Short version: we only collect what you send through the contact form or email us directly. We don't track, don't retarget, don't sell data. Full version below.
The data controller is SIA Mandet, a private limited company registered in Latvia.
"We", "us", and "Mandet" in this policy mean SIA Mandet.
When you submit the contact form or email us, we get:
That's the full list. We don't run analytics, we don't drop cookies, we don't fingerprint you. No tracking pixels, no session recording, no behavioural ads.
Under the GDPR we need a legal basis for every kind of processing. Ours:
To reply to you, scope the work, and stay in touch if we end up working together. That's it. We don't enrich your email against marketing databases, we don't add you to drip campaigns.
Just the two of us (Raitis and Valts). For contact form delivery we use Resend - a transactional email service that carries the message from our site to our mailbox. They process the email in transit, don't use it for anything else, and their privacy policy is here.
Our site is hosted by Vercel. Fonts are served by Google Fonts. Neither uses your data to profile you, beyond what's needed to serve the site.
We don't share your info with anyone else. No sub-processors for marketing, no data brokers, nothing.
Resend, Vercel, and Google Fonts are based in the United States. That means when you contact us or load the site, some of your data leaves the EEA and touches US-hosted infrastructure.
We rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses - the legal mechanisms the EU Commission has approved for these transfers - as published by each provider. If any provider stops offering an adequate transfer mechanism, we'll swap them out.
Inquiry emails: for the length of the conversation plus a reasonable follow-up window (no more than 12 months after the last exchange), then archived or deleted.
Client work contacts: through the project, plus what we're required to keep for accounting and legal obligations under Latvian law (typically 5 years for invoicing records).
Server logs: short-window retention at the hosting layer (typically up to 30 days on Vercel).
You can ask us to:
Email hello@mandet.co. We'll handle it, usually within a few days and in any case within the 30-day window GDPR gives us. No forms, no ticket queue.
This site and our services aren't aimed at children. We don't knowingly collect data from anyone under 16. If you think we have, email us and we'll delete it.
None right now. If that changes we'll update this page and add a banner on the site.
We keep data on reputable providers (Vercel, Resend, Google Workspace-class mail), use strong passwords and 2FA, and only store what we actually need. No system is perfectly secure - if a breach affects your data, we'll tell you and the supervisory authority as required by law.
For anything privacy-related, first email us: hello@mandet.co.
If you're not satisfied with our response, you can complain to the Latvian data protection authority - Datu valsts inspekcija.
If we change what we collect or how we use it, we'll update the "Updated" date at the top and, for material changes, flag it on the site.
If anything on this page doesn't make sense, email and we'll explain in plain language - no legal runaround.