Privacy Policy

Introduction

True Legacy Solutions LLC (“Meerath,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our website at meerath.com and when you use our digital legacy planning platform (collectively, the “Service”).

This policy describes our website practices, including cookie consent, analytics and marketing tags, and form security. It should be read together with our Cookie Policy.

This policy is intended to be clear and transparent. It is not legal advice and does not by itself mean that Meerath is “fully GDPR compliant.” Specific legal bases and transfer mechanisms should be confirmed with qualified counsel.

Who we are

Controller: True Legacy Solutions LLC

Website: meerath.com

Address: Office No. 9-86, Building 128-246, Dubai, United Arab Emirates.

Meerath is operated by True Legacy Solutions LLC. If a local European or Spanish entity becomes responsible for the website in the future, we will update this policy.

What personal data we collect

Depending on how you use the Service, we may collect:

• Website form data: information you submit through contact, register-interest, job application, or similar public forms (for example name, email address, message content, position or area of interest, LinkedIn or portfolio URL, and recruitment-related details).
• Cookie consent choices: your cookie category selections, stored in a first-party cookie and in a technical consent log without directly identifying content.
• Technical and security data: IP address, browser and device information, security logs, anti-spam signals, and data processed through Cloudflare Turnstile when you submit a form.
• Analytics data (with consent): website usage information through tools such as Google Analytics (GA4), Google Tag Manager, and Jetpack Stats.
• Marketing measurement data (with consent): information used to measure advertising performance, such as Google Ads tags or similar marketing technologies if enabled.
• Account and Service data: if you create or use a Meerath account or vault features, we may also process account, profile, billing, and legacy-planning information as described elsewhere in this policy and in our product terms.

Why we process data

• To respond to enquiries and messages you send through our website forms.
• To manage register-interest or waitlist requests.
• To review job applications you submit through our careers forms.
• To operate, secure, and maintain our website and forms.
• To prevent spam, abuse, and automated submissions (including through Cloudflare Turnstile).
• To understand how visitors use our website when analytics consent is given.
• To measure marketing performance when marketing consent is given.

Legal bases

Depending on the activity and your location, we may rely on one or more of the following legal bases. This summary is provided for transparency.

• Contact and similar enquiries: steps you request before a contract, and/or our legitimate interests in responding to your message.
• Register-interest / waitlist: steps you request to join a waitlist; where we send marketing updates, we rely on consent where required.
• Job applications: steps prior to a possible employment relationship, and/or legitimate interests in running recruitment; optional longer talent-pool retention only with your agreement.
• Essential website operation and security: legitimate interests in operating and securing the website, and legal obligations where they apply.
• Form security (including Cloudflare Turnstile and anti-spam measures): legitimate interests in preventing spam, bots, and abuse. These tools are not used for advertising.
• Analytics cookies and similar technologies: consent.
• Marketing cookies and similar technologies: consent.

If you are in the UAE, we process personal data in line with applicable UAE data protection requirements (including the UAE PDPL) and the purposes described above.

Cookies and similar technologies

We use essential cookies and similar technologies needed to run the website. Optional analytics and marketing technologies are blocked until you give consent through our cookie banner.

When you first visit our website, you can:

• Accept all optional categories;
• Reject non-essential cookies; or
• Manage preferences to choose categories individually.

After you make a choice, a persistent Cookie preferences control remains available so you can review or change your settings at any time.

Analytics and marketing tags (including Google Tag Manager, GA4, Ads, and Jetpack Stats where used) do not load until the relevant consent category is granted. If you reject or withdraw consent, those technologies remain blocked.

See our Cookie Policy for details, including a cookie table and category descriptions.

Cloudflare Turnstile (form security)

We use Cloudflare Turnstile to protect our forms from spam, bots, and automated abuse. When you use a protected form, Cloudflare may process technical information about your browser, device, network, and interaction with the form to help verify that the submission is legitimate. Turnstile is used for security and abuse prevention, not for advertising. If verification fails, the form submission may be blocked.

Cloudflare may process data outside your country; where required, we rely on appropriate safeguards such as Cloudflare’s data processing terms and Standard Contractual Clauses or other recognized mechanisms. We do not expose Turnstile secret keys on our website.

How we collect information

• Direct interactions: forms, emails, and communications you send to us.
• Automated technologies: cookies, logs, and security tools when you browse our website.
• Service providers: hosting, email delivery, analytics (with consent), and security providers that support our operations.

Sharing with service providers

We work with trusted service providers that help us operate the website, secure forms, understand website usage where consent is given, and manage communications. These may include:

• Website hosting (WordPress.com / Automattic);
• Cloudflare Turnstile for form security and bot/spam protection;
• Google services such as Google Tag Manager, Google Analytics (GA4), and Google Ads tags when you consent;
• Jetpack Stats (Automattic) when analytics consent is given;
• Email delivery and CRM tools to receive, organize, and respond to form submissions. Website forms are handled through our website platform (including Elementor form email actions and WordPress.com or related mail infrastructure). We will update this policy with specific provider names where required once the provider list is confirmed.

We only list providers that are used for the relevant service, and we require appropriate contractual safeguards where required by law. We do not sell your personal information.

International transfers

Some of our service providers may process personal data in countries outside your country of residence, including outside the EEA, the UK, or the UAE. Where required, we rely on appropriate safeguards such as data processing agreements, Standard Contractual Clauses, or other legally recognized transfer mechanisms. The exact safeguards may depend on the provider and the country involved.

Data retention

We keep personal data only for as long as reasonably necessary for the purposes described in this policy. As a working standard:

• Contact enquiries: up to 24 months after the last interaction, unless longer retention is needed for legal, security, or dispute purposes.
• Register-interest / waitlist: until you unsubscribe or opt out, or up to 24 months after the last meaningful interaction.
• Job applications: up to 12 months after the recruitment process ends, unless a longer period is required by law or needed to protect our legal rights. If you agree to be considered for future roles, we may keep your details in our talent pool for up to 24 months. If you join Meerath, relevant application information may become part of your employment record and will be handled under our internal HR retention policy.
• Consent records: 24 months after the latest consent choice, or until replaced by a newer consent record.
• Security / anti-spam logs: generally 90 days unless needed for investigation, abuse prevention, or legal claims.
• Analytics data: according to provider settings (for example Google Analytics / GA4 and Jetpack Stats). Some providers may apply their own retention periods.
• Turnstile verification data: handled by Cloudflare under its applicable terms; local security logs follow the security-log period above unless otherwise required.

We may delete data earlier where required by applicable law or a valid deletion request. Backup copies may be retained according to hosting/backup schedules.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority.

To change cookie choices, use Cookie preferences on our website. For other requests, contact us using the details below.

Children’s privacy

Our Service is not directed to children under 16, and we do not knowingly collect personal information from children.

Changes to this Privacy Policy

We may update this policy from time to time. The “Last updated” date at the top shows when it was last revised.

Contact us

If you have questions about this Privacy Policy or our data practices, contact us at:

• Email: privacy@meerath.com
• Address: True Legacy Solutions LLC, Office No. 9-86, Building 128-246, Dubai, United Arab Emirates.

Meerath is operated by True Legacy Solutions LLC. If a local European or Spanish entity becomes responsible for the website in the future, we will update this policy.

Complaints

If you are in the EEA, UK, or another region with a data protection authority, you may have the right to lodge a complaint with your local authority. We encourage you to contact us first so we can try to resolve your concern.