LEGAL
Website privacy policy
This covers mantis.io. If you drive a vehicle with RECON fitted, the notice you want is the driver one.
Last updated
1. What this notice covers.
This notice covers personal data we collect when you visit mantis.io, send us an enquiry, apply to become a partner or subscribe to something we publish.
It does not cover footage. Video, location and driving data recorded by a RECON system in a vehicle is handled under a separate notice, because the roles are different: the operator running the fleet decides what is recorded, and we act on their instructions.
2. Who we are.
The controller for the personal data described here is MANTIS Live Ltd, company number NI653181, registered at 189 Airport Road West, Belfast, BT3 9ED, Northern Ireland.
Questions, requests and complaints about your data go to hello@mantis.io, or to the registered address above marked for the attention of the data protection lead.
3. What we collect.
Information you give us
- Fleet enquiries: your name, company, work email, phone number, fleet size and vehicle types, and whatever you write in the message field.
- Partner applications: the same, plus your territory and the telematics platforms you resell.
- Correspondence: anything you send us by email, and our reply.
Information collected automatically
- Device and connection data: IP address, browser, operating system, time zone and screen size.
- Usage data: the pages you open, how you arrived, what you clicked and how long you stayed.
- Cookie identifiers, where you have allowed the category they belong to.
We do not take payments on this website and we do not ask for special category data. Please do not send us health, criminal offence or incident data through the enquiry form.
4. Why we use it, and our lawful basis.
UK GDPR requires a lawful basis for every use. Ours are set out in full below rather than summarised.
| What we do | Data used | Lawful basis |
|---|---|---|
| Answer your enquiry and arrange a demo | Contact and fleet details, message | Legitimate interests, and steps taken at your request before entering a contract |
| Pass a qualified enquiry to the telematics partner or reseller who would serve you | Contact and fleet details | Legitimate interests in operating a channel model, disclosed at the point of enquiry |
| Assess a partner application | Application details | Steps taken at your request before entering a contract |
| Run, secure and debug the website | Device and connection data, necessary cookies | Legitimate interests in keeping the site available and defended |
| Understand how the site is used | Analytics cookies and usage data | Your consent |
| Show you MANTIS advertising on other sites | Marketing cookies | Your consent |
| Send you updates you asked for | Email address, preferences | Your consent, or the soft opt-in where you are an existing business contact and every message lets you stop |
| Meet legal, tax and regulatory duties, and defend claims | Whatever the duty or claim requires | Legal obligation, and legitimate interests in establishing and defending legal claims |
5. Who we share it with.
We do not sell personal data. We share it in four situations.
- Channel partners. MANTIS sells through telematics service providers and their resellers. If your enquiry is best served by one of them we pass your details on, and we tell you at the point of enquiry.
- Service providers acting on our instructions: website hosting, email, our CRM, and analytics and advertising providers where you have consented. They process on our written instructions and cannot use your data for their own purposes.
- Professional advisers, auditors and insurers where they need it.
- Authorities, courts and regulators where the law requires it, and buyers or investors in the context of a corporate transaction.
We use Google Analytics to understand site usage. You can opt out of Google Analytics across all sites using Google's browser add-on, and you can refuse the statistics category in our cookie settings.
6. Sending data outside the UK.
MANTIS operates in the UK, Ireland and the United States, and some of our providers are based in the United States. That means your data may be transferred there.
Where it is, we rely on UK adequacy regulations where they apply, and otherwise on the International Data Transfer Agreement or the UK Addendum to the European Commission's standard contractual clauses, with a transfer risk assessment on file. For data subject to EU GDPR the equivalent standard contractual clauses apply. Ask us and we will tell you which mechanism covers a particular transfer.
7. How long we keep it.
We keep personal data for as long as we still need it for the purpose we collected it for, then delete it or anonymise it.
| What | How long |
|---|---|
| Preference cookies | 6 months |
| Analytics cookies | Up to 2 years |
| Marketing and advertising cookies | 13 months |
| Login or authentication cookies | 1 week |
| Enquiry and partner application records | For the life of the relationship, and afterwards for the period needed to defend a claim |
| Marketing contacts | Until you unsubscribe, reviewed periodically for people who have stopped engaging |
| Records kept for tax and statutory reasons | The period the relevant law sets |
8. Your rights.
Under UK GDPR, and EU GDPR if you are in Ireland or the EU, you can ask us to do all of the following.
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong or incomplete.
- Delete it, where we have no continuing reason to keep it.
- Restrict what we do with it while a dispute about it is resolved.
- Send it to you, or to someone else, in a portable format, where the processing is based on consent or a contract and is automated.
- Stop processing based on legitimate interests, including profiling. If you object to direct marketing we stop, with no balancing test.
- Withdraw consent at any time, which does not affect what we did before you withdrew it.
Write to hello@mantis.io. We answer within one month, and tell you if we need longer because a request is complex. There is no charge unless a request is manifestly unfounded or excessive.
We do not make decisions about you by automated means on this website, and we do not profile website visitors in a way that has a legal or similarly significant effect.
If you are not satisfied you can complain to the Information Commissioner's Office at ico.org.uk, or in Ireland to the Data Protection Commission at dataprotection.ie. We would rather you came to us first.
9. How we protect it.
Access to personal data is limited to the people who need it. Data is encrypted in transit. Our providers are assessed before we use them and bound by written terms.
No system is immune, and saying otherwise would be the sort of claim we do not make. If a breach is likely to risk your rights we will tell the ICO within 72 hours and tell you where the law requires it.
10. Children.
This is a website for fleet operators, insurers and partners. It is not directed at children and we do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
11. Changes to this notice.
We update this notice when our practices change or the law does. The date at the top is the date of the current version. Where a change materially affects you we will tell you rather than rely on you noticing.