Privacy policy
Updated
This policy explains what personal data Mahnovas Digital ("we", "us") collects through this website, why, and what rights you have. We have kept it short and specific to what the website actually does.
Who is responsible
Mahnovas Digital is the data controller for personal data collected through this website. You can contact us about privacy at mahnovasdigital@gmail.com.
What we collect
When you send an enquiry
Our contact form asks for your name and email address, and optionally your company, current website, country, the service you are interested in, a rough budget, a preferred start time and your message. We use this only to read and reply to your enquiry and, if you choose to work with us, to prepare a proposal.
To protect the form from abuse
When you submit the form, we briefly process your IP address to limit repeated submissions. We store only a one-way hashed version of it, which is deleted automatically within 24 hours.
When you contact us by email or WhatsApp
If you email us or message us on WhatsApp, we receive the details you choose to share. Those services are operated by Google and by WhatsApp (Meta) under their own privacy terms.
What we do not collect
This website does not use analytics, advertising or social media tracking, and it does not load fonts or scripts from third-party services. See our cookie policy for the single cookie we use.
Legal basis
- Replying to your enquiry and preparing a proposal: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)), and our legitimate interest in answering business enquiries (Article 6(1)(f)).
- Protecting the website and form from abuse: our legitimate interest in keeping the service secure (Article 6(1)(f)).
Who receives your data
Enquiries are delivered to our business email inbox, which is provided by Google. Our website hosting provider and the email delivery service used to send form messages process data on our behalf. We do not sell personal data or share it for marketing.
International transfers
Some of our service providers may process data outside the European Economic Area. Where that happens, we rely on recognised safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework where the provider is certified.
How long we keep it
We keep enquiry messages for as long as needed to handle the enquiry and any work that follows. If no project follows, we delete enquiry messages within 24 months of our last contact. Hashed IP records used for abuse prevention are deleted within 24 hours.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to how we use it, and to receive it in a portable format. To use these rights, email us. We will reply within one month.
You also have the right to complain to a data protection authority. In Denmark this is Datatilsynet (datatilsynet.dk). If you live elsewhere, you can contact the authority in your country.
Changes
If we change how the website handles personal data, for example by adding analytics, we will update this policy and the date at the top before the change takes effect.