Privacy policy
How Meridian Dynamics collects, uses and protects your personal information. It's written to meet South Africa's Protection of Personal Information Act (POPIA), and to be read by people, not just lawyers.
Last updated 26 September 2026
Who's responsible for your information?
We are. Meridian Dynamics designs and builds business systems: websites, lead capture, automations, CRMs and sales pipelines. For the information in this policy we're the responsible party under POPIA, which means we decide why and how it's used, and we answer for looking after it.
Business
Meridian Dynamics PTY LTD
Information Officer
Gavin Cussons
Phone
+27 81 282 6200
What do you collect?
Whenever you fill in a form, survey or booking on our site, we collect what you type into it. Depending on the form, that's some of the following:
Contact details: your name, email address and phone number.
Business details: your business name and role, and the answers you give about how your business runs, your budget or your timing.
Booking details: the time you choose and anything you tell us before a call.
Visit details: your IP address, browser and device, the pages you visit, the page or campaign that sent you, and cookie identifiers.
Client details, if you become a client: billing and company details, project information, and the access you give us to your systems.
The Leak Audit runs in your browser and sends us nothing unless you ask us to email your report.
Sometimes we get your details from someone else, such as a contact who refers you or your employer when you're on a client's team. If you ask, we'll tell you where we got them.
Do I have to give you anything?
No. Everything you give us on this site is voluntary, and no law requires you to provide it. You can read the site and run the Leak Audit without telling us anything about yourself.
If you leave out a required field, we can't do the thing you asked for: send your report, book your call or assess your application.
If you become a client, we need your billing and company details to invoice you. South African tax law (the Tax Administration Act and, where VAT applies, the Value-Added Tax Act) requires us to keep proper records of those invoices, so the work can't go ahead without them.
How do you use it?
Only for the reasons below, which are also what POPIA allows:
You asked us to. Sending your report, holding your call, reviewing your application and replying to your messages.
You gave consent. Marketing emails and any non-essential tracking. You can withdraw consent at any time.
We have a contract with you. Delivering client work, supporting it and invoicing for it.
The law requires it. Keeping tax and business records.
Our legitimate interests. Keeping the site secure, improving our services, understanding which marketing works and keeping a record of our dealings with you.
Answers on our partnership application automatically decide which next step you see. If you think that got it wrong, reply to any of our emails and a person will look at it.
We don't sell, rent or trade your personal information. Not to advertisers, not to list brokers, not to anyone.
Will you email me?
When you ask for your report or book a call, we'll send what you asked for and the messages that go with it, such as confirmations and appointment reminders.
Beyond that, we only send marketing, such as tips, case studies or offers, if:
you've opted in, or
you're a client and the message is about services similar to the ones you bought from us.
We never buy email lists. Every marketing email has an unsubscribe link, and unsubscribing takes effect automatically. Afterwards we keep your email address on a do-not-contact list so you aren't added back by mistake.
Who else sees it?
Only the service providers that help us run the business, and only what each one needs:
HighLevel (LeadConnector). Our website, forms, booking calendar, CRM, email and SMS platform. HighLevel uses its own providers for hosting (Google Cloud and Amazon Web Services), email delivery and SMS.
Google. The fonts on our site load from Google, so your browser shares your IP address with Google when you view a page.
Our business software. The email, accounting, document and AI assistant tools we use to run the business, used under business terms.
Professional advisers. Our accountant, auditors or lawyers, when needed.
Authorities. When the law requires it, or to protect our legal rights.
A buyer or successor. If the business is sold or restructured, under the same protections as this policy.
Service providers process information on our behalf and are bound to keep it confidential and secure.
Does it leave South Africa?
Yes. Our main platform, HighLevel, stores data in the United States, and some of its providers support the service from the United States and India. Other tools we use may also store data outside South Africa.
The United States doesn't have a single, general privacy law that gives the same protection as POPIA. We transfer your information because it's needed to provide what you asked for, such as sending your report or booking your call, and we rely on our providers' binding data processing terms and their security safeguards. HighLevel holds SOC 2 Type II and ISO/IEC 27001 certification and encrypts data in transit and at rest.
