01 Who we are
Meko is an independent web design and development studio operated by Kya Meko Mobasheri, a sole trader trading as “Meko Design” (“Meko”, “we”, “us”, “our”).
For the purposes of UK data protection law, we are the data controller for the personal information described in this policy. Our details are:
- Trading name: Meko Design
- Proprietor: Kya Meko Mobasheri
- Correspondence address: Flat 12 Noblefield Heights, Great North Road, London, N2 0NX
- Email: hello@meko.design
- Phone: 07824 995453
02 What information we collect
We only collect what we need to respond to you and run the studio. Depending on how you interact with us, this may include:
| Category | Examples | Where it comes from |
|---|---|---|
| Enquiry details | Your name, email address, company or website, and the notes you write about your project in our booking form | You, via the form on this site |
| Booking details | Information you provide when scheduling a discovery call (name, email, time zone, any answers you give) | You, via our scheduling provider (Cal.com) |
| Client account & portal data | Login credentials for the client portal, project files, previews, and the comments/feedback you leave | You and us, while we work together |
| Correspondence | Emails and messages you send us, and our replies | You and us |
| Contractual & billing data | Details needed to provide services and raise invoices, and a record of payments | You and us |
| Technical data | IP address, browser/device type and basic request logs generated automatically when you visit (held by our hosting and security providers) | Automatically |
| Usage data | Pages viewed, the buttons and links you click, how you move through the site, the client portal and our enquiry form, where you came from (for example a search engine or an advert), your type of device and browser, a rough town worked out from your IP address (the address itself is never stored), and a random analytics identifier (never your name or contact details). Nothing you type is collected | Automatically, via our own analytics (Meko Analytics, stored on Google Cloud in Europe: EU data centres, with collection handled in London) and PostHog (EU-hosted) |
If you send an enquiry through our booking form, sign in to the client portal, or open a link in an email we sent you, our own analytics links that visit to your enquiry, portal account or email, so we can see which pages you looked at. This link is only ever seen by Meko, never by our clients or anyone else. This happens whether or not you accept analytics cookies, as it uses no cookie.
We do not intentionally collect any “special category” data (such as health, ethnicity or political opinions). Please don't include sensitive information in your enquiry notes.
03 How and why we use your information
We use your personal information to:
- respond to your enquiry and arrange a discovery call;
- prepare proposals and quotes, and provide the design and development services you engage us for;
- operate the client portal so you can view previews and leave feedback;
- manage our relationship, including project updates and support;
- send service-related emails (for example, when a new preview or a reply to your comment is available);
- raise invoices, take payment and keep proper financial records;
- understand how the website and portal are used, and which pages lead to enquiries, so we can improve them;
- keep the website and portal secure and working; and
- comply with our legal and regulatory obligations.
We do not sell your personal data, and we do not send marketing emails unless you have asked us to or are an existing client and we think a related service may be relevant (you can opt out at any time).
04 Our legal bases for using your data
Under UK GDPR we must have a lawful basis for each use of your data. We rely on:
- Contract: to take steps at your request before entering a contract (responding to your enquiry, quoting) and to carry out the work once you become a client.
- Legitimate interests: to run and grow a small studio responsibly, replying to enquiries, keeping records, securing our systems, counting visits without cookies, linking your visits to an enquiry you sent, your portal account or an email we sent you, and improving our service. We balance these interests against your rights.
- Legal obligation: to keep accounting and tax records and to comply with the law.
- Consent: where we ask for it, for example for any optional marketing or non-essential cookies. You can withdraw consent at any time.
06 International transfers
Some of our providers are based outside the UK, including in the United States. Where your data is transferred outside the UK, we rely on an appropriate safeguard recognised under UK data protection law (such as UK ‘adequacy’ regulations or the International Data Transfer Agreement / EU Standard Contractual Clauses with the UK Addendum) so that your data continues to receive an equivalent level of protection.
07 How long we keep it
We keep personal data only for as long as we need it:
- Enquiries that don't become projects: typically up to 12 months, then deleted, unless you ask us to delete sooner.
- Client & project data: for the duration of our work and a reasonable period afterwards for support and reference.
- Financial records: at least 6 years, as required by UK tax law.
- Analytics: visitor identifiers, and any link to an enquiry, account or email, are removed after 25 months. What remains are anonymous records with no identifier.
When we no longer need your data we securely delete or anonymise it.
08 How we protect your information
We take reasonable technical and organisational measures to keep your data safe, including encrypted connections (HTTPS), access controls and password-protected client accounts, and working only with reputable providers. No online service can be guaranteed 100% secure, but we act quickly if something goes wrong and will notify you and the ICO where the law requires.
09 Your rights
Under UK data protection law you have the right to:
- be informed about how we use your data (this policy);
- request a copy of the data we hold about you (access);
- have inaccurate data corrected (rectification);
- ask us to delete your data (erasure), where applicable;
- restrict or object to certain processing;
- data portability, where applicable; and
- withdraw consent at any time where we rely on it.
To exercise any of these, email hello@meko.design. We'll respond within one month and won't charge a fee in most cases.
11 Children
This website and our services are intended for businesses and adults. We don't knowingly collect data from children under 16. If you believe a child has given us personal data, contact us and we'll delete it.
12 Changes to this policy
We may update this policy from time to time. The current version, with its “last updated” date, always lives on this page. Material changes will be highlighted here.
13 Contact & complaints
For any privacy question or request, contact us at hello@meko.design, by phone on 07824 995453, or by post at Flat 12 Noblefield Heights, Great North Road, London, N2 0NX.
If you're unhappy with how we've handled your data you can complain to the UK regulator, the Information Commissioner's Office (ICO), at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first.