Privacy Policy

Summary

Most of what you send us is exactly what you typed into a form, and nothing else happens to it beyond replying. The one exception is analytics: we would like to use Google Analytics to see which pages are useful, and it only ever runs if you click Accept on the cookie banner. Decline it, or ignore it, and it never loads — no cookie is set, nothing is sent to Google. If you never see a banner at all, we are not currently running analytics on this site.

We do not run advertising pixels, session recording, or any tracking beyond that one optional tool. We do not build advertising profiles of visitors, and we do not sell or rent personal information to anyone, ever.

Information we collect

We collect information in three places, and only when you choose to submit it:

• Enquiry form — your name, email address, the plan you are interested in, and your message.
• Fit quiz — your name, email address, and the answers you selected during the quiz.
• Community Rate request — the category you select, your name, email address, and an optional note. No documentation upload exists anywhere in this flow, and we do not ask you to prove your circumstances by uploading personal records.

Information collected automatically

This site is hosted on Vercel. Like effectively all web hosting, Vercel processes standard technical request data — such as IP address, browser user-agent, requested URL and timestamp — for the purpose of serving the site, security and abuse prevention. We do not use that data to identify or profile individual visitors.

The web fonts used on this site are self-hosted and served from our own domain at build time, so loading a page does not send a request to a font provider. Images are served through our own image pipeline rather than by a third-party host.

Cookies and analytics

We use Google Analytics 4 to see which pages are useful and which aren’t. It is off by default. It only starts if you click "Accept" on the cookie banner that appears on your first visit, and it stops immediately if you click "Decline" or simply close the tab without answering. If you don’t see a banner at all, it means we aren’t currently running analytics on this site.

Accepting sets two cookies belonging to Google — typically named _ga and _ga_ followed by a container ID — used only to tell repeat visits apart and measure how people move through the pages. We have IP anonymisation switched on, and we do not enable Google Signals or any ad-personalisation feature, so this data is never linked to an advertising profile or used to target you anywhere else. We do not run any other analytics tool, advertising pixel, or session-recording script.

You can change your mind at any time from the "Cookie preferences" link in the footer of every page, which reopens the consent dialog. Declining after previously accepting stops new data being collected straight away; it does not retroactively delete what was already recorded — for that, use your Google account’s own activity controls, or email us and we will request the deletion on your behalf.

The banner itself is run by CookieHub, a consent management platform. It sets its own cookie to remember what you chose and keeps a record of that choice, which is what lets us prove consent was actually given rather than assumed. That cookie is strictly necessary for the banner to work and is set regardless of what you decide — including when you decline everything else.

Google’s own privacy policy, at policies.google.com/privacy, covers how Google processes this data once it reaches them. That is between you and Google; we only ever see the aggregate reports GA4 produces, not individual visitor identities.

How we use your information

We use the information you submit only to:

• Respond to your enquiry and have a conversation about your project.
• Prepare a proposal, scope or quote you have asked for.
• Apply the Community Rate where you have requested it and appear eligible.
• Deliver and support work you have engaged us for.
• Meet legal, tax and accounting obligations.

How your information is shared

We do not sell, rent or trade personal information. We share it only with the service providers we genuinely rely on to operate:

• Web3Forms — processes our form submissions and relays them to our email inbox. Anything you type into a form on this site passes through this provider.
• Our payment gateway — where you pay an invoice or a payment link, the gateway collects and processes your payment details directly. We never see or store your full card or bank details; we receive only confirmation of the outcome and a reference for reconciliation.
• Vercel — hosts the website and processes standard server request data as described above.
• Our email provider — receives and stores the message that results from your submission.
• CookieHub — runs the consent banner, and records which categories you allowed or declined so that decision can be honoured on your next visit and evidenced if ever questioned.
• Google — only if you accept the analytics category. Google Analytics 4 then receives the pages you visit and standard technical data about your browser, under the terms described in Cookies and analytics above.

Payments

This website does not take payments. There is no checkout, no card form and no payment gateway embedded anywhere on this site. Project payments are invoiced separately once a scope is agreed.

Where an invoice is settled through a third-party payment provider, your card or banking details are entered with that provider and handled under their terms and privacy policy. MANDER does not collect, see or store full card numbers.

Communications

We contact you in reply to what you sent us. We do not operate a marketing mailing list from this website, and submitting a form does not subscribe you to anything. If we ever introduce a newsletter it will be opt-in, and you will be able to unsubscribe from any message it sends.

Data security

The site is served over HTTPS, and we use reputable providers and sensible access controls on the inbox where enquiries land. We keep the number of places your data sits deliberately small, which is itself a meaningful security measure.

No method of transmission or storage is completely secure, and we cannot and do not guarantee absolute security. Please do not send us passwords, financial account numbers, government identification numbers or other sensitive personal data through the forms on this site — none of our forms ask for any of it.

Retention

Enquiries are kept for as long as needed to deal with them and to maintain a normal business record of client and prospective-client correspondence, after which they are deleted. Where we have an ongoing or completed client relationship, project correspondence and records may be retained longer where required for tax, accounting or legal purposes.

You can ask us to delete your enquiry at any time and we will do so unless we are required to keep it.

Your rights

Depending on where you live, you may have rights to access the personal information we hold about you, to have it corrected, to have it deleted, to object to or restrict how we use it, and to receive a copy of it. Residents of Canada, the United States (including under state privacy laws such as those in California) and the EEA/UK may have specific statutory rights of this kind.

To exercise any of these, email sales@mander.tech. We will not charge you for a reasonable request and we will not treat you differently for making one. Because we hold very little data, most requests are straightforward for us to fulfil.

Children's privacy

This site is intended for businesses and is not directed at children. We do not knowingly collect personal information from children. If you believe a child has sent us personal information, contact us and we will delete it.

Third-party links

This site links to external sites, including a team member’s personal portfolio and clients’ own websites. Once you follow a link away from this site, this policy no longer applies and we are not responsible for the privacy practices or content of those sites.

International users

MANDER works across the United States and Canada, and our service providers may process and store data in either country or elsewhere. If you contact us from outside those countries, you understand that your information will be transferred to and handled in jurisdictions whose data protection laws may differ from your own.

Changes to this policy

We may update this policy as the site or the business changes. The revision date at the top of this page always reflects the current version, and material changes will be reflected here before they take effect.

Contact

Questions about this policy, or any request relating to it, can be sent to sales@mander.tech and we will respond within a reasonable period.

Phone: +1 (857) 758-7182, Monday to Friday, 9am–5pm Pacific.

MANDER is a remote studio serving clients across Canada & the United States. We do not operate a public office or walk-in premises, so email is the correct and fastest route for every enquiry, including legal, billing and privacy requests.