Privacy statement

Last updated: 8 October 2026

Meridian Literacy and Learning respects your privacy. This statement explains what personal data I collect, why, how long I keep it, and what rights you have under the EU General Data Protection Regulation (GDPR).

Who is responsible for your data

Meridian Literacy and Learning, run by Dr. Jennifer Bambrick, is the controller of your personal data.

What data I collect

  • Contact details: your name, email address, phone number, organization and role, when you contact me or book a service.
  • Messages: what you write to me by email, through the contact form or other channels.
  • Service information: for schools, universities and organizations, details needed to plan and deliver professional learning or consulting.
  • Student information (reading assessment and individual support only): the student's name, age or grade, school, reading history, and assessment results, recommendations and session notes. Parents or guardians provide this or agree to it.
  • Billing details: invoice name, address and payment records.
  • Website visits: anonymous visitor statistics (see "Website statistics and cookies" below). These cannot identify you.

Why I use your data, and on what legal basis

  • Answering your questions and enquiries: legitimate interest in responding to people who contact me.
  • Planning and delivering services, including assessments and sessions: performance of the agreement with you.
  • Invoicing and bookkeeping: legal obligation under Dutch tax law.
  • Keeping sensitive student information, such as learning difficulties: explicit consent of the parent or guardian.
  • Improving the website with anonymous statistics: legitimate interest; no personal data involved.

I do not use your data for marketing without your consent, and I never sell it.

Children's data

Reading assessment and individual support often involve children. I only process a child's information with the agreement of a parent or guardian, and only for the support they asked for. Information that may say something about a child's health or learning difficulties, such as signs of dyslexia, is treated as sensitive and handled only with the parent's or guardian's explicit consent.

How long I keep your data

  • Enquiries that do not lead to an agreement: up to 12 months after the last contact.
  • Student assessment reports and session notes: up to 2 years after the support ends, unless the parent or guardian asks me to delete them sooner.
  • Invoices and financial records: 7 years, as required by Dutch tax law.

Who I share your data with

I only share your data with services I need to run my business. They process it on my behalf and must keep it secure:

  • Website hosting and email: Webador
  • Website statistics: Plausible Analytics (no cookies, no personal data)
  • Spam protection on the contact form: Google reCAPTCHA
  • Online sessions: Zoom
  • File storage (including student files): Google Drive
  • Payments and bookkeeping: Wise and Stripe

I may also share information when the law requires it. For school or university projects, I share results only with the organization that hired me, as agreed.

Data outside the European Union

Some of the services above (Google Drive, Zoom and Google reCAPTCHA), and some of my clients, are outside the EU, for example in the United States. In those cases I rely on the safeguards the GDPR requires, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

How I protect your data

I use password-protected accounts with two-step verification, keep student files in a private Google Drive account protected with two-step verification, and limit access to myself.

Your rights

You have the right to:

  • see the personal data I hold about you
  • have it corrected or deleted
  • restrict or object to how I use it
  • receive a copy to take elsewhere
  • withdraw your consent at any time, without affecting what was done before

To use any of these rights, email jennifer@meridianliteracyandlearning.com. I will respond within one month.

Complaints

If you are unhappy with how I handle your data, please contact me first. You also have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Website statistics and cookies

This website uses Plausible Analytics to count visits. Plausible does not use cookies and does not collect personal data.

The contact form is protected against spam by Google reCAPTCHA. To tell people from automated programs, reCAPTCHA collects technical information such as your IP address, browser details and how you interact with the page, and may place cookies. Google processes this information under its own privacy policy. I use reCAPTCHA because of my legitimate interest in keeping the contact form free of spam.

When you first visit the site, a cookie notice lets you accept or decline cookies. You can change your choice at any time by clearing the cookies for this website in your browser. The website does not use advertising cookies.

Changes to this statement

I may update this statement when my services or the law change. The date at the top shows the latest version.