Privacy Policy
Effective Date: Sept 2023
I. Introduction
At Meritudio Pte. Ltd. and its subsidiaries (collectively referred to as "Meritudio," “we,” “us,” or “our”), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy outlines how we collect, use, disclose, and safeguard your data when you interact with our website, products, services, and communication tools (collectively, "Meritudio Services"). By using Meritudio Services, you consent to the practices described in this policy.
We understand the importance of transparency and trust in handling your personal data. Whether you are visiting our website, using our services, or communicating with us, we strive to make your experience seamless while respecting your privacy rights. This policy applies to all personal data collected through Meritudio Services, regardless of the platform or device you use.
If you have any questions about this Privacy Policy or our data practices, please contact us using the information provided at the end of this document.
II. Controller of Personal Data
Meritudio Pte. Ltd., located at Singapore, is the primary entity responsible for controlling and processing your personal data. This means we determine the purposes and means of processing your information in accordance with applicable data protection laws, including the General Data Protection Regulation (EU-GDPR) and other relevant regulations.
If you are located in the European Economic Area (EEA), the United Kingdom, or other jurisdictions with specific data protection laws, Meritudio acts as the "data controller" for the personal data you provide to us. This designation reflects our commitment to complying with legal requirements and ensuring your data is handled responsibly.
III. What Personal Data We Collect
Meritudio collects personal data to provide, improve, and personalize our services. The types of data we collect depend on how you interact with us. Below is a detailed breakdown of the information we may gather:
1. Personal Information You Provide
We collect personal data that you voluntarily provide when:
-Filling out forms on our website (e.g., contact forms, registration forms);
-Creating an account to access our services;
-Placing an order or subscribing to a service;
-Applying for a job or internship through our Careers portal;
-Participating in surveys, contests, or promotions; or
-Communicating with us via email, live chat, or other channels.
This information may include:
-Contact Details: Name, email address, phone number, and mailing address.
-Professional Information: Employer name, job title, and industry.
-Account Credentials: Username, password, and security questions.
-Payment Information: Billing address and payment details (if applicable).
-Communications: Content of emails, messages, or feedback you send to us.
-Event Registrations: Information provided when signing up for webinars, workshops, or other events.
2. Automatically Collected Data
When you visit our website or use our services, we may automatically collect certain information through cookies, log files, and other tracking technologies. This data helps us understand how you interact with our platforms and improve your experience. Examples include:
-Device Information: IP address, browser type, operating system, and device identifiers.
-Usage Data: Pages visited, time spent on the site, links clicked, and other interactions.
-Location Data: General geographic location based on your IP address.
-Cookies and Tracking Technologies: Data collected through cookies, web beacons, and similar tools to enhance functionality and analyze trends.
3. Data from Third Parties
We may receive personal data about you from third-party sources, such as:
-Business partners who provide co-branded services or joint promotions;
-Social media platforms if you interact with us through these channels; or
-Publicly available sources, such as professional networking sites.
IV. No Collection of Children's Personal Data
Meritudio does not knowingly collect personal data from individuals under the age of 13. If we become aware that we have inadvertently gathered such data, we will take immediate steps to delete it. If you believe we have collected information from a child, please contact us at legal@meritudio.com.
V. Purpose of Using Your Personal Data
Meritudio uses your personal data for a variety of purposes, all of which are aimed at providing you with a seamless, efficient, and personalized experience. Below, we outline the specific purposes for which we process your information, along with the legal basis for each activity under the EU-GDPR and other applicable laws:
1. To Provide and Manage Services
o Deliver the products, services, or information you request.
o Process transactions, manage subscriptions, and fulfill orders.
o Create and maintain your account for accessing our platforms.
o Legal Basis: Performance of a contract (EU-GDPR Art. 6(1)(b)).
2. To Communicate with You
o Respond to your inquiries, requests, or complaints.
o Send administrative updates, such as changes to our terms or policies.
o Notify you about service-related issues or updates.
o Legal Basis: Performance of a contract, legitimate interest (EU-GDPR Art. 6(1)(b), (f)).
