, or alteration. These include encrypted data storage, access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

11. Complaints

If you are dissatisfied with the way we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concerns directly before you contact the ICO. Please reach out to us first at the address below.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact:

Meridian Advisory Group Ltd
Email: enquiries@whisperhavengrid.com

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be published on this page with a revised effective date. We encourage you to review this policy periodically.

This Privacy Policy was last updated on 1 January 2026.