GDPR Privacy Policy
Last updated: August 30, 2025
Meroladuk ("we", "us", or "our") operates the website meroladuk.biz and provides online masterclass services related to keyword research. This policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection legislation.
By accessing or using our services, you acknowledge that you have read and understood this policy.
1. Data Controller
Meroladuk acts as the data controller for personal data collected through meroladuk.biz. We are responsible for determining the purposes and means by which your personal data is processed.
You may contact us regarding any data protection matter at:
215 Wharncliffe Rd N, London, ON N6H 2B6, Canada
Email: [email protected]
Phone: +1 514 593 3588
2. Personal Data We Collect
We collect personal data that you provide directly to us and data generated automatically through your use of our services.
2.1 Data You Provide
| Category | Examples |
|---|---|
| Identity data | Full name, username |
| Contact data | Email address, phone number |
| Account data | Password (hashed), account preferences |
| Payment data | Billing address, transaction reference (card details processed by third-party providers) |
| Communication data | Messages sent to our support team, feedback submissions |
2.2 Data Collected Automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type, operating system, device identifiers |
| Usage data | Pages visited, time on page, clickstream data, feature interactions |
| Cookie data | Session identifiers, analytics cookies, preference cookies |
3. Lawful Basis for Processing
We process your personal data only where a lawful basis exists. The basis we rely on depends on the specific purpose of processing.
| Purpose | Lawful Basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Processing payments | Performance of a contract |
| Delivering course content and learning materials | Performance of a contract |
| Sending transactional communications | Performance of a contract |
| Sending marketing communications | Consent |
| Improving and securing our platform | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Analytics and service performance measurement | Legitimate interests |
4. How We Use Your Personal Data
We use the personal data we collect for the following purposes:
Service delivery: To register your account, process enrolments, deliver masterclass content, issue certificates of completion, and manage your learning progress.
Customer support: To respond to your enquiries, resolve technical issues, and communicate important service updates.
Payment processing: To facilitate secure transactions and maintain records required for financial compliance.
Marketing: To send promotional materials, newsletters, and offers where you have given your consent. You may withdraw consent at any time.
Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorised access, and misuse of our platform.
Legal compliance: To fulfil obligations imposed by applicable laws and regulations.
5. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies to enhance functionality, analyse usage, and personalise your experience. Cookies are small text files stored on your device.
5.1 Types of Cookies We Use
| Type | Purpose | Duration |
|---|---|---|
| Strictly necessary | Enable core site functions such as login sessions and security | Session |
| Functional | Remember your preferences and settings | Up to 12 months |
| Analytics | Measure traffic, behaviour, and platform performance | Up to 24 months |
| Marketing | Deliver relevant advertising and track campaign effectiveness | Up to 12 months |
You may manage or withdraw cookie consent at any time through your browser settings or our cookie preference tool. Disabling certain cookies may affect the functionality of our services.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients only where necessary and under appropriate data protection terms.
6.1 Service Providers
We engage third-party processors to support platform operations, including cloud hosting providers, payment processors, email delivery services, video streaming platforms, and analytics providers. All processors are bound by data processing agreements that restrict their use of your data.
6.2 Legal Requirements
We may disclose personal data where required by law, court order, or regulatory authority, or where disclosure is necessary to protect our rights, property, or the safety of our users.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction. We will notify affected users before data is transferred and becomes subject to a different privacy policy.
7. International Data Transfers
Our services are operated internationally and your personal data may be transferred to and processed in countries outside your country of residence. Where data is transferred outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place, including:
Standard Contractual Clauses (SCCs) approved by the European Commission, binding corporate rules where applicable, or transfers to countries recognised as providing an adequate level of data protection.
You may request a copy of the relevant safeguards by contacting us at [email protected].
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
| Data Category | Retention Period |
|---|---|
| Account and profile data | Duration of account plus 2 years after closure |
| Course enrolment and progress records | 5 years from last activity |
| Payment and transaction records | 7 years for financial compliance |
| Support communications | 3 years from last interaction |
| Marketing consent records | Until consent is withdrawn plus 3 years |
| Technical and log data | Up to 12 months |
When data is no longer required, we securely delete or anonymise it in accordance with our data disposal procedures.
9. Your Rights Under GDPR
If you are located in the EEA or a jurisdiction with equivalent data protection rights, you have the following rights with respect to your personal data.
9.1 Right of Access
You have the right to request a copy of the personal data we hold about you and information about how it is processed.
9.2 Right to Rectification
You have the right to request correction of inaccurate or incomplete personal data.
9.3 Right to Erasure
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to certain exceptions under applicable law.
9.4 Right to Restriction of Processing
You have the right to request that we restrict processing of your personal data in certain circumstances, such as while a dispute regarding accuracy is resolved.
9.5 Right to Data Portability
Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
9.6 Right to Object
You have the right to object to processing based on legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing immediately.
9.7 Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects. We do not currently use fully automated decision-making for such purposes.
9.8 Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
9.9 How to Exercise Your Rights
To exercise any of the rights above, please contact us at [email protected]. We will respond to your request within 30 days. In complex cases, we may extend this period by a further 60 days, and we will notify you accordingly. We may need to verify your identity before processing your request.
10. Right to Lodge a Complaint
If you believe that our processing of your personal data violates applicable data protection law, you have the right to lodge a complaint with the relevant supervisory authority in your country of residence or place of work. We encourage you to contact us first so that we may address your concerns directly.
11. Children's Privacy
Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without verified parental consent, we will take steps to delete such data promptly. If you believe a child has provided us with personal data, please contact us at [email protected].
12. Security of Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include encryption of data in transit and at rest, access controls, regular security assessments, and staff data protection training.
No method of transmission over the internet is entirely secure. While we take reasonable steps to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
13. Third-Party Links
Our website may contain links to third-party websites or services. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.
14. Changes to This Policy
We may update this GDPR Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. The date at the top of this policy indicates when it was last revised. Where changes are material, we will notify registered users by email or through a prominent notice on our website. Your continued use of our services after the effective date of any changes constitutes your acceptance of the revised policy.
15. Contact Us
For any questions, concerns, or requests relating to this policy or to the processing of your personal data, please contact us through any of the following channels:
Email: [email protected]
Phone: +1 514 593 3588
WhatsApp: https://wa.me/15145933588
Telegram: https://t.me/+15145933588
Signal: https://signal.me/#p/+15145933588
Post: 215 Wharncliffe Rd N, London, ON N6H 2B6, Canada