3. To Improve and Personalize Our Services
o Analyze usage patterns to enhance functionality and user experience.
o Develop new features, products, or services based on user feedback.
o Tailor content, recommendations, and offers to your preferences.
o Legal Basis: Legitimate interest (EU-GDPR Art. 6(1)(f)).
4. For Marketing and Promotional Purposes
o Send newsletters, promotional materials, and event invitations.
o Conduct surveys, contests, or other marketing campaigns.
o Display targeted advertisements based on your interests.
o Legal Basis: Consent or legitimate interest (EU-GDPR Art. 6(1)(a), (f)). You may opt out at any time.
5. To Ensure Security and Prevent Misuse
o Monitor for fraudulent activity, unauthorized access, or other security risks.
o Enforce our terms of service and other policies.
o Investigate and resolve disputes or complaints.
o Legal Basis: Legitimate interest, legal obligation (EU-GDPR Art. 6(1)(c), (f)).
6. To Comply with Legal Obligations
o Fulfill regulatory requirements, such as tax or reporting obligations.
o Respond to lawful requests from public authorities, including law enforcement.
o Maintain records for legal or audit purposes.
o Legal Basis: Legal obligation (EU-GDPR Art. 6(1)(c)).
7. For Research and Analysis
o Use aggregated and anonymized data to generate reports and insights.
o Conduct market research to understand trends and user needs.
o Legal Basis: Legitimate interest (EU-GDPR Art. 6(1)(f)).
VI. Ways We Collect and Use Personal Data
Meritudio collects and uses personal data through various channels and for multiple purposes. Below, we provide specific examples of how we gather and process your information:
1. Contact Forms, Email, and Live Chat
o When you submit inquiries or requests through our contact forms, email, or live chat, we collect your name, email address, and the content of your message. This information is used to respond to your queries and provide support.
2. Online Accounts
o To access certain features of our services, you may need to create an account. During registration, we collect your name, email address, and password. This data is used to verify your identity, manage your account, and provide personalized services.
3. Job Applications
o If you apply for a job or internship through our Careers portal, we collect your resume, cover letter, and other relevant information. This data is used to evaluate your application and communicate with you about the hiring process.
4. Cookies and Tracking Technologies
o We use cookies, web beacons, and similar tools to collect data about your browsing behavior. This information helps us improve website functionality, analyze trends, and deliver targeted content. You can manage your cookie preferences through your browser settings.
5. Third-Party Integrations
o We may integrate third-party services, such as Google Analytics or HubSpot, to enhance our platforms. These services collect anonymized data about your interactions with our website, which we use for analytics and marketing purposes.
VII. Retention of Personal Data
Meritudio retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or to comply with legal obligations. The retention period depends on the type of data and the context in which it is collected. Below are some general guidelines:
1. Account Data
o Personal data stored in your account will be retained until you delete your account or request its removal. If your account remains inactive for an extended period, we may deactivate it and delete associated data.
2. Transaction Records
o Data related to purchases, subscriptions, or other transactions will be retained for the duration of the business relationship and for a reasonable period afterward to comply with tax, accounting, or legal requirements.
3. Marketing Data
o If you subscribe to our newsletter or marketing communications, we will retain your contact information until you unsubscribe or request its deletion.
4. Legal and Regulatory Requirements
o In some cases, we may retain personal data for longer periods to comply with legal obligations, resolve disputes, or enforce our agreements.
5. Anonymized Data
o We may retain aggregated or anonymized data indefinitely for research, analysis, or business purposes, as it no longer identifies you personally.
If you would like more information about our data retention practices or wish to request the deletion of your data, please contact us at legal@meritudio.com.
VIII. Confidentiality and Security of Personal Data
At Meritudio, we take the security and confidentiality of your personal data seriously. We have implemented a range of administrative, technical, and physical safeguards to protect your information from unauthorized access, misuse, alteration, or destruction. Below, we outline the measures we have in place to ensure the security of your data:
1. Access Controls
o We limit access to personal data to authorized employees, contractors, and agents who need the information to perform their job functions. All personnel with access to personal data are required to adhere to strict confidentiality agreements.
