1. Who we are
MELDRA LTD (“meldra”, “we”, “us”) is a private limited company registered in England and Wales, company number 17519223, with its registered office at 167–169 Great Portland Street, 5th Floor, London W1W 5PF, United Kingdom. We are the controller of the personal data described in this notice.
For anything about your data, email enquiry@meldra.ai or write to us at our registered office.
2. What this notice covers
This notice covers the meldra.ai website, enquiries you send us, and accounts on Wattrail (wattrail.meldra.ai). Insight has its own notice: Insight's is at insight.meldra.ai/Privacy ↗. Where we run Wattrail for a customer, the customer decides how its meter data is used and we act as its processor under a written agreement.
3. If you use Wattrail
Wattrail is our smart meter data product at wattrail.meldra.ai. Accounts are usually set up for people at an organisation we work with, such as a pilot partner.
- Your account: your email address, your password (we store only a one-way hash, never the password itself), a phone number if you choose to receive sign-in codes that way, and the organisation and role your administrator gives you.
- Signing in: one-time sign-in codes, which expire after use, and the time of each sign-in.
- Security and audit records: what your account does in Wattrail (for example sign-ins, changes and queries), with the time and the IP address it came from. We keep these to protect the service and so that our customers can check who did what.
- Data you work with: files you upload and the questions you ask. Meter data that belongs to a customer is handled as described in section 2: the customer decides how it is used and we act as its processor.
Why, and our lawful basis: to provide Wattrail under our contract with your organisation (our legitimate interest in providing the service your organisation asked for, or performance of a contract where you are our customer), to keep it secure (our legitimate interest), and to meet legal obligations.
In your browser: Wattrail does not use advertising or analytics cookies. It keeps your sign-in token in your browser's local and session storage so that you stay signed in, and removes it when you sign out. The Wattrail pages load fonts and icons from Google Fonts and Cloudflare's cdnjs service, which receive your IP address when a page loads.
Who processes it for us:
- Vercel, Inc., which hosts the Wattrail pages.
- Railway Corporation, which runs our servers and database in its EU West region.
- Resend, which sends sign-in codes by email.
- Anthropic, PBC, only if you use the AI assistant: your question and the data needed to answer it are sent to Anthropic to generate the answer.
Some of these providers are in the United States. Where data leaves the UK we rely on the safeguards described in section 7.
How long we keep it: account details for as long as your account is active, and deleted within 90 days after it is closed. Security and audit records are kept for as long as our contract with your organisation requires, so that they can still be checked, and then deleted.
4. What we collect on the website
- When you use our contact form: your name, work email, organisation, role, the size of your meter estate if you give it, which product you are interested in, and your message.
- When you email us: your email address, name and whatever you choose to tell us.
- When you visit the site: our hosting provider records technical information needed to deliver and protect the site, such as your IP address, browser type, the page requested and the time.
We do not use analytics, advertising or tracking cookies, and we do not buy or sell personal data.
5. Why we use it, and our lawful basis
- To reply to your enquiry and arrange demos or pilots: our legitimate interest in responding to people who contact us, or, where you are asking about becoming a customer, taking steps at your request before entering a contract.
- To run, secure and fix the website: our legitimate interest in keeping the site available and protected from abuse.
- To meet legal obligations: for example keeping business records or responding to lawful requests.
We will only send you marketing emails if you ask us to, and you can opt out at any time.
6. Cookies and local storage on the website
The website does not set cookies. If you close the announcement bar, your browser remembers that for the rest of your visit using session storage, which never leaves your device and is cleared when you close the tab. Fonts are served from meldra.ai itself, so no third-party font service receives your details.
7. Who we share it with
- Netlify, Inc., which hosts this website and processes contact-form submissions on our behalf.
- Our email and business software providers, to receive and manage your messages.
- Professional advisers or authorities, where the law requires it or to protect our legal rights.
These providers act on our instructions and may store data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Addendum or the UK Extension to the EU–US Data Privacy Framework.
8. How long we keep it
We keep enquiries for up to 24 months after our last contact with you, unless you become a customer, in which case we keep business records for as long as the law requires. Hosting logs are kept by our provider for a short period for security and are then deleted.
9. Your rights
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and in some cases move it to another provider. If you are in the European Union, you have the same rights under the EU GDPR. Email enquiry@meldra.ai; we will reply within one month.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to the Information Commissioner's Office at ico.org.uk ↗.
10. Automated decisions and children
We do not make decisions about you based solely on automated processing. This website is intended for business users and is not aimed at children.
11. Changes to this notice
We will update this notice when our practices change and show the new date at the top. This version took effect on 25 October 2026. It adds section 3 (Wattrail).