Privacy policy
Last updated: May 2026
Data controller
The publisher of MEA is the controller of your personal data collected via this website and the MEA service. Full legal details of the publishing company will be published here once it is incorporated.
Data collected
Via the contact form: name, organisation, e-mail address, message content and timestamped GDPR consent record. Via use of the MEA service (application): account data (e-mail, role), activity audit logs, archive metadata. Document content is encrypted client-side (E2EE) — we have no access to it. Via the public website: no browsing data is collected (no analytics trackers, no tracking cookies — see our cookie policy).
Purposes and legal bases
Responding to your contact request (legitimate interest — Art. 6(1)(f) GDPR). Account and billing management (performance of a contract — Art. 6(1)(b) GDPR). Legal obligations (accounting records, audit logs) (legal obligation — Art. 6(1)(c) GDPR).
Retention periods
Contact data: 3 years from the last exchange. Account data: duration of the contractual relationship + 5 years. Audit logs: 10 years (regulatory requirements for probative archiving).
Sub-processors
The contact form is submitted via a third-party form provider operating under a GDPR-compliant data processing agreement. No data is sold or shared with third parties for commercial purposes.
Transfers outside the EU
Data is hosted in data centres located within the European Union. Any potential transfer outside the EU would be governed by Standard Contractual Clauses (SCCs) of the European Commission.
Your rights
Under the GDPR (EU Regulation 2016/679), you have the following rights: • Right of access (Art. 15) • Right to rectification (Art. 16) • Right to erasure (Art. 17) • Right to restriction of processing (Art. 18) • Right to data portability (Art. 20) • Right to object (Art. 21) To exercise these rights, send your request via the website's contact form. You may also lodge a complaint with your national supervisory authority (e.g. the ICO in the UK, the CNIL in France).
Data protection contact
For any question regarding the protection of your data, use the website's contact form.