2. Encryption
o Sensitive data, such as payment information and login credentials, is encrypted during transmission and storage using industry-standard encryption protocols (e.g., SSL/TLS).
3. Monitoring and Auditing
o We regularly monitor our systems for potential vulnerabilities and conduct audits to ensure compliance with our security policies.
4. Incident Response
o In the event of a data breach or security incident, we have established procedures to promptly investigate, mitigate, and notify affected individuals and regulatory authorities, as required by law.
5. Physical Security
o Our facilities are secured with access controls, surveillance systems, and other physical measures to prevent unauthorized entry.
6. Employee Training
o We provide regular training to our employees on data protection best practices and the importance of maintaining the confidentiality of personal data.
While we strive to protect your personal data, no system or method of transmission is completely secure. Therefore, we cannot guarantee absolute security. If you have any concerns about the security of your data, please contact us at legal@meritudio.com.
IX. Transfer of Your Personal Data to Third Parties
Meritudio may share your personal data with third parties in specific circumstances, as outlined below. We ensure that any third party receiving your data adheres to strict confidentiality and data protection standards.
1. Service Providers
o We may share your data with third-party service providers who assist us with operations such as hosting, analytics, payment processing, marketing, and customer support. These providers are contractually obligated to protect your data and use it only for the purposes specified by Meritudio.
2. Business Partners
o In some cases, we may collaborate with business partners to offer co-branded services or joint promotions. If you participate in such initiatives, both Meritudio and the partner may receive and process your data.
3. Legal and Regulatory Authorities
o We may disclose your data if required by law, such as in response to a subpoena, court order, or government request. We may also share information to protect our rights, property, or safety, or to prevent fraud or other illegal activities.
4. Corporate Transactions
o In the event of a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred to the successor entity. If such a transaction occurs, we will notify you and explain your rights regarding your data.
5. Publicly Shared Content
o If you post comments, reviews, or other content on our website or during public events, this information may be visible to other users and may be distributed outside our platform. We are not responsible for the actions of third parties who access or use such content.
X. International Data Transfers
Meritudio operates globally, and your personal data may be transferred to, stored, or processed in countries outside your country of residence, including the United States or other destinations outside the European Economic Area (EEA) or the United Kingdom. These countries may have different data protection laws than your jurisdiction.
When transferring your data internationally, we take steps to ensure it is protected in accordance with applicable laws and this Privacy Policy. These steps include:
1. Adequacy Decisions
o We may transfer data to countries that have been deemed to provide an adequate level of data protection by the European Commission or other relevant authorities.
2. Standard Contractual Clauses (SCCs)
o For transfers to countries without an adequacy decision, we use Standard Contractual Clauses approved by the European Commission to safeguard your data.
3. Binding Corporate Rules (BCRs)
o If applicable, we may rely on Binding Corporate Rules approved by data protection authorities to facilitate international data transfers within our corporate group.
4. Additional Safeguards
o We implement additional technical and organizational measures, such as encryption and access controls, to protect your data during international transfers.
If you would like more information about the safeguards we have in place for international data transfers, please contact us at legal@meritudio.com.
XI. Your Data Protection Rights
Depending on your location and applicable data protection laws (such as the EU-GDPR), you may have certain rights regarding your personal data. Below, we outline the rights you may have and how you can exercise them:
1. Right to Access
o You have the right to request confirmation of whether we process your personal data and, if so, to obtain a copy of that data.
2. Right to Rectification
o If your personal data is inaccurate or incomplete, you may request that we correct or update it.
3. Right to Erasure (Right to Be Forgotten)
o You may request that we delete your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
4. Right to Restriction of Processing
o You may request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data or object to its processing.
5. Right to Data Portability
o You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transfer it to another controller, where technically feasible.
6. Right to Object
o You may object to the processing of your personal data for specific purposes, such as direct marketing or profiling.
