Privacy Policy

Who we are

Manto Marketing is a UK-based digital marketing studio working with restaurants and takeaways. This policy covers information collected through our website, www.mantostudio.co.uk, and through any direct contact you have with us by email, form, WhatsApp or phone.

For the purposes of UK GDPR, the controller of your data is Manto Marketing (a UK sole trader). If you have any questions about this policy or want to exercise any of your rights, please get in touch using the details at the bottom of this page. A postal address is available on request.

What we collect

We try to collect as little information as possible. Specifically:

Information you give us — when you fill in the contact / audit form, we collect your restaurant name, restaurant address, website (optional), mobile number, and email address. If you contact us directly by email or WhatsApp, we keep the contents of that conversation.
Information collected automatically— basic, privacy-friendly analytics (pages visited, country, device type, referrer, and page-speed measurements) so we know which content is useful. This runs without cookies and is not used to identify you personally. If — and only if — you accept cookies, we then load Microsoft Clarity (session recordings and heatmaps, with the contact form masked) and Google Analytics, to see how the site is used and improve it. Until you accept, neither one loads. See the “Cookies” section below.
Cookies— see the “Cookies” section below.

We do notcollect special-category data (e.g. health, religion, ethnicity), payment information (we don’t take payment via the website), or anything from children under 13. Our services are aimed at business owners.

What we use it for

Replying to your enquiry and, if you become a client, delivering the work we’ve agreed.
Sending you the audit findings, proposal, or follow-up we agreed during your initial conversation.
Improving the website — understanding which pages are useful and which are confusing.
Meeting our legal and tax obligations (e.g. keeping invoices for the period required by HMRC).

We do not sell or share your data with third parties for their own marketing. We do not buy data either — if we have your details, it’s because you gave them to us.

We process your data on these legal bases:

Consent— for non-essential cookies and analytics, if you choose to accept them.
Contract— to provide services to clients we’ve agreed to work with.
Legitimate interest— to reply to enquiries you’ve made and to keep our website secure.
Legal obligation— to keep records for tax and accounting purposes.

Who else sees your data (sub-processors)

We use a small number of third-party services to run the website. Each one is GDPR-compliant. They process some of your data on our behalf:

Vercel Inc. hosts the website. Server logs (IP address, request URL, timestamp) are automatically generated and retained briefly for security. See Vercel’s privacy policy.
Formspree, Inc. handles the contact / audit form. When you submit the form, your details are passed to Formspree which forwards them to us. See Formspree’s privacy policy.
Vercel Web Analytics & Speed Insights give us cookieless, aggregated visitor and page-speed numbers. No cookies, no cross-site tracking, and nothing that identifies you. This runs for everyone because it does not store anything on your device.
Microsoft Corporation (Clarity) — only if you accept cookies— records session replays and heatmaps so we can see where the site confuses people. The contact form is masked, so the details you type into it are not captured. These recordings don’t include directly identifying details like your name, but they are still information about you, so they only run after you accept. See Microsoft’s privacy statement.
Google LLC (Analytics) — only if you accept cookies— measures how the site is used so we can improve it. Until you accept, Google’s tag is not loaded, so it receives no data from your visit. If we later run Google Ads, we’ll ask separately before using your data for advertising. See Google’s privacy policy.

We don’t use a Facebook/Meta Pixel or sell your data to ad-tech networks. The analytics above are used only to improve this site and our own advertising — never to build profiles of you for third parties.

International data transfers

Some of the trusted services we use are based in the United States, so a limited amount of your personal data (for example your IP address, the contents of the contact form, or behaviour data from session recordings) may be transferred there. Whenever that happens, UK law requires us to keep your data protected to the same standard as it would be in the UK. Here is who that applies to and the safeguard each one relies on:

Google LLC (Analytics & Ads)— United States. Covered by the UK Extension to the EU-US Data Privacy Framework (the “UK–US data bridge”), backed by Standard Contractual Clauses with the UK Addendum.
Microsoft Corporation (Clarity)— United States. Covered by the UK Extension to the EU-US Data Privacy Framework (the “UK–US data bridge”).
Vercel Inc. (hosting)— United States. Covered by the UK Extension to the EU-US Data Privacy Framework and, under its data-processing agreement, the UK International Data Transfer Agreement with Standard Contractual Clauses.
Formspree, Inc. (contact form)— United States. Covered by Standard Contractual Clauses with the UK Addendum.

If you’d like a copy of the specific safeguard relied on for any of these transfers, just ask using the contact details at the bottom of this page and we’ll send it to you.

Cookies

We keep cookies to a minimum and set nonefor tracking until you accept them. Here’s exactly what runs:

Essential storage (always on, no consent needed) — we remember your cookie choice in your browser’s local storage so we don’t ask again, and use a temporary session marker so an arrival from an AI search engine (ChatGPT, Perplexity, etc.) is only counted once. These set no cookies and don’t identify you.
Cookieless analytics (always on)— Vercel Web Analytics and Speed Insights count visits and measure page speed without any cookies or cross-site tracking.
Cookies set only after you accept— Microsoft Clarity (session replay and heatmaps) and Google Analytics. If you click Reject, neither one loads at all and no cookies are set. They only load — and only then set cookies — once you click Accept.

You can change your mind at any time: use the Cookie settingslink in the footer of any page to bring the banner back and choose again. Clearing this site’s data in your browser does the same.

How long we keep your data

Form submissions / enquiries— kept for 24 months from the last contact, then deleted, unless you become a client.
Client records and invoices— kept for 6 full tax years after the end of the relationship, as required by HMRC.
Server logs— rolling 30 days, then automatically discarded.

Your rights

Under UK GDPR you have the following rights, free of charge, in relation to data we hold about you:

See what we hold about you (right of access)
Have it corrected if it’s wrong (right to rectification)
Have it deleted (right to erasure / “right to be forgotten”)
Restrict or object to how we use it
Receive a copy in a portable format
Withdraw consent for analytics at any time

To exercise any of these, contact us using the details at the bottom of this page. We aim to respond within 14 days and are required to respond within one month.

If you’re unhappy with how we’ve handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk or by phone on 0303 123 1113. We’d appreciate the chance to put things right first.

Security

The website is served over HTTPS with HSTS. Form submissions are sent over TLS to Formspree. Access to client records is protected by passwords and two-factor authentication where available. We can never guarantee 100% security, but we take reasonable steps.

Changes to this policy

If we make material changes to this policy, we’ll update the “Last updated” date at the top of the page and, where appropriate, contact you directly. Older versions are available on request.

Contact us

The best way to reach us about anything in this policy is via the contact form or by email at hello@mantostudio.co.uk.

How we handle your information.