Privacy policy
Last updated: September 2026
byMEIKA design (“byMEIKA design,” “we,” “us,” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you visit our website, contact us, book a consultation, or engage our services.
byMEIKA design is based in New York, United States.
This Privacy Policy applies to our website and services unless a separate privacy notice or agreement applies.
1. Information We Collect
Depending on how you interact with our website and services, we may collect information such as:
-
Name
-
Email address
-
Phone number, if provided
-
Business name and website
-
Information about your business or project
-
Information you provide through contact or inquiry forms
-
Information you provide when booking a consultation
-
Information you provide in connection with a project
-
Communications between you and byMEIKA design
-
Any other information you voluntarily provide to us
We may also automatically receive certain technical information when you visit our website, such as your IP address, browser type, device information, pages visited, referring website, and general website usage information.
We do not intentionally request sensitive personal information unless it is reasonably necessary for a specific service.
2. How We Use Your Information
We may use the information we collect to:
-
Respond to your inquiries
-
Schedule and provide consultations
-
Understand your website or project needs
-
Prepare proposals, agreements, and invoices
-
Provide and manage our services
-
Communicate with you about a project
-
Improve our website and services
-
Maintain website security and functionality
-
Maintain appropriate business records
-
Prevent fraud, misuse, or unauthorized activity
-
Comply with applicable legal and regulatory obligations
We do not use information for purposes unrelated to the reason it was collected unless permitted or required by applicable law.
3. Legal Bases Where GDPR Applies
Where the General Data Protection Regulation (“GDPR”) applies, we process personal data only where we have an applicable legal basis.
Depending on the circumstances, this may include:
-
Performance of a contract or taking steps at your request before entering into a contract
-
Compliance with a legal obligation
-
Our legitimate business interests, where those interests are not overridden by your rights and interests
-
Your consent, where consent is required
Where processing is based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
The specific legal basis may depend on the purpose and circumstances of the processing.
4. Information Sharing
We do not sell or rent your personal information.
We may share information with service providers that help us operate our business and provide our services, such as:
-
Website hosting and website management providers
-
Scheduling and booking providers
-
Payment processors
-
Email and communication providers
-
Cloud storage and productivity providers
-
Analytics providers
-
Website security providers
-
Professional advisers where reasonably necessary
These providers may process information on our behalf and may have their own privacy policies and terms.
We may also disclose information when required by law, legal process, or governmental request, or when reasonably necessary to protect our rights, safety, property, or business.
5. Third-Party Services
Our website may use third-party services to provide certain functions, such as website hosting, forms, scheduling, payment processing, analytics, advertising, or other website features.
These third parties may collect or process information according to their own privacy policies and terms. The specific third-party services used by our website may change over time as we add, remove, or modify website features.
Where appropriate, we will provide additional information or obtain consent where required by applicable law.
6. Cookies and Similar Technologies
Our website may use cookies and similar technologies to:
-
Support essential website functionality
-
Maintain website security
-
Remember certain preferences
-
Understand how visitors use our website
-
Measure website performance
-
Measure marketing or advertising performance, where applicable
Where consent is required for non-essential cookies or similar technologies, we will request consent through our cookie or consent mechanism.
You may also be able to manage cookies through your browser settings.
Please see our Cookie and Consent Notice for additional information.
7. Data Security
We take reasonable technical and organizational measures designed to protect personal information from unauthorized access, use, alteration, disclosure, loss, or destruction.
However, no method of transmitting or storing information online can be guaranteed to be completely secure.
8. Data Retention
We retain personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including:
-
Responding to inquiries
-
Providing services
-
Managing client relationships
-
Maintaining business and accounting records
-
Resolving disputes
-
Enforcing agreements
-
Meeting legal or regulatory requirements
Retention periods may vary depending on the type of information and the reason it was collected. When information is no longer reasonably needed and there is no legal or legitimate reason to retain it, we may delete or securely dispose of it.
9. Your Privacy Rights
Depending on your location and applicable law, you may have the right to:
-
Ask what personal information we hold about you
-
Request access to your personal information
-
Request correction of inaccurate information
-
Request deletion of personal information where applicable
-
Request restriction of certain processing
-
Object to certain processing
-
Request portability of your personal information where applicable
-
Withdraw consent where processing is based on consent
-
Ask questions about how your information is used
-
Lodge a complaint with an applicable data protection authority
Additional rights may apply depending on your jurisdiction.
Where GDPR applies, individuals have specific rights relating to access, correction, deletion, restriction, portability, objection, and other forms of control over their personal data.
To exercise an applicable right, please contact us using the contact information below.
We may need to verify your identity before responding to certain requests.
10. International Data Transfers
byMEIKA design is based in New York, United States.
If you access our website or use our services from outside the United States, your personal information may be processed or stored in the United States or other countries where we or our service providers operate.
Where GDPR applies, we will use an applicable lawful mechanism for international transfers where required, such as an adequacy decision, Standard Contractual Clauses, or another legally recognized safeguard.
Where Japan's Act on the Protection of Personal Information (“APPI”) applies, international transfers of personal information will be handled in accordance with applicable APPI requirements.
11. Japan and APPI
Where applicable, byMEIKA design will handle personal information in accordance with Japan's Act on the Protection of Personal Information (“APPI”).
APPI may apply to certain businesses located outside Japan when they handle personal information relating to individuals in Japan in connection with the provision of goods or services in Japan.
Where APPI applies, applicable requirements concerning the purpose of use, security measures, individual rights, third-party provision, and international transfers will be observed.
Where personal information is transferred to a third party located outside Japan, applicable requirements concerning international transfers will be addressed as required by APPI.
12. European Economic Area
Where GDPR applies to our processing of your personal data, the rights and protections described in this Privacy Policy apply.
The European Economic Area includes the European Union Member States as well as Iceland, Liechtenstein, and Norway.
You may have the right to lodge a complaint with the data protection authority in your country of residence, place of work, or place of the alleged infringement.
13. Automated Decision-Making
We do not use personal information for solely automated decision-making that produces legal or similarly significant effects on individuals.
14. Children's Privacy
Our website and services are not directed toward children under the age of 13.
We do not knowingly collect personal information from children under 13 through this website.
Where a different minimum age applies under applicable law, we will follow the requirements of that law.
If you believe a child has provided personal information to us, please contact us so that we can take appropriate steps.
15. Links to Other Websites
Our website may contain links to third-party websites.
We are not responsible for the privacy practices, content, or security of websites operated by third parties. We encourage you to review the privacy policy of any third-party website you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, technology, business practices, or applicable legal requirements.
Any updates will be posted on this page with a revised “Last updated” date.
17. Contact Us
If you have questions about this Privacy Policy or how your information is handled, or if you wish to exercise an applicable privacy right, please contact us through the contact information provided on this website.
byMEIKA design
New York, United States