Privacy Policy

Introduction

This Privacy Policy explains how Mantle International ("we", "us", "our") collects, uses, stores, shares and protects information when you visit https://mantle.international, submit an enquiry, engage us for services, or otherwise interact with us. We are committed to handling your personal data responsibly, lawfully, and transparently, in line with India's Digital Personal Data Protection Act, 2023 (DPDP Act), the EU/UK General Data Protection Regulation (GDPR) where applicable, and other relevant privacy regulations.

By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree with any part of it, please do not use our website or share personal information with us.

1. Who we are

Mantle International is a brand of PRATN Research Private Limited, a company incorporated in India and operating as a branding, advertising, social media, ad film production, AI marketing and research consultancy. Our principal website is https://mantle.international.

For privacy-related queries, data access requests, complaints, or any other concern regarding your personal data, you can reach us at hello@mantle.international or by post at our registered office in New Delhi, India. For the purposes of the GDPR (where it applies to you), PRATN Research Private Limited acts as the data controller of the personal data you share with us through this website.

2. Scope of this policy

This policy applies to personal data we collect:

• Through this website, including any forms, pop-ups, or interactive elements.
• When you correspond with us by email, phone, WhatsApp, or social media.
• When you engage us to deliver services, in your capacity as a client, prospective client, vendor, partner, talent, or collaborator.
• When you attend events, workshops, or meetings organised by us.

This policy does not apply to third-party websites, platforms, or tools that we may link to. Those services are governed by their own privacy policies, and we encourage you to review them before sharing information.

3. Information we collect

a) Information you provide

• Contact and enquiry data — name, email address, phone number, company name, role/designation, website URL, country, budget range, project scope, timelines, and any other details you choose to share through our enquiry form or popup.
• Email and messaging correspondence — the content of emails, WhatsApp messages, or social media direct messages you send us, including attachments, briefs, and reference materials.
• Engagement and contractual data — if you become a client, partner or vendor, we collect billing details, GST/tax identifiers, banking information needed to process payments, signed agreements, statements of work, invoices and project deliverables.
• Recruitment and talent data — résumés/CVs, portfolios, showreels, identity documents, and references when you apply for a role or register with our talent roster.
• Marketing data — preferences you indicate when subscribing to newsletters or updates, and your engagement with our marketing communications.

b) Information collected automatically

• Analytics data — we use Google Analytics (measurement ID: G-N5HDFBWG8N) to understand how visitors find and use our site. This collects pseudonymised data such as pages visited, scroll depth, time on page, session duration, approximate geographic location (city level), device type, browser, operating system, and referral source. Analytics is only loaded after you consent to analytics cookies.
• Server and security logs — our hosting provider may log IP addresses, browser fingerprints, access times, and request paths as part of standard server operation and to protect against abuse, fraud, scraping, and security incidents.
• Cookies and similar technologies — see Section 5 below for full details on cookies, local storage and similar technologies used on this site.

c) Information from third parties

• Referrals — when an existing client, partner or collaborator refers you to us, we may receive your name, contact details, and a brief context for the introduction.
• Public sources — for due diligence and prospecting, we may review publicly available information such as LinkedIn profiles, company websites, and press coverage.

We do not knowingly collect sensitive personal data (such as data relating to health, religion, political views, or sexual orientation) through this website. Please do not include such information in enquiries or correspondence unless strictly necessary for the engagement.

4. How we use your information

We use personal data for the following purposes:

• To respond to enquiries — reviewing your brief, replying to your message, scheduling discovery calls, and preparing proposals.
• To deliver services — performing the work agreed in our contract, including strategy, creative, production, media, research, and reporting.
• To manage the client relationship — billing, invoicing, payment collection, account management, and providing customer support.
• To improve our website and services — analysing aggregated analytics to refine user experience, content, and service offerings.
• To send relevant updates — sharing case studies, insights and updates with clients and subscribers who have opted in. You can unsubscribe at any time.
• To protect our business and users — preventing fraud, abuse, spam, security incidents, and enforcing our Terms of Service.
• To comply with legal obligations — including tax, accounting, anti-money-laundering, and responses to lawful requests from authorities.

We do not sell, rent, or trade your personal data to third parties. We do not use your data to train artificial-intelligence models or sell it to data brokers.

5. Legal bases for processing

Where the GDPR or similar laws apply, we rely on one or more of the following legal bases:

• Consent — for analytics cookies, marketing communications, and any optional data collection. You can withdraw consent at any time.
• Performance of a contract — to deliver the services we have agreed with you, or to take steps at your request before entering a contract.
• Legitimate interests — to run, secure, and grow our business in ways that are reasonable and do not override your rights — for example, replying to a B2B enquiry you sent us, or maintaining server logs for security.
• Legal obligation — to comply with applicable laws, including tax, accounting and regulatory requirements.

