Privacy policy
Last updated: 2026-10-21.
What we collect
When you contact us, apply for a role, or book a training, we collect the information you provide: name, email, phone (if given), organisation, and any context you choose to share. For job applications, you may also upload a CV.
Why we collect it
- To respond to your service request, training booking, or job application.
- To maintain a record of our relationship with you.
- To meet our legal and contractual obligations.
How long we keep it
Service inquiries are kept for 24 months. Training inquiries for 12 months. Job applications for 6 months (or longer if you give consent to be considered for future roles). We delete data on request.
Where it lives
Form submissions are stored in our Netlify account. CV uploads are stored in our Cloudflare R2 bucket. Both are encrypted in transit and at rest. We do not sell your data or share it with third parties for marketing.
Cookies and analytics
We use Plausible Analytics, which is cookieless and does not require consent. We do not use any marketing cookies, ad networks, or third-party trackers.
Your rights
You can ask us at any time to access, correct, or delete your data. Email contact@merstat.org.
Contact
For privacy questions, email contact@merstat.org.
