Privacy Policy

Last updated: June 2026

1. Who We Are

Meridian Health Technologies Ltd (“we”, “us”) operates Meridian Flow. We are registered in England and Wales. Contact: hello@meridianhealth.tech

2. Data We Collect

Account data: name, email, pharmacy details collected at signup.

Patient communications: messages, call transcripts, appointment details, and prescription information processed on behalf of your pharmacy (you are the data controller for this data).

Usage data: analytics, logs, and error reports to improve the Service.

3. Legal Basis (UK GDPR)

We process your account data under contract (to deliver the Service). Patient data is processed under your instruction as data processor. Analytics data is processed under our legitimate interests.

4. Data Retention

Account data is retained while your subscription is active and for 90 days after cancellation. Patient communication data is retained for as long as configured by your pharmacy (default: 2 years). You can request anonymisation of individual patient records at any time via the dashboard.

5. Your Rights

Under UK GDPR you have the right to access, rectify, erase, or port your data. To exercise these rights, email hello@meridianhealth.tech.

6. Third Parties

We share data with: Supabase (database, EU-hosted), Twilio (WhatsApp/SMS), Anthropic (AI processing), Stripe (billing), Resend (email). All processors are bound by appropriate data processing agreements.

7. Cookies

We use session cookies (strictly necessary) to maintain your login state. No third-party advertising cookies are used.

8. Changes

We will notify you of material changes by email at least 14 days before they take effect.