Privacy Notice
This Privacy Notice explains how personal data is handled in connection with Merval Research Membership on Squarespace.
1. Controller and separation
For the initial small-market test, the data controller is Nuno Merval, acting in his personal capacity and operating Merval Research.
For privacy requests or questions, contact:
Merval Research is operationally and data-separated from The House of Merval. We do not share Membership personal data with The House of Merval, and we do not use personal data to route, refer, market or cross-sell Members to it.
If the business is later transferred to a company, the transfer will be completed through a documented process. The Terms of Membership and this Privacy Notice will be updated, Members will be notified or asked for consent where legally required, and the relevant payment-account and data-controller information will be changed.
2. Data we collect and sources
We may collect:
account and identity details, including your name, email address and login information;
Membership and transaction information;
Member-support, privacy and research-corrections communications;
technical, security and usage information generated when you use the Squarespace service; and
cookie preferences.
We receive personal data directly from you, automatically through the service, and from the payment provider where needed to confirm or manage payment.
We do not receive or store your full payment-card details.
3. Why we use personal data and our legal bases
We use personal data to:
create and administer your Membership;
process and confirm payments;
provide access to Membership content;
communicate with you about the service;
answer support, privacy and research-corrections requests;
maintain the security and integrity of the service;
prevent fraud and misuse;
comply with applicable legal obligations;
establish, exercise or defend legal claims; and
improve the service where permitted.
Depending on the purpose and applicable law, we rely on:
performance of our contract with you;
compliance with legal obligations;
our legitimate interests in operating a secure and effective Membership, provided those interests do not override your rights; and
your consent where required, including for optional marketing and non-essential cookies.
Service communications relating to your Membership are separate from marketing. Marketing communications will be sent only where permitted by law and where you have made any required choice.
4. Cookies and similar technologies
Squarespace uses strictly necessary technologies for login, session management, checkout, security and the operation of the Member Area.
Where required by law, we will obtain your prior consent before using non-essential analytics or advertising cookies. The options to accept, reject and manage cookies will be equally accessible.
At launch, Merval Research will not use optional analytics or advertising cookies unless they are separately approved and disclosed.
You can review or change your choices through the website’s cookie settings control.
5. Service providers, disclosures and no sale
We use Squarespace for website hosting, forms, Membership access and related service functions. We also use the payment provider presented during checkout to process Membership payments.
These providers process personal data only to provide their respective services, subject to their applicable contractual and legal obligations.
We may disclose personal data to professional advisers, competent authorities or other parties where disclosure is lawfully required or reasonably necessary to protect our rights, the rights of others, the security of the service or public safety.
We do not sell Membership personal data or share it for cross-context behavioural advertising.
6. International transfers
Squarespace, the payment provider and other authorised service providers may process personal data in countries other than the country in which you live.
Where personal data is transferred outside the UK, the European Economic Area or another jurisdiction providing statutory protection, we will use an applicable lawful transfer mechanism and appropriate safeguards where required.
Information about relevant safeguards will be provided on request, subject to lawful limitations.
7. Retention and security
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including:
while your Membership remains active;
for legally required accounting and tax records;
to maintain service and account security;
to resolve disputes;
to establish, exercise or defend legal claims; and
to enforce the Terms of Membership.
When personal data is no longer required, it will be deleted or anonymised unless continued retention is required or permitted by law.
We use proportionate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No method of electronic transmission or storage can be guaranteed to be completely secure.
8. Your rights
Subject to applicable law, you may have the right to:
request access to your personal data;
request correction of inaccurate or incomplete data;
request erasure of your data;
request restriction of processing;
receive certain data in a portable format;
object to processing based on legitimate interests; and
withdraw consent at any time, without affecting processing lawfully carried out before withdrawal.
Individuals in the EU, EEA and UK may also complain to the competent data-protection supervisory authority in their country.
Residents of applicable US states may have rights to know, access, correct or delete personal data, obtain a portable copy, and opt out of certain sale, sharing or targeted-advertising activities. Merval Research does not sell Membership personal data or share it for targeted advertising.
To exercise a privacy right, contact:
We may request information reasonably necessary to verify your identity and protect your account.
9. Children
The Membership is not intended for anyone under the age of 18. We do not knowingly seek to collect personal data from anyone under 18.
If we become aware that personal data relating to a person under 18 has been collected, we will take appropriate steps to delete it.
10. Changes and contact
We may update this Privacy Notice when our processing activities, service providers or legal obligations change.
The current version will be published on the Merval Research website with its effective date.
For privacy requests or questions, contact:
Effective date: 27 August 2026
Version: 1.1