Meko Back to site ↗
Legal · Privacy

Privacy Policy

Last updated 7 July 2026 · UK GDPR & Data Protection Act 2018

This policy explains what personal information Meko collects when you use this website, book a call or work with the studio, why it's collected, who it's shared with, and the rights you have over it.

01 Who we are

Meko is an independent web design and development studio operated by Kya Meko Mobasheri, a sole trader trading as “Meko Design” (“Meko”, “we”, “us”, “our”).

For the purposes of UK data protection law, we are the data controller for the personal information described in this policy. Our details are:

  • Trading name: Meko Design
  • Proprietor: Kya Meko Mobasheri
  • Correspondence address: Flat 12 Noblefield Heights, Great North Road, London, N2 0NX
  • Email: hello@meko.design
  • Phone: 07824 995453
⚠ Action needed before publishing: delete this box. You told me you are not yet registered with the ICO. As a sole trader who processes clients' and enquirers' personal data on computers, you are normally legally required to register with the Information Commissioner's Office and pay the annual data-protection fee (around £40/year). Register at ico.org.uk/registration, then add a line here: “ICO registration number: [your number]”. Until you register, leaving the ICO number out (as it is now) is correct.

02 What information we collect

We only collect what we need to respond to you and run the studio. Depending on how you interact with us, this may include:

CategoryExamplesWhere it comes from
Enquiry detailsYour name, email address, company or website, and the notes you write about your project in our booking formYou, via the form on this site
Booking detailsInformation you provide when scheduling a discovery call (name, email, time zone, any answers you give)You, via our scheduling provider (Cal.com)
Client account & portal dataLogin credentials for the client portal, project files, previews, and the comments/feedback you leaveYou and us, while we work together
CorrespondenceEmails and messages you send us, and our repliesYou and us
Contractual & billing dataDetails needed to provide services and raise invoices, and a record of paymentsYou and us
Technical dataIP address, browser/device type and basic request logs generated automatically when you visit (held by our hosting and security providers)Automatically
Usage dataPages viewed, how you move through the site and our enquiry form, and a random analytics identifier (never your name or contact details)Automatically, via our analytics provider (PostHog, EU-hosted)

We do not intentionally collect any “special category” data (such as health, ethnicity or political opinions). Please don't include sensitive information in your enquiry notes.

03 How and why we use your information

We use your personal information to:

  • respond to your enquiry and arrange a discovery call;
  • prepare proposals and quotes, and provide the design and development services you engage us for;
  • operate the client portal so you can view previews and leave feedback;
  • manage our relationship, including project updates and support;
  • send service-related emails (for example, when a new preview or a reply to your comment is available);
  • raise invoices, take payment and keep proper financial records;
  • keep the website and portal secure and working; and
  • comply with our legal and regulatory obligations.

We do not sell your personal data, and we do not send marketing emails unless you have asked us to or are an existing client and we think a related service may be relevant (you can opt out at any time).

05 Who we share your information with

We keep your data confidential and only share it with trusted third parties who help us run the studio (our “processors”), each bound by their own data-protection terms. These currently include:

ProviderWhat they do
Vercel Inc.Hosts this website and the client portal
Google / FirebaseDatabase, file storage and authentication for the CRM and client portal
ResendSends transactional emails (e.g. new-preview and comment notifications)
Cal.comHandles discovery-call scheduling
PostHog (EU)Privacy-focused analytics: how the site and enquiry form are used, processed on EU servers
Email & productivity toolsThe email provider behind hello@meko.design and any tools used to manage projects and accounts

We may also share data with our accountant or professional advisers, and with authorities or other parties where we are legally required to, or to establish, exercise or defend legal claims. If the business is ever transferred, data may pass to the new owner under the same protections.

06 International transfers

Some of our providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data protection law (such as UK ‘adequacy’ regulations or the International Data Transfer Agreement / EU Standard Contractual Clauses with the UK Addendum) so that your data continues to receive an equivalent level of protection.

07 How long we keep it

We keep personal data only for as long as we need it:

  • Enquiries that don't become projects: typically up to 12 months, then deleted, unless you ask us to delete sooner.
  • Client & project data: for the duration of our work and a reasonable period afterwards for support and reference.
  • Financial records: at least 6 years, as required by UK tax law.

When we no longer need your data we securely delete or anonymise it.

08 How we protect your information

We take reasonable technical and organisational measures to keep your data safe, including encrypted connections (HTTPS), access controls and password-protected client accounts, and working only with reputable providers. No online service can be guaranteed 100% secure, but we act quickly if something goes wrong and will notify you and the ICO where the law requires.

09 Your rights

Under UK data protection law you have the right to:

  • be informed about how we use your data (this policy);
  • request a copy of the data we hold about you (access);
  • have inaccurate data corrected (rectification);
  • ask us to delete your data (erasure), where applicable;
  • restrict or object to certain processing;
  • data portability, where applicable; and
  • withdraw consent at any time where we rely on it.

To exercise any of these, email hello@meko.design. We'll respond within one month and won't charge a fee in most cases.

10 Cookies

This website uses essential cookies plus one first-party analytics cookie set by PostHog, our EU-hosted analytics provider. The client portal uses a strictly necessary cookie to keep you signed in. Full details are in our Cookie Policy.

11 Children

This website and our services are intended for businesses and adults. We don't knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we'll delete it.

12 Changes to this policy

We may update this policy from time to time. The current version, with its “last updated” date, always lives on this page. Material changes will be highlighted here.

13 Contact & complaints

For any privacy question or request, contact us at hello@meko.design, by phone on 07824 995453, or by post at Flat 12 Noblefield Heights, Great North Road, London, N2 0NX.

If you're unhappy with how we've handled your data you can complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first.