Privacy Policy

1 · Who we are

Manolinq builds websites, landing pages and AI systems for small businesses. When you fill in a form on this website or contact us by email or WhatsApp, Manolinq is the data controller for the personal data you provide — meaning we decide why and how it is used, and we are responsible for protecting it.

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR.

2 · What we collect

We only collect what you actively give us, plus a small amount of technical context that helps us answer you properly. We do not buy data, and we do not build profiles.

Through the audit request form

Collected automatically with your submission

• Page address — which page you submitted the form from, so we know what you were reading.
• Browser identification (user agent) — the browser and device type your request came from. We use this to filter out automated spam submissions.
• Time of submission — so we can honour our 24-hour reply promise.

We do not use analytics software, advertising pixels or tracking scripts on this website.

If you email or message us directly

We keep the contents of that conversation, along with your email address or phone number, for as long as it takes to help you — and afterwards under the retention rules in section 6.

3 · Why we use it, and on what legal basis

Under the GDPR we need a lawful basis for everything we do with your data. Ours are:

• To respond to your request and prepare a quote — Article 6(1)(b): steps taken at your request before entering into a contract. Without this data we simply cannot reply to you.
• To deliver a project you have hired us for — Article 6(1)(b): performance of a contract.
• To protect the form against spam and abuse — Article 6(1)(f): our legitimate interest in keeping the service working. We limit this to the technical data listed above.
• To meet Belgian bookkeeping and tax obligations — Article 6(1)(c): legal obligation, where an invoice has been issued.

We do not send marketing emails or newsletters. If that ever changes, we will ask for your consent first, and you will be able to withdraw it at any time.

4 · Who else sees your data

We do not sell your data and we do not share it for advertising. We do rely on a small number of service providers to run this website. They process data on our instructions only.

We may also share data with our accountant, or with authorities where the law requires it.

5 · Where your data is stored

Our database is hosted by Supabase in London (region eu-west-2), United Kingdom. The UK sits outside the European Economic Area, but the European Commission has formally decided that it offers an equivalent level of data protection. That decision was renewed on 19 December 2025 and runs until 27 December 2031, so this transfer needs no additional safeguards.

Netlify and Telegram run infrastructure in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses, which both providers include in their data processing terms.

6 · How long we keep it

• Enquiries that do not become projects — deleted after 12 months.
• Client project data — kept for the duration of the project and 2 years afterwards, so we can support what we built.
• Invoices and accounting records — kept for 7 years, as Belgian law requires.

You can ask us to delete your data sooner. See section 7.

7 · Your rights

Under the GDPR you can ask us, at any time and free of charge, to:

• Access — get a copy of the personal data we hold about you.
• Rectify — correct anything that is wrong or incomplete.
• Erase — delete your data, unless we are legally required to keep it.
• Restrict — pause our use of your data while a dispute is sorted out.
• Object — object to processing we base on legitimate interest.
• Port — receive your data in a structured, machine-readable format.

Email support.manolinq@gmail.com and we will respond within one month. We may ask a question or two to confirm it is really you before we act.

8 · Cookies and tracking

This website sets no cookies. There is no analytics software, no advertising pixel and no tracking script, so there is nothing for you to accept or refuse — which is why you see no cookie banner here.

The one third-party request the site makes is to Google Fonts, described in sections 4 and 5. That request does not set a cookie on your device, but Google does receive your IP address as part of it.

9 · Security

The site is served over HTTPS, so everything you type into the form is encrypted in transit. Form submissions are written to our database through a server-side function, which means our database credentials are never present in the code your browser downloads. Access to the database is limited to the owner of this business.

No system is perfect. If a data breach ever occurs that is likely to put your rights at risk, we will notify the Belgian Data Protection Authority within 72 hours and inform you directly.

10 · Changes to this policy

If we change how we handle personal data, we update this page and change the date at the top. Significant changes affecting people we already hold data for will be communicated by email.

11 · Contact and complaints

Questions about this policy, or about your data, go to support.manolinq@gmail.com. We would always rather hear from you first.

If you are not satisfied with how we handle it, you have the right to lodge a complaint with the Belgian supervisory authority: