Privacy Policy

Introduction

This Privacy Policy explains how Mantle International ("we", "us", "our") collects, uses, stores, shares and protects information when you visit https://mantle.international, submit an enquiry, engage us for services, or otherwise interact with us. We are committed to handling your personal data responsibly, lawfully, and transparently, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the EU/UK General Data Protection Regulation (GDPR) where applicable, and other relevant privacy regulations.

By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use our website or share personal information with us.

1. Who we are

Mantle International is a brand of PRATN Research Private Limited, a company incorporated in India and operating as a branding, advertising, social media, ad film production, AI marketing and research consultancy. Our principal website is https://mantle.international.

For privacy-related queries, data access requests, complaints, or any other concern regarding your personal data, you can reach us at hello@mantle.international or by post at our registered office in New Delhi, India. For the purposes of the GDPR (where it applies to you), PRATN Research Private Limited acts as the data controller of the personal data you share with us through this website.

2. Scope of this policy

This policy applies to personal data we collect:

• Through this website, including any forms, pop-ups, or interactive elements.
• When you correspond with us by email, phone, WhatsApp, or social media.
• When you engage us to deliver services, in your capacity as a client, prospective client, vendor, partner, talent, or collaborator.
• When you attend events, workshops, or meetings organised by us.

This policy does not apply to third-party websites, platforms, or tools that we may link to. Those services are governed by their own privacy policies, and we encourage you to review them before sharing information.

3. Information we collect

a) Information you provide

• Contact and enquiry data — name, email address, phone number, company name, role/designation, website URL, country, budget range, project scope, timelines, and any other details you choose to share through our enquiry form or pop-up.
• Email and messaging correspondence — the content of emails, WhatsApp messages, or social media direct messages you send us, including attachments, briefs, and reference materials.
• Engagement and contractual data — if you become a client, partner or vendor, we collect billing details, GST/tax identifiers, banking information needed to process payments, signed agreements, statements of work, invoices and project deliverables.
• Recruitment and talent data — résumés/CVs, portfolios, showreels, identity documents, and references when you apply for a role or register with our talent roster.
• Marketing data — preferences you indicate when subscribing to newsletters or updates, and your engagement with our marketing communications.

b) Information collected automatically

• Analytics data — we use Google Analytics (measurement ID: G-N5HDFBWG8N) to understand how visitors find and use our site. This collects pseudonymised data such as pages visited, scroll depth, time on page, session duration, approximate geographic location (city level), device type, browser, operating system, and referral source. Analytics is only loaded after you consent to analytics cookies.
• Server and security logs — our hosting provider may log IP addresses, browser fingerprints, access times, and request paths as part of standard server operation and to protect against abuse, fraud, scraping, and security incidents.
• Cookies and similar technologies — see Section 6 below for full details on cookies, local storage and similar technologies used on this site.

c) Information from third parties

• Referrals — when an existing client, partner or collaborator refers you to us, we may receive your name, contact details, and a brief context for the introduction.
• Public sources — for due diligence and prospecting, we may review publicly available information such as LinkedIn profiles, company websites, and press coverage.

We do not knowingly collect sensitive personal data (such as data relating to health, religion, political views, or sexual orientation) through this website. Please do not include such information in enquiries or correspondence unless strictly necessary for the engagement.

4. How we use your information

We use personal data for the following purposes:

• To respond to enquiries — reviewing your brief, replying to your message, scheduling discovery calls, and preparing proposals.
• To deliver services — performing the work agreed in our contract, including strategy, creative, production, media, research, and reporting.
• To manage the client relationship — billing, invoicing, payment collection, account management, and providing customer support.
• To improve our website and services — analysing aggregated analytics to refine user experience, content, and service offerings.
• To send relevant updates — sharing case studies, insights and updates with clients and subscribers who have opted in. You can unsubscribe at any time.
• To protect our business and users — preventing fraud, abuse, spam, security incidents, and enforcing our Terms of Service.
• To comply with legal obligations — including tax, accounting, anti-money-laundering, and responses to lawful requests from authorities.

We do not sell, rent, or trade your personal data to third parties. We do not use your data to train artificial-intelligence models or sell it to data brokers.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Consent — for analytics cookies, marketing communications, and any optional data collection. You can withdraw consent at any time.
• Performance of a contract — to deliver the services we have agreed with you, or to take steps at your request before entering a contract.
• Legitimate interests — to run, secure, and grow our business in ways that are reasonable and do not override your rights; for example, replying to a B2B enquiry you sent us, or maintaining server logs for security.
• Legal obligation — to comply with applicable laws, including tax, accounting and regulatory requirements.

Under the DPDP Act, we rely on your consent or a legitimate use as defined in the Act (such as the purpose for which you have voluntarily provided your data).

6. Cookies and similar technologies

Cookies are small text files placed on your device when you visit our website. They help the site function, remember your preferences, and (with your consent) measure how the site is used. We also use related technologies such as browser local storage in limited cases.

We classify cookies into two broad categories:

• Strictly necessary — required for the site to function (for example, remembering your cookie preference). These do not need consent.
• Analytics — used to measure traffic and improve the site. These are loaded only after you give consent via the cookie banner.

You can withdraw consent at any time by clearing your browser cookies — the consent banner will reappear on your next visit. You can also block or delete cookies through your browser settings, although doing so may affect site functionality.

7. Third-party services and sub-processors

We use a small number of trusted third-party services to operate this website and our business. Each handles your data only for the purposes described below and under its own privacy policy:

• Google Analytics (Google LLC) — website analytics with IP anonymisation enabled. Governed by Google's Privacy Policy.
• Google Fonts (Google LLC) — font files served from Google's CDN. See Google Fonts privacy info.
• Bluehost — our website hosting provider. See Bluehost Privacy Policy.
• Email service providers — we use standard business email services (such as Google Workspace or equivalent) to send and receive correspondence.
• Payment and accounting tools — for invoicing and payment collection from clients, governed by their respective privacy policies and applicable tax law.

In addition, when delivering specific projects we may rely on creative production tools, cloud storage and collaboration platforms, and specialist freelancers or production partners. Where they process personal data on our behalf, we share only what is necessary for the project and require them to keep it confidential and secure.

8. International data transfers

Some of the service providers listed above store or process data on servers located outside India, including in the United States and the European Union. Where personal data is transferred across borders, we take reasonable steps to ensure it receives an appropriate level of protection, such as relying on the provider's standard contractual clauses or equivalent safeguards, and we comply with any transfer restrictions notified under the DPDP Act.

9. How long we keep your data

We keep personal data only for as long as it is needed for the purposes described in this policy, and then delete or anonymise it:

• Enquiries that do not lead to an engagement — kept for up to 24 months so we can follow up on your request, then deleted.
• Client, vendor and contractual records — kept for the duration of the engagement and afterwards for as long as required by applicable tax, accounting and company laws.
• Recruitment and talent data — kept for up to 12 months after your application or last contact, unless you ask us to keep it longer for future opportunities.
• Marketing data — kept until you unsubscribe or withdraw consent.
• Analytics data — kept in accordance with the retention settings configured in Google Analytics.

10. How we protect your data

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. These include encrypted connections (HTTPS), access controls limited to team members who need the data, secure business email and storage services, and confidentiality obligations for our staff and partners. No method of transmission or storage is completely secure, but if we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by law.

11. Your rights

Depending on the law that applies to you, you have some or all of the following rights over your personal data:

• Access — to request a summary of the personal data we hold about you and how it is processed.
• Correction and completion — to ask us to correct inaccurate or incomplete data, or to update it.
• Erasure — to ask us to delete your data where it is no longer needed or where you withdraw consent, unless we are required to keep it by law.
• Withdrawal of consent — to withdraw any consent you have given, at any time. This does not affect processing carried out before you withdrew it.
• Objection and restriction — where the GDPR applies, to object to or ask us to restrict certain processing, including direct marketing.
• Data portability — where the GDPR applies, to receive the data you provided to us in a structured, commonly used format.
• Nomination — under the DPDP Act, to nominate another person to exercise your rights in the event of your death or incapacity.
• Grievance redressal — to raise a complaint with us about how we handle your data.

To exercise any of these rights, email hello@mantle.international. We may need to verify your identity before acting on your request, and we aim to respond within 30 days. If you are not satisfied with our response, you may complain to the Data Protection Board of India or, where the GDPR applies, to your local data protection authority.

12. Children's privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has shared personal data with us, please contact us and we will delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology or legal requirements. The latest version will always be available on this page, with the "Last updated" date shown at the top. Where changes are significant, we will take reasonable steps to let you know.

14. Contact us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

• Email — hello@mantle.international
• Post — PRATN Research Private Limited, registered office, New Delhi, India