How Merin looks after your data

Who we are

Merin is a small, independent project run by Erin and a tiny team based in Sweden. We are building a practical guide to the EU Pay Transparency Directive (2023/970). We are not a registered company yet, but we still take your privacy seriously.

If you have any questions about this notice or your data, email us at merin@fairpayeu.com.

What personal data we collect

• Lead signups. When you join our news updates we ask for your name, work email, company and role. Company and role are optional. We also record where you signed up (for example, the homepage or a specific page) so we know what people are interested in.
• Readiness survey. The survey itself is hosted by Typeform. When you click through, Typeform may collect information under its own privacy policy. We only receive the answers you submit.
• Admin access. If you sign in as a library editor or admin, Supabase Auth processes your email and password. We do not store passwords ourselves.

How we use your data

• To send you email updates about the Directive and national transposition.
• To understand what visitors and businesses need so we can shape the site.
• To respond if you get in touch with a question or a data-rights request.

We do not sell your data, share it for advertising, or use it for automated profiling.

Cookies and tracking

We keep the site as lightweight as possible. We do not install analytics, advertising or third-party tracking scripts. The only cookies or storage used are the technical ones needed to keep the site running and to keep you signed in on the admin pages (managed by Supabase Auth).

If we add analytics or advertising later, we will add a cookie-consent banner first and only load those tools after you agree.

Who else sees your data

• Lovable Cloud / Supabase. Our backend, database and authentication are provided by Lovable Cloud (Supabase). They process data on our behalf as a hosting provider.
• Typeform. The readiness survey is hosted by Typeform. Please see Typeform's privacy notice for how it handles responses.
• We do not share lead data with any other third parties.

Retention

We keep your signup details while we are sending you updates. If you unsubscribe, we stop sending emails. If you ask us to delete your data, we remove your signup record entirely.

Your rights

Under the GDPR you can ask us to access, correct, restrict, delete or transfer your data, or object to how we use it. You can also unsubscribe or delete your own data at any time through the link in our emails or at /unsubscribe using the token in your signup confirmation.

If you are not happy with how we handle your data, you have the right to complain to your local data-protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).

Changes to this notice

We will update this notice if our data practices change. The latest version will always be here at /privacy.