We are a web development and hosting company. This page explains who we work with, what we keep, and what we will not host.
Meridian Digital builds and hosts public websites for registered businesses. We are not a network access provider: we do not sell VPNs, proxy services, traffic relays, tunnelling or any technology whose purpose is to bypass network controls or local law. Our hosting agreement prohibits clients from running such services on our infrastructure, and we enforce it.
We decline projects that cannot be described in one sentence to a regulator. That includes gambling, adult content, pharmaceutical resale, fake goods and anything that looks like a front for fraud.
We process two categories of data: client account data (contracts, contacts, invoices) and visitor analytics for the sites we host. Analytics are first-party and aggregated; we do not run advertising trackers and we do not sell data.
Hosting contracts include a data processing agreement aligned with Korea's PIPA and the GDPR. Hosted databases are stored in the region you select at kick-off — Korea by default, Japan on request. Personal data is retained for the contract term plus seven years for tax records; visitor logs are deleted after 30 days.
Penetration tests run only against sites the client owns and only with a written scope that names the target, the window and the tester. We do not scan third parties, and we stop a test if it starts affecting shared infrastructure.
The acceptable use policy covers what may be hosted, including the explicit prohibition on proxy, VPN and relay services. Abuse reports are answered within one business day; phishing and malware sites are suspended immediately and reported.
If a security incident affects client data, we notify affected clients within 72 hours with what we know, what we have done and what they should do. Post-incident reports are published to the affected accounts, not to a marketing page.
Our team will complete it and send the registration documents you need.