Privacy Policy

Last updated: 5 October 2026

Who is responsible and what this notice covers

Meraki Softworks Ltd, company number 14223666, registered in England and Wales. Our registered office is Flat 518, 101 Blackwall Way, London, England, E14 9QX. Email: contact@merakisoftworks.com.

We are the controller for personal information used to operate merakisoftworks.com, including its ClearDebt and To.Go website pages, and for our enquiries and support. App processing is explained separately in the ClearDebt Privacy Policy and To.Go Privacy Policy. This notice explains our practices; it is not a request for blanket consent.

Information we receive and why

Enquiries and support: when you email us, we receive your email address, message, attachments, and any name, company, phone number or project details you include. We use them to reply, assess your request and manage the resulting relationship. The website currently opens your email app; it does not submit a contact form.
Website requests: our hosting and security provider, Cloudflare, can process IP address, browser/device information, requested pages, timestamps and security events to deliver pages, prevent abuse and diagnose faults. If a URL contains an invitation or collection identifier, that identifier can appear in request logs.
Fonts: pages request typefaces from Google Fonts. Google receives the technical information necessary for those requests, such as IP address and request headers. A font request does not send us the contents of your emails or app records.
Theme preference: on pages with the theme switcher, choosing a theme saves a first-party theme value in your browser. It is used only to remember light or dark mode. See our Cookie and Similar Technologies Policy.
To.Go share links: opening a collection, invitation or guide link can send its identifier to our Supabase-backed preview service. Shared titles, descriptions and cover images may appear in previews made by messaging or social services. Read the To.Go sharing notice before publishing a link.

Our reasons for processing

Steps towards a contract or a contract: responding to your own request for services and providing agreed services. Where you contact us on behalf of a business, our legitimate interest is communicating with its representative.
Legitimate interests: answering general enquiries, supporting users, securing and maintaining the website, investigating misuse and managing legal claims. We balance those interests against your rights; you can object.
Legal obligations: keeping records required by applicable accounting, tax or other law, and responding to legally binding requests.
Consent: where required for an optional new use or non-exempt device storage. Merely visiting the site or emailing us does not opt you into a marketing mailing list.

Providers and other recipients

Cloudflare provides website hosting, request handling and security. Google provides the externally hosted fonts. Our email and communications providers process correspondence so that messages can be delivered and stored. These providers receive only the information relevant to their service.

We may also disclose relevant information to professional advisers, authorities when legally required, or a prospective purchaser or successor as part of a lawful business transaction, with appropriate confidentiality and data-protection safeguards. We do not sell website visitors' personal information or share it for cross-context behavioural advertising. App providers and SDK processing are described in each app notice.

International processing

We operate in the United Kingdom. The website providers described above also operate internationally, including in the United States and the EEA. The location of processing can depend on the service, hosting region and provider support arrangements; data is not necessarily kept in your country.

For a transfer restricted by UK/EEA data-protection law, a recognised adequacy decision or appropriate safeguards are required. Provider data-processing terms may supply EU Standard Contractual Clauses and the UK Addendum or International Data Transfer Agreement where applicable. Other countries can require different safeguards or separate consent. Ask contact@merakisoftworks.com for the countries and transfer mechanism relevant to your information and a copy of the applicable safeguards, with confidential commercial information removed. This notice does not itself give consent to an international transfer.

How long information is kept

Enquiries and support: the time needed to resolve the enquiry, complete any resulting project or support case, and retain relevant evidence for the applicable contract-claim or complaint period. Unrelated information is not needed merely because an email thread is retained.
Contracts, invoices and legal records: the applicable statutory accounting or tax period, and any period necessary for a specific unresolved claim or legal preservation requirement.
Request and security logs: the provider's configured rolling retention period and any longer period needed to investigate a particular abuse or security incident.
Browser preferences: the theme value has no automatic expiry; it remains until you clear it, clear site data, or your browser removes it.
Shared previews: transient website caches and independently made previews may outlast a change to the underlying link. We cannot erase copies held by people or services outside our control.

Where no fixed period applies, we decide retention using those criteria, the sensitivity of the information and whether a smaller record will meet the purpose. Ask contact@merakisoftworks.com about the period applying to a particular record. App data has the separate retention criteria in its product notice.

Your choices and privacy rights

Ask for access to your information, correction, deletion, or a portable copy, and information about its sources, purposes and recipients.
Where the law provides, restrict processing, object to processing based on legitimate interests, withdraw consent, or request review of a qualifying automated decision. Withdrawing consent does not affect earlier lawful processing.
Where applicable, opt out of sale, sharing for cross-context behavioural advertising, or targeted advertising; limit qualifying uses of sensitive information; use an authorised agent; or appeal a refused request. We will explain any applicable exception and appeal route. We will not discriminate against you for exercising your rights.

Email contact@merakisoftworks.com with the product name and your request, or write to our registered office above. You do not need to buy anything or create an account to contact us. We may ask for proportionate information to verify identity or an agent's authority before disclosing or deleting records. Do not send passwords or a full identity document unless we explain why it is needed and provide a suitable way to send it.

We respond within the time required by the law that applies to your request. UK/EEA requests normally have a one-month deadline; applicable California access and deletion requests normally have a 45-day deadline. We will explain any permitted extension or refusal. These rights depend on the applicable law and are not all absolute.

Complaints

For a privacy complaint, contact contact@merakisoftworks.com and describe the issue. We will investigate, explain our response, and tell you about any further review available. You can also complain to the UK Information Commissioner's Office (ICO) or the relevant authority in your country, including your EEA supervisory authority, Canada's privacy commissioner, Australia's OAIC, Brazil's ANPD, or the applicable US state authority. Contacting us first does not remove your right to go directly to an authority.

Tracking signals and third-party services

The website currently includes no advertising or audience-analytics scripts. It does not change its behaviour in response to a browser Do Not Track signal. Global Privacy Control does not need to switch off a website sale or advertising-sharing process because we do not run one. This statement concerns this website, not every SDK in our apps. Externally hosted fonts and services opened from a link receive request information under their own policies.

Security, information you choose to provide, and children

We use access controls and HTTPS services to protect information we handle. No internet transmission or storage method provides absolute security. Please keep enquiries to the information needed for us to help and avoid sending passwords, payment-card details or sensitive third-party records. You can browse without sending us an enquiry; without contact information we may be unable to reply. Our business enquiries and app services are intended for adults. If a child sends personal information, contact us so we can address it.

Changes to this notice

We update the date above when this notice changes. Where a change materially affects how existing information is used, we will provide the notice and obtain any fresh consent required by law before that new use. Continued use of a website or app is not consent to unrelated processing.