By submitting a form on this site, you agree to your information being processed this way. If you have concerns about that, talk to us before you submit anything.
Do you use cookies?
Yes, along with your browser's local storage. Cookies are small files a website stores in your browser, and local storage keeps information on your own device in a similar way. We use them for:
Essentials. Keeping the site, forms and booking calendar working and secure. The site won't work properly without these.
Remembering your Leak Audit. The Leak Audit saves the leaks you tick in your browser's local storage, so your answers are still there when you return. This stays on your device and isn't sent to us. Remove it with the "Clear my answers" button or your browser settings.
Knowing where visitors come from. Our platform records which page, link or campaign brought you to the site. If you fill in a form, that source is added to your contact record so we can see which marketing works.
Analytics and advertising. We may use tools such as Google Analytics or the Meta Pixel to measure visits and show our ads to people who have visited the site. These providers may combine this with information they already hold, under their own privacy policies.
You can block or delete cookies and local storage in your browser settings. If you block essential cookies, forms and booking may stop working.
How long do you keep it?
Only as long as we need it. Then we delete it, or strip out anything that identifies you.
Enquiries and leads who don't become clients: up to 24 months after our last contact.
Do-not-contact list: your email address and opt-out, for as long as we send marketing, so we keep respecting it.
Clients: for the length of our relationship, then for as long as tax and company law requires (generally five years, and up to seven years for some company records).
Access to your systems: removed or handed back when our work together ends.
Anonymised information: we may keep statistics, such as average Leak Audit scores, that can't identify you.
How do you keep it safe?
We take reasonable technical and organisational steps to protect your information against loss, misuse and unauthorised access:
Our platform encrypts data in transit (TLS) and at rest (AES-256).
Access is limited to the people who need it for their work, with individual logins and two-factor authentication where it's available.
Logins you share with us for your systems are stored securely and used only for the work you've asked us to do.
The link in your Leak Audit email contains only the numbers of the leaks you ticked, not your name or contact details.
No system is perfectly secure. If a breach affects your personal information, we'll notify you and the Information Regulator as POPIA requires, and tell you what we're doing about it.
What can I ask you to do?
Under POPIA you can:
Find out whether we hold information about you, and see it.
Correct information that's wrong, out of date or incomplete.
Delete information we no longer have a valid reason to keep.
Object to us using your information, including for marketing.
Withdraw consent you've given, at any time.
Ask a person to review an automated outcome, such as the next step shown after a partnership application.
Complain to the Information Regulator.
How to make a request
Email [email protected] with "Privacy request" in the subject line. We may ask you to confirm your identity before we act, so we don't hand your information to someone else. We'll respond within 30 days. Confirming what we hold costs nothing. If you ask for copies of records and a fee is prescribed under the Promotion of Access to Information Act, we'll tell you before we do the work.
The Information Regulator
If you're unhappy with how we've handled your information, please talk to us first so we can put it right. You also have the right to complain to the Information Regulator:
Website
Complaints
Phone
0800 017 160 (toll free) or 010 023 5200
What about the systems you build for clients?
We build websites, forms, CRMs and automations that collect personal information for our clients. For that information, our client is the responsible party and we act as their operator. We process it only on their instructions, keep it confidential and secure, and tell them immediately if we suspect a breach.
If you're a customer of one of our clients, their privacy policy applies to your information. Contact them first, and we'll help them respond.
What about children?
Our site and services are for businesses. They're not aimed at children, and we don't knowingly collect information from anyone under 18. If you think a child has given us their details, contact us and we'll delete them.
What happens when this policy changes?
We update it when our tools or practices change, and the date at the top shows the current version. If a change significantly affects how we use information you've already given us, we'll email you before it takes effect.
Who do I talk to?
Our Information Officer. We'd rather hear about a concern early than have you wonder.
Information Officer
Gavin Cussons
Phone
+27 81 282 6200
Privacy Policy | Copyrights 2025 | Meridian Dynamics