Under the DPDP Act, we rely on your consent or a legitimate use as defined in the Act (such as the purpose for which you have voluntarily provided your data).

6. Cookies and similar technologies

Cookies are small text files placed on your device when you visit our website. They help the site function, remember your preferences, and (with your consent) measure how the site is used. We also use related technologies such as browser local storage in limited cases.

We classify cookies into two broad categories:

• Strictly necessary — required for the site to function (for example, remembering your cookie preference). These do not need consent.
• Analytics — used to measure traffic and improve the site. These are loaded only after you give consent via the cookie banner.

You can withdraw consent at any time by clearing your browser cookies — the consent banner will reappear on your next visit. You can also block or delete cookies through your browser settings, although doing so may affect site functionality.

7. Third-party services and sub-processors

We use a small number of trusted third-party services to operate this website and our business. Each handles your data only for the purposes described below and under its own privacy policy:

• Google Analytics (Google LLC) — website analytics with IP anonymisation enabled. Governed by Google's Privacy Policy.
• Google Fonts (Google LLC) — font files served from Google's CDN. See Google Fonts privacy info.
• Bluehost — our website hosting provider. See Bluehost Privacy Policy.
• Email service providers — we use standard business email services (such as Google Workspace or equivalent) to send and receive correspondence.
• Payment and accounting tools — for invoicing and payment collection from clients, governed by their respective privacy policies and applicable tax law.

In addition, when delivering specific projects we may rely on creative production tools, cloud storage, project-management platforms, and AI-assisted tools. Where such tools process personal data on our behalf, we choose reputable providers and put appropriate safeguards in place.

8. International data transfers

We are based in India, and some of our service providers (including Google) are located in the United States and other countries. When personal data is transferred outside your country of residence, we take reasonable steps to ensure it is protected — for example, by relying on providers that publish standard contractual clauses, certifications, or equivalent safeguards.

If you are located in the EEA, UK or other regions with cross-border transfer rules, by using this website and contacting us you acknowledge that your data may be processed in jurisdictions whose laws may differ from those in your country.

9. Data retention

We keep personal data only for as long as we need it for the purposes set out in this policy, or as required by law. Indicative retention periods are:

• Enquiries that do not become engagements — up to 24 months, after which they are deleted or anonymised.
• Client engagement records — for the duration of the engagement and up to 7 years thereafter, to comply with tax, accounting and contractual obligations.
• Analytics data — 14 months in Google Analytics.
• Marketing subscriber data — until you unsubscribe or request deletion.
• Recruitment data — up to 12 months from your last interaction, unless you ask us to keep your profile on file longer.

When data is no longer needed, we either delete it securely or anonymise it so that it cannot reasonably be linked back to you.

10. Your rights

Depending on your jurisdiction, you may have some or all of the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion ("right to be forgotten") — request that we erase your personal data, subject to legal retention obligations.
• Withdraw consent — for analytics cookies, marketing emails or any other consent-based processing.
• Object or restrict — object to certain types of processing (such as direct marketing) or ask us to restrict how we use your data.
• Portability — receive certain data in a structured, commonly used format.
• Nominate — under the DPDP Act, you may nominate another person to exercise your rights in the event of your death or incapacity.
• Lodge a complaint — with the Data Protection Board of India or your local supervisory authority.

To exercise any of these rights, email hello@mantle.international with a brief description of your request. We may ask for proof of identity to make sure we are responding to the right person. We aim to respond within 30 days, and will let you know if we need more time.

11. Data security

We take the security of your information seriously and use a combination of technical, organisational and contractual safeguards. These include HTTPS encryption across the entire site, access controls so that only authorised personnel can view personal data, secure passwords and multi-factor authentication on critical accounts, regular software updates, and limited data sharing with vetted third parties.

Despite our efforts, no method of transmission over the internet or method of electronic storage is 100% secure. If we become aware of a personal data breach that is likely to result in significant harm, we will notify affected individuals and the appropriate authorities in line with applicable law.

12. Children's privacy

Our website and services are intended for business audiences and are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take steps to delete it.

13. Changes to this policy

We may update this policy from time to time to reflect changes in our services, technology, legal requirements or business practices. The "Last updated" date at the top of the page reflects the most recent revision. Where changes are material, we will take reasonable steps to bring them to your attention, for example through a banner on the website or by email if you are a client or subscriber. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

14. Contact and complaints

If you have any questions, concerns or complaints about how we handle your personal data, please contact us first at hello@mantle.international. We take such concerns seriously and will work with you in good faith to resolve them.

If you are not satisfied with our response, you may have the right to lodge a complaint with a competent data protection authority, such as the Data Protection Board of India under the DPDP Act, or your local supervisory authority under the GDPR or other applicable law.