Privacy Policy
Last updated: 27 September 2026
1. Who we are
Yihang Bai, trading as Meridian Advisory, is the controller of the personal data described in this policy. We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Our contact details are in section 11.
2. What we collect
- Enquiries: your name, email address, company and anything you include when you contact us or book a consultation.
- Clients: contact and billing details, correspondence and meeting notes, and the business information you share so we can deliver the engagement.
- Payments: invoice and payment records. Card payments are handled by our payment provider and we do not store full card numbers.
- Website: this site has no contact forms, analytics or advertising trackers. Our hosting provider, Cloudflare, processes technical data such as IP addresses to deliver and secure the site. Fonts are loaded from Google Fonts, which means your browser sends your IP address to Google.
If client data you share with us contains personal data about your own customers, we process it only on your instructions and for the purposes of the engagement.
3. How and why we use it
- To reply to enquiries and arrange consultations (our legitimate interests, or steps taken at your request before entering a contract).
- To deliver services, send invoices and manage the client relationship (performance of a contract).
- To keep accounting and tax records (legal obligation).
- To keep the website secure and working (legitimate interests).
We do not send marketing emails unless you have asked to receive them, and we do not use automated decision-making or profiling.
4. Who we share it with
We share personal data only where needed to run the business: website hosting and security (Cloudflare), email and file-sharing providers, our bank and payment providers, and our accountant, HMRC or other authorities where the law requires it. We never sell personal data.
5. International transfers
Some of these providers process data outside the UK. Where they do, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
- Enquiries that do not lead to an engagement: up to 12 months.
- Client and billing records: 6 years after the end of the tax year they relate to, as required for UK tax purposes.
7. Security
We use reputable providers, access controls and encrypted connections to protect personal data, and limit access to what is needed to deliver our services.
8. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on consent, you can withdraw it at any time. To exercise any of these rights, email hello@jasca.co.uk. We respond within one month.
If you are not satisfied with our response, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.
9. Cookies
We do not set analytics or advertising cookies. Our hosting provider may set strictly necessary security cookies to protect the site from abuse; these do not require consent.
10. Changes to this policy
We may update this policy from time to time. The date at the top shows when it was last changed.
11. Contact
Questions about this policy or your data: Yihang Bai, trading as Meridian Advisory, 46 New York St, LS2 7DY, Leeds, United Kingdom. Email: hello@jasca.co.uk