Last updated: 18 September 2026
Who is responsible
MERIDIAN NORDIC LTD NUF, Norwegian organisation number 990 635 528, Unnebergveien 5, 1613 Fredrikstad, Norway, operates this website and is responsible for the personal information described here.
For privacy questions or requests, use our contact form and write “Privacy” in the subject. No buyer account is required. You may also write to the postal address above.
What we collect and why
- Contact enquiries: your name, email, message and any professional contact or company details you provide, so we can respond.
- Buyer accounts: professional contact and company details, acquisition criteria, sectors, locations, financial or size ranges and timing. We also store an account identifier, password hash, account status and records of your acknowledgements and preferences. We use these to operate your account, assess relevance and handle requests.
- Owner submissions: contact and company details, your authority or relationship to the company, business description, ownership objectives, timing, optional financial information and any supporting PDF. These support private review and follow-up.
- Introductions and requests: buyer and opportunity references, messages, dates, review stages and records of permissions and confidentiality arrangements. These help us manage requests and document authorised sharing.
- Service security: activity identifiers, timestamps and technical request information used to operate the site, investigate faults and prevent abuse.
Fields marked * are required for the requested form or account function; without them we cannot process that submission. Other fields are optional. Please provide only information you are authorised to share and avoid identity documents, personal bank details or unrelated personal information.
Our legal grounds
We rely on legitimate interests under GDPR Article 6(1)(f) to respond to professional enquiries, manage buyer accounts, assess business relevance, record permissions and protect the service. These interests are to provide the business contact service you request, facilitate relevant introductions and prevent abuse or inappropriate disclosure. You can ask about our assessment or object to this processing.
Optional opportunity updates use your contact details and interests with your consent under Article 6(1)(a). Withdraw this preference in your profile or through our contact form. Withdrawal does not affect earlier lawful use. Replies to your requests and account or security messages are separate from optional updates. The privacy checkbox acknowledges this notice; it is not blanket consent to marketing or publication.
If a specific legal obligation requires us to retain or disclose information, Article 6(1)(c) applies to that processing.
Private review and sharing
Buyer profiles, owner submissions and supporting documents are private. Public opportunities show only approved, limited information under anonymous references. Submitting a company does not publish it. Account approval or a request for access does not automatically disclose company identities or confidential documents.
Meridian reviews registrations, relevance and disclosure requests manually. An introduction proceeds separately with the parties’ permission and any required confidentiality arrangements. The website does not use automated profiling or AI to make approval or introduction decisions.
Authorised Meridian administrators and technical support working on Meridian’s instructions can access information needed for their work. Hostinger provides website hosting and backups; one.com provides email delivery and mailboxes. Buyers cannot access other buyers’ profiles or the buyer database. Any owner, buyer or appointed adviser involved in an introduction receives only the information agreed for that purpose. Advisers may be responsible for their own subsequent processing.
Hosting and international processing
The selected website hosting location is Germany and the backup location is France. one.com states that its servers are in Denmark. Supplier support and subprocessors may involve processing outside the EEA. The providers’ published arrangements provide for European Commission standard contractual clauses where required for such transfers. See Hostinger’s data-processing terms and one.com’s privacy information, or contact us for information about the relevant safeguards.
Before an introduction involving a recipient outside the EEA, we explain the intended recipient, country and arrangements for sharing your information. Registering or submitting a form does not authorise unrestricted international disclosure.
How long we keep information
Retention depends on the stage and purpose of your relationship with Meridian. The following criteria also apply to related correspondence and working exports:
- General enquiries and owner submissions: kept while we respond, carry out agreed follow-up or consider an introduction. Once the enquiry is resolved or withdrawn and no related discussion is continuing, the message and supporting working material are deleted or anonymised, subject to the limited exceptions below.
- Buyer profiles: kept while you want Meridian to maintain your buyer criteria and handle relevant requests. Continued need is assessed from your stated preferences, profile updates, requests and substantive contact. Closing your account or ending that relationship removes the reason to keep the active profile; separate outstanding requests are assessed on their own purpose.
- Introductions and permissions: working information is kept while the introduction or agreed follow-up remains active. After it ends, only information needed to resolve outstanding matters or document a still-relevant confidentiality, publication or disclosure permission is retained. Unrelated working material is deleted or anonymised.
- Opportunity-update preferences: use for these updates stops when you withdraw consent. Only the minimum preference record needed to respect your choice is retained while further contact remains possible.
A specific legal retention duty or the establishment, exercise or defence of a legal claim may require selected records to be kept after the relationship ends. The relevant obligation, unresolved matter and applicable limitation period determine that retention; they do not justify keeping the entire profile or submission indefinitely. Information is deleted or anonymised when those reasons no longer apply. You may contact us about the criteria applying to your records or request deletion.
Automatic website backups at Hostinger are retained for seven days for daily copies and six weeks for weekly copies. Automatic backups of one.com Basic Mail accounts are retained for up to fourteen days. Older recovery copies can temporarily contain information removed from the working system. Separate migration or recovery copies are retained for the migration or recovery task they support and removed when that task is complete and the required recovery copy is no longer needed. They are not used as a permanent enquiry or buyer archive.
Hosting and email providers also keep operational logs for service delivery, troubleshooting and security under their processing arrangements. Their log-retention rules are separate from the case-record periods above; one.com’s published data-processing agreement describes routine log deletion as typically within eight weeks. Records needed for a specific security incident may be retained while it is investigated.
Cookies, security and LinkedIn
WordPress authentication cookies support sign-in. Public forms use a first-party security cookie named __Host-mn_guest_csrf_…, with a 24-hour expiry, to protect submissions. Blocking these cookies can prevent sign-in or form use. Short-lived identifiers derived from account details and IP addresses also limit repeated attempts.
The application records events such as account changes, requests and authorised document access using identifiers and timestamps. Its activity log does not copy full messages or document contents.
LinkedIn links open LinkedIn, where its own privacy and cookie rules apply. Figures on “Eivind’s Network” describe his LinkedIn reach; they are not measurements of your visit to this site.
Your rights
You can request access, correction, deletion or restriction of your personal information where the relevant conditions apply. You may object to processing based on legitimate interests, and we stop direct marketing if you object. You may withdraw consent at any time. Data portability applies to qualifying information processed automatically on the basis of consent or a contract.
Contact us through the contact form. We normally respond within one month and may request limited information to verify your identity. If a lawful extension or refusal applies, we explain why. You may complain to Datatilsynet or the data protection authority where you live, work or believe a breach occurred.
We update this notice when our practices change and notify affected people of material changes.