What we collect, why we are allowed to hold it, how long it stays, and how to make us delete it.
Meridian Desk Technologies Ltd is the data controller for everything described here. We collect the minimum an assessment product needs, and we do not sell it, rent it, or share it for anybody else’s marketing.
Capital is at risk. Past performance is not a reliable indicator of future results. You may get back less than you put in.
Account data
Name, email, country and password hash. Held to run your account, on the basis of performing our contract with you. Kept while you hold an account, then six years.
Verification data
Government ID, proof of address and a liveness check, held to meet anti-money-laundering obligations — a legal duty rather than consent, which is why it cannot be deleted on request while the duty runs. Kept five years after your last payout.
Trading data
Every simulated order, objective and drawdown reading on your account. Held to administer the assessment and to detect prohibited strategies. Kept six years.
Payment data
We never see or store your card. The processor returns a reference and the last four digits, and that is all we keep.
Analytics
First-party and aggregated. No cross-site tracking, no advertising pixels, and refusing it costs you no part of the product.
Under UK GDPR you can ask for a copy of everything we hold, ask us to correct it, ask us to delete it, object to processing, or ask for it in a portable format. Write to privacy@meridiandesk.com and we will answer within one month.
Where a request conflicts with an anti-money-laundering retention duty we will say so explicitly, and tell you when that duty ends, rather than refusing without a reason.
Processors we use
A payment processor, an identity verification provider, an email delivery service and a cloud host. Each is contracted under Article 28 terms and none may use your data for its own purposes.
Transfers outside the UK
Where a processor sits outside the UK, transfers are made under the International Data Transfer Agreement or an adequacy decision.
Complaining
You can complain to the Information Commissioner’s Office at ico.org.uk at any time. We would rather you told us first, but that is not a precondition.