Privacy policy

Who we are

This website is operated by Mantis Cyber Solutions LLP ("Mantis Cyber", "we", "us"), with its registered office at Bengaluru, India. For the purposes of the Digital Personal Data Protection Act, 2023 (DPDPA), we are the Data Fiduciary for the personal data described in this policy.

If you have any question about this policy or about how we handle your personal data, contact us at info@mantiscyber.com.

What we collect

We collect only the personal data needed to run this website and respond to you.

Information you give us through the contact form: your name, work email address, company and the details of your enquiry.
Technical data: your IP address and basic request information, used to protect the form from spam and abuse.
Usage data: aggregated, cookieless analytics about how the site is used, such as pages viewed, referring site, browser type and country. This data does not identify you.

We do not ask for, and you should not submit, sensitive personal data such as financial account details, government identifiers or health information through this website.

Why we use it

We use personal data for the following purposes:

To respond to your enquiry. When you submit the contact form, you consent to us using the details you provide to reply to you and to discuss the services you have asked about.
To protect the site. We use your IP address and related technical data to detect and prevent spam, abuse and automated submissions.
To understand how the site is used. We use aggregated analytics to improve the content and performance of the website.

We do not use your personal data for automated decision-making, and we do not sell it.

We share personal data only with service providers who help us run this website, and only to the extent needed for the following purposes and through the following providers:

Hosting, bot protection and analytics: Cloudflare, Inc., which hosts this website, provides spam protection for the contact form (Cloudflare Turnstile) and provides cookieless web analytics.
Email delivery: Resend, Inc., which delivers contact form submissions to our team.

These providers process data on our instructions and are bound by their own contractual and security obligations. We may also disclose personal data where required by law, regulation or a lawful request from a public authority.

Some of these providers operate infrastructure outside India. Where personal data is transferred outside India, we do so in accordance with the DPDPA and any restrictions notified by the Central Government.

How long we keep it

Enquiries: we keep contact form submissions for 12 months from the date of your last interaction with us, or for as long as is needed to provide services you engage us for, whichever is longer.
Technical and spam-protection data: retained for a short period, typically no longer than 30 days.
Analytics data: held only in aggregated form and does not identify you.

When personal data is no longer needed for the purpose it was collected for, or when you withdraw consent, we erase it unless we are required by law to retain it.

How we protect it

We apply reasonable security safeguards to protect personal data against unauthorized access, loss, alteration and disclosure. These include encryption of data in transit (HTTPS), restricted access to enquiry data on a need-to-know basis, security headers and bot protection on this website, and the use of reputable providers with independently assessed security controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Under the DPDPA, you have the right to:

Access a summary of the personal data we hold about you and how it is being processed.
Correct, complete or update personal data that is inaccurate or incomplete.
Erase your personal data when it is no longer needed for the purpose it was collected for, unless retention is required by law.
Withdraw consent at any time. Withdrawal does not affect processing carried out before it, and may mean we can no longer respond to your enquiry.
Grievance redressal through the contact below, and, if you are not satisfied with our response, the right to approach the Data Protection Board of India.
Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

Grievance officer and contact

For any privacy-related question, request or grievance, contact our Grievance Officer:

Name or designation: Privacy Officer
Email: info@mantiscyber.com
Address: Bengaluru, India

We aim to acknowledge grievances promptly and to resolve them within the time required by applicable law.

Cookies

This website does not set marketing or tracking cookies. Our analytics is cookieless and does not identify individual visitors. The contact form uses Cloudflare Turnstile to prevent spam; Turnstile may set a strictly necessary, short-lived cookie to verify that a request is not automated. If we introduce any non-essential cookies in future, we will update this policy and ask for your consent first.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page shows when it was last revised. Where a change is significant, we will highlight it on this page. Continued use of the website after a change takes effect means the updated policy applies.