Privacy policy

The controller responsible for data processing on this website within the meaning of the GDPR is Merieu Private Limited, with the following company address:

Merieu Private Limited, C-20, G Block Rd, G Block BKC, Bandra Kurla Complex, Bandra East, Mumbai 400051, Maharashtra, India

Email: [email protected]

Phone: +91 99020 00900

For data-protection matters you can reach us at any time at [email protected]. We have not appointed a separate data protection officer as we are not legally required to do so.

When you use our contact form or project-inquiry form, we process the data you enter: your name, email address, company (if provided) and the content of your message. We use this data solely to receive your request, respond to it, and handle any resulting pre-contractual or contractual communication.

Form submissions are delivered to us by email through Resend (Resend, Inc.), our transactional email provider, acting as a processor under a data processing agreement. The data is transmitted to and processed by Resend only to deliver your message to us.

Legal basis: Art. 6 (1) (b) GDPR where your request relates to a contract or pre-contractual steps, and otherwise our legitimate interest in answering enquiries addressed to us, Art. 6 (1) (f) GDPR. Providing the data is not legally required, but without it we cannot process your request.

To protect our forms from spam and automated abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc. Turnstile analyses technical attributes of your request (for example interaction signals and a token) to distinguish humans from bots. It is designed to be privacy-preserving and does not track you across websites.

Legal basis: our legitimate interest in protecting our systems and preventing abuse, Art. 6 (1) (f) GDPR.

We use PostHog for product and website analytics — but only if you actively opt in. Analytics is disabled by default; nothing is sent to PostHog until you give consent through our cookie banner. If you decline, no analytics data is collected.

When enabled, PostHog is loaded through a first-party reverse proxy on our own domain (the /ingest path) so requests stay within foways.com. We configure PostHog with person profiles set to "identified_only" and with autocapture switched off, meaning we do not automatically record every click or page element — only the limited events we define. We do not use this data to build advertising profiles.

Legal basis: your consent, Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with effect for the future by declining or revoking it in the cookie banner; the lawfulness of processing carried out before withdrawal remains unaffected.

Our website is delivered via Cloudflare, Inc. as hosting and content delivery network (CDN) provider, acting as a processor. When you access the site, Cloudflare processes connection data such as your IP address and request metadata to deliver content reliably and securely and to defend against attacks.

Legal basis: our legitimate interest in a secure, performant and reliably available website, Art. 6 (1) (f) GDPR.

We use only first-party, functional cookies and equivalent local storage. These store your theme preference (light/dark), your chosen language (locale) and your consent decision. They are strictly necessary to provide the site as you configured it and to remember your privacy choice.

We do not set advertising or cross-site tracking cookies. Analytics-related storage is created only after you opt in (see the PostHog section above).

Legal basis: § 25 (2) TDDDG, as these cookies are strictly necessary, together with our legitimate interest, Art. 6 (1) (f) GDPR; analytics storage relies on your consent, Art. 6 (1) (a) GDPR and § 25 (1) TDDDG.

Some of our processors (Resend, Cloudflare, PostHog) may process data on servers outside the European Economic Area, in particular in the United States. Where this is the case, the transfer is safeguarded by the European Commission's Standard Contractual Clauses and additional measures, or by the providers' certification under the EU-U.S. Data Privacy Framework.

We keep enquiry and form data only as long as needed to handle your request and for as long as statutory retention obligations require (for example commercial and tax law periods of up to ten years for relevant correspondence). Data that is no longer required is deleted. Consent-based analytics data is retained for a limited period and deleted or anonymised thereafter; if you withdraw consent we stop collecting it.

Under the GDPR you have the right to access your data (Art. 15), to rectification (Art. 16), to erasure (Art. 17), to restriction of processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your residence, place of work or the place of the alleged infringement.

You can decline analytics at any time in the cookie banner; declining stops PostHog from loading and prevents any analytics collection. You can also change theme and language preferences in the interface, and clear the related cookies in your browser at any time.