Privacy Policy

1. Who We Are

Mantapsec Ltd ("we", "us", "our") is a private limited company incorporated in England and Wales (Company Number 14883678), with its registered office at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

We are the data controller for personal information collected through this website (mantapsec.com) and in connection with our services. You can contact us at info@mantapsec.com.

2. What Information We Collect

We may collect the following categories of personal data:

• Contact information — name, email address, and any other details you provide when you contact us via email or enquiry forms.
• Communications data — the content of emails or messages you send us.
• Technical data — IP address, browser type, operating system, and pages visited, collected automatically when you browse our website.
• Business information — company name, role, and project requirements shared during client engagements.

We do not collect sensitive personal data (e.g. health, financial, or biometric data) through this website.

3. How We Use Your Information

We use personal data for the following purposes and legal bases under UK GDPR:

• To respond to your enquiries — lawful basis: legitimate interests / performance of a contract (pre-contractual).
• To deliver our services — lawful basis: performance of a contract.
• To comply with legal obligations — lawful basis: compliance with a legal obligation.
• To improve our website and communications — lawful basis: legitimate interests.

We do not use your personal data for automated decision-making or profiling.

4. How We Share Your Information

We do not sell, rent, or trade your personal information. We may share data with trusted third parties only where necessary:

• IT and hosting service providers who support our website infrastructure.
• Professional advisers (legal, accounting) where required by law or for legitimate business purposes.
• Regulatory or law enforcement authorities where we are required to do so by law.

Any third parties we engage are required to handle your data in compliance with applicable data protection law.

5. International Transfers

Our website is hosted within the UK or EEA. If any data processing occurs outside these areas, we ensure appropriate safeguards are in place, such as UK-approved Standard Contractual Clauses, in accordance with UK GDPR Chapter V.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Enquiry and communication records are typically retained for up to 6 years from the date of last contact, in line with standard UK limitation periods. Technical log data is retained for up to 12 months.

7. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data where there is no compelling reason for us to continue processing it.
• Restriction — request that we restrict processing of your data in certain circumstances.
• Portability — request your data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@mantapsec.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority.

8. Cookies

Our website may use essential cookies for basic functionality. We do not currently use tracking, advertising, or analytics cookies. If this changes, we will update this policy and implement an appropriate consent mechanism.

9. Security

We take reasonable technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our website is served over HTTPS. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

10. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies independently.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of our website after any update constitutes acceptance of the revised policy.

12. Contact Us