Privacy Policy · Meridian

Meridian is a private travel concierge membership service operated by Drift Group LLC, a South Carolina limited liability company (“Company,” “we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit meridianpeak.net (the “Site”) or engage with our membership services.

By using the Site or submitting an application, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

1. Information We Collect

Information You Provide Directly

—Full name, email address, and phone number
—Travel preferences, interests, and destination history
—Membership application details and correspondence with our team
—Payment and billing information — processed securely by Stripe; we do not store full card numbers on our servers
—Any other information you voluntarily share with us

Information Collected Automatically

—IP address, browser type, and operating system
—Pages visited, time on site, and referring URLs
—Device identifiers and general usage patterns
—Cookies and similar tracking technologies (see Section 5)

2. How We Use Your Information

We use the information we collect to:

—Process and evaluate membership applications
—Deliver concierge services, including trip planning, booking, and logistics coordination
—Communicate with you about your membership, travel arrangements, and account status
—Send editorial content, destination briefs, and membership updates you have opted into
—Process payments and manage billing through Stripe
—Improve and personalize your experience on the Site
—Detect and prevent fraud, unauthorized access, or abuse of our services
—Comply with applicable legal obligations

3. Service Providers We Use

We work with trusted third-party platforms to operate our services. Each is contractually bound to handle your data securely:

Payment Processing

Stripe

All payment card data is collected and processed by Stripe, Inc. We do not store your full card number, CVV, or banking details on our servers. Stripe is PCI DSS compliant. See stripe.com/privacy.

Transactional Email

Resend

We use Resend to send transactional and membership emails, including booking confirmations, application updates, and member communications. See resend.com/privacy.

Database & Authentication

Supabase

Member accounts, concierge requests, and application data are stored in Supabase, a secure hosted database platform. Data is encrypted at rest and in transit. See supabase.com/privacy.

Site Analytics

Google Analytics

We use Google Analytics (GA4) to understand how visitors use the Site. This collects anonymized usage data. You can opt out at tools.google.com/dlpage/gaoptout.

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

—With trusted travel partners, lodges, outfitters, and operators — solely to arrange your booked experiences
—With payment processors and financial service providers for billing and fraud prevention
—With technology service providers (email, analytics, hosting) as described in Section 3
—With legal or regulatory authorities when required by law or to protect our rights
—With professional advisors under binding confidentiality obligations

All service providers are prohibited from using your data for their own marketing purposes.

5. Cookies and Analytics

We use cookies and similar technologies to maintain site functionality, remember your preferences, and analyze how visitors interact with the Site. Specifically:

—Essential cookies — required for the Site to function (login sessions, security)
—Analytics cookies — Google Analytics collects aggregated, anonymized usage data to help us improve the site
—Preference cookies — remember your settings such as theme preferences

You can control or disable cookies through your browser settings. Disabling essential cookies may affect site functionality.

6. Data Retention

We retain your personal information for as long as your membership is active and for a reasonable period thereafter to fulfill legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.

To request deletion of your data, contact us at founder@meridianpeak.net. We will respond within 30 days.

7. Your Rights

You have the right to:

—Access the personal information we hold about you
—Request correction of inaccurate or incomplete information
—Request deletion of your personal information (subject to legal limitations)
—Opt out of marketing communications at any time by clicking "unsubscribe" or emailing us
—Object to or restrict certain types of processing

To exercise any of these rights, email us at founder@meridianpeak.net.

8. Data Security

We implement appropriate technical and organizational safeguards to protect your information, including encrypted data transmission (TLS), access controls, and secure hosted infrastructure. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from minors. If we become aware a child has provided information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will update the “Last Updated” date at the top of this page. Continued use of the Site following changes constitutes acceptance of the updated policy.

11. Governing Law

This Privacy Policy is governed by the laws of the State of South Carolina, without regard to conflict of law principles.

12. Contact

For questions about this Privacy Policy or how we handle your data:

Drift Group LLC

Operating as Meridian

founder@meridianpeak.net