Privacy policy
This page explains what happens to your data when you visit merakee.design or write to us through the contact form. No unnecessary legalese, just what you need to understand and, if you want, exercise your rights.
Data controllers
merakee is an independent studio made up of two natural persons. We are joint controllers of the data collected through this site, under art. 26 GDPR:
- Lanka Haluge I. Ashvin Manusha F., Milan (IT)
- Christian Casciello, Milan (IT)
For any request about your data you can write to privacy@merakee.design. Both of us receive it.
What we collect, and why
From the contact form. When you write to us through the form we collect the name you enter, your email address and the content of your message. We need this data to reply and to assess a possible project together.
From site visitors. We use an analytics system that counts page views, referrers and device type in aggregate form, without cookies. We do not identify individual visitors and we do not track your behaviour across sessions.
Legal basis
For the contact form the legal basis is the performance of pre-contractual measures at your request, under art. 6.1.b GDPR. In practice: you wrote to us to talk about a possible engagement, and this is the basis that lets us process your data to reply.
For aggregate analytics the basis is legitimate interest, under art. 6.1.f GDPR, in understanding how the site is used. Since the data is aggregate and anonymous, no consent is required and no cookies are used.
Who touches your data
To operate the site and the form we rely on three external providers acting as processors:
| Provider | Role | Location | Transfer basis |
|---|---|---|---|
| Vercel Inc. | Site hosting and analytics | US | EU-US Data Privacy Framework |
| Formspree | Contact form submissions | US | Standard Contractual Clauses (art. 46 GDPR) |
| Fastmail | Receiving email inbox | AU | Standard Contractual Clauses (art. 46 GDPR) |
We do not share your data with anyone else. We do not sell it, do not use it for profiling, do not pass it to third parties for marketing.
How long we keep the data
Emails received through the contact form stay in our inbox for up to 24 months after the last interaction, after which they are deleted. If the contact becomes a working relationship, the data merges into the contractual documentation and follows the applicable fiscal and civil retention terms (in Italy, typically 10 years for fiscal documents).
Raw analytics data is retained by Vercel for 30 days. Anonymous aggregates may be retained indefinitely because they no longer constitute personal data under art. 4 GDPR.
Your rights
You can ask us at any time for: access to your data, rectification, erasure, restriction of processing, portability, objection. You can also withdraw any consent basis, where applicable, without affecting processing carried out before the withdrawal.
Write to privacy@merakee.design with your request and we reply within 30 days. If you believe the processing of your data violates GDPR you can also file a complaint with the Italian Data Protection Authority (garanteprivacy.it).
Changes
If we change anything in this policy we update the date at the top and, if the change is substantial, we notify you actively if we have a way to contact you.