7. Right to Withdraw Consent
o If we process your personal data based on your consent, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
8. Right to Object to Automated Decision-Making
o You have the right not to be subject to decisions based solely on automated processing, including profiling, which produce legal effects or similarly significant effects on you.
To exercise any of these rights, please contact us at legal@meritudio.com. We will respond to your request within the timeframes required by applicable law. Please note that we may need to verify your identity before processing your request.
If you are located in the European Economic Area (EEA) or the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with a supervisory authority in your jurisdiction.
XII. Cookies and Tracking Technologies
Meritudio uses cookies and similar tracking technologies to enhance your experience on our website and to analyze how our services are used. Below, we provide detailed information about our use of these technologies:
1. What Are Cookies?
o Cookies are small text files stored on your device when you visit a website. They help us remember your preferences, improve site functionality, and provide personalized content.
2. Types of Cookies We Use
o Essential Cookies: Necessary for the operation of our website, such as enabling you to log in or complete transactions.
o Performance Cookies: Collect information about how you use our website, such as which pages you visit most often, to improve performance.
o Functional Cookies: Remember your preferences and settings to personalize your experience.
o Advertising Cookies: Used to deliver targeted advertisements based on your interests and browsing behavior.
3. Third-Party Cookies
o We may partner with third-party service providers, such as Google Analytics and HubSpot, to use cookies for analytics and marketing purposes. These providers are contractually obligated to protect your data and use it only for the purposes specified by Meritudio.
4. Managing Cookies
o You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, but doing so may affect your ability to use certain features of our website.
o To opt out of interest-based advertising, you can visit the Network Advertising Initiative (NAI) or Digital Advertising Alliance (DAA) websites.
5. Do Not Track Signals
o Our website does not currently respond to "Do Not Track" signals from browsers. However, you can manage your preferences through our cookie consent tool or your browser settings.
XIII. Disclaimer
The information provided in this Privacy Policy is intended to inform you about how Meritudio collects, uses, and protects your personal data. However, it should not be construed as legal, business, or professional advice. While we strive to ensure the accuracy and completeness of the information in this policy, we cannot guarantee that it will be error-free or applicable to every situation.
Additionally, while we implement robust security measures to protect your personal data, no system or method of data transmission is completely secure. Therefore, we cannot guarantee absolute security. By using Meritudio Services, you acknowledge and accept these limitations.
XIV. Additional Information for Specific Regions
Depending on your location, you may have additional rights or protections under local data protection laws. Below, we provide information for specific regions:
1. European Economic Area (EEA) and United Kingdom
o If you are located in the EEA or the UK, you have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated. For more information, please contact your local data protection authority.
2. California Residents
o If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA) or the California Privacy Rights Act (CPRA), such as the right to know what personal data we collect, the right to delete your data, and the right to opt out of the sale of your data. To exercise these rights, please contact us at [Insert Contact Email].
3. Other Jurisdictions
o If you are located in a jurisdiction with specific data protection laws, please contact us for more information about your rights and how we comply with local regulations.
XV. Data Privacy Framework Compliance
Meritudio, Inc. complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. We have certified that we adhere to the DPF Principles regarding the collection, use, and retention of personal data transferred from the European Union, the United Kingdom, and Switzerland to the United States.
XVI. Dispute Resolution
If you have a complaint about our handling of personal data under the Data Privacy Framework, please contact us at legal@meritudio.com. We will investigate and resolve your complaint in accordance with the DPF Principles.
XVII. Changes to This Privacy Policy
Meritudio may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or industry standards. When we make changes, we will revise the "Effective Date" at the top of this page and, if necessary, provide additional notice (e.g., via email or a prominent notice on our website).
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please do not hesitate to contact us. We are here to assist you and ensure your privacy is protected.
You can reach us at: legal@meritudio.com
For data protection inquiries or to exercise your data protection rights, please contact our Data Protection Officer (DPO) at: legal@meritudio.com
We will respond to your inquiries and requests as promptly as possible and in accordance with applicable laws.
