Privacy Policy
Meridian Arbor LLC ("we," "us," or "our") operates this website and provides products and services worldwide. For visitors and customers in the European Economic Area (EEA) and the United Kingdom (UK), we act as the data controller of your personal data under the GDPR and the UK GDPR. This Privacy Policy explains what information is obtained directly from you or indirectly through our service providers—principally Wix.com Ltd. ("Wix"), which is the platform that initially collects most technical and usage data when you access or use the site—why and how that information is used, when it is disclosed, and what choices you have. Wix collects data on our behalf pursuant to our instructions and, in limited cases, for its own legitimate purposes as described in its own notice; we remain responsible for the data we receive from Wix and handle it only as permitted by law and this Policy. By using the site, you acknowledge that you have read and understood this Policy.
Wix captures technical and usage information at the point of interaction and makes it available to us through dashboards, exports, or integrations. When you browse, create an account, place an order, message us through on‑site tools, or otherwise engage with our services, information that identifies, relates to, describes, or could reasonably be linked with you may be collected. That can include details you intentionally submit (name, email address, telephone number, shipping and billing information, order history, and the content of your communications); transactional and technical data generated during use (IP address, device and browser identifiers, pages viewed, session duration, referring/exit URLs, and approximate geolocation inferred from IP); and data captured via cookies, pixel tags, SDKs, and similar technologies implemented by Wix and other providers for functionality, analytics, security, and—if enabled—marketing. Complete payment card numbers are not collected or stored by us; they are processed directly by our payment processor under its own compliance obligations.
Personal information is processed only to the extent allowed by applicable law and for legitimate business purposes such as fulfilling and administering orders; providing support and responding to inquiries; authenticating users and securing the site; monitoring, troubleshooting, and improving performance and user experience; maintaining business records for accounting, tax, and audit requirements; detecting and preventing fraud or other prohibited activities; and, where consent is given or law otherwise permits, sending marketing communications. Where a legal basis is required (for example, under the GDPR), we rely on performance of a contract, legitimate interests in operating and improving the site, compliance with legal obligations, and consent for optional uses like marketing or non‑essential cookies.
Disclosure of personal information occurs only where necessary and proportionate, including to Wix (as initial collector and service provider for hosting, storage, and site functionality); to other contracted processors who assist us under binding restrictions (such as shipping carriers, payment processors, and email/CRM platforms); to competent authorities, regulators, or courts when legally required or when we believe disclosure is needed to protect rights, safety, or property; and to actual or potential acquirers, successors, or assignees in connection with a corporate transaction. We do not sell personal information for monetary consideration. If activities constitute "sharing" or "targeted advertising" under certain U.S. state laws, required opt‑out mechanisms will be provided.
Cookies, pixels, and similar technologies are placed by Wix and integrated tools to enable core site operations (cart, login, security), measure traffic and performance, understand how visitors use the site, and—if enabled—deliver or measure marketing. You can usually control cookies in your browser; blocking some may impair functionality. Where your jurisdiction grants rights to opt out of cross‑context behavioral advertising or analytics that qualify as a "sale" or "sharing," those requests will be honored through on‑site mechanisms or recognized preference signals when required.
Depending on where you are located, you may have rights to request access to, correction of, or deletion of personal information; to receive a portable copy; to object to or restrict certain processing; to opt out of targeted advertising or profiling; and to appeal a denied request. Use the tools or request channels provided on the site (for example, account settings or embedded request forms) to exercise these options. Identity will be verified as required by law, and responses will be provided within the applicable timeframe. Authorized agents may be used where allowed. No discriminatory treatment will result from exercising a privacy right. Individuals in the EEA/UK may additionally withdraw consent at any time where processing is based on consent; object, on grounds relating to their particular situation, to processing based on legitimate interests; and lodge a complaint with a supervisory authority (such as the ICO in the UK or the authority where they reside or work). Certain information may be needed to satisfy legal or contractual requirements; without it, the relevant service may not be available.
Information is retained only as long as reasonably necessary for the purposes described, including meeting legal, accounting, or reporting obligations, resolving disputes, and enforcing agreements. When no longer needed, data is deleted or de‑identified consistent with our retention protocols and applicable law.
Commercially reasonable technical and organizational safeguards are implemented to protect personal information from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. No method of transmission or storage is completely secure; absolute security cannot be guaranteed, and liability is disclaimed to the maximum extent permitted by law for unauthorized access beyond our reasonable control.
Our services are not intended for children under 13 (or a higher age where required). If we become aware that data from a child has been collected, it will be deleted promptly.
Because service providers (including Wix) operate globally, information may be transferred to, stored, or processed in countries other than yours, including jurisdictions that may not provide the same level of protection. Where required, appropriate safeguards—such as the European Commission’s Standard Contractual Clauses or the UK International Data Transfer Addendum—are implemented, and supplementary measures are taken where necessary. By using the site, you acknowledge these transfers to the extent permitted by law.
This Policy may be revised from time to time.