Privacy Policy
Who We Are
Manta Rea Aquatics (“we“, “us“, “our“) operates the website at mantarea.com and is the data controller for personal data collected through this site.
We are based in Northern Ireland, United Kingdom, and are subject to the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Because Northern Ireland has a special status under the Windsor Framework, we also apply the standards of the EU GDPR where relevant to customers in the European Economic Area.
If you have any questions about this policy, please contact us using the details at the bottom of this page.
Data We Collect
We collect personal data in the following ways:
| Data | When collected |
|---|---|
| Name, email address, phone number | Account registration, checkout, contact forms |
| Billing and delivery address | Checkout |
| Payment information | Checkout (processed by our payment provider — we do not store card details) |
| Order history and preferences | When you place orders |
| Communications (email, WhatsApp, phone) | When you contact us, including DOA claims |
| Account credentials | Account registration (passwords are stored in hashed form only) |
| Data | Purpose |
|---|---|
| IP address, browser type, operating system | Security, fraud prevention, server logs |
| Pages visited, time on site, referring URL | Analytics (only with your consent) |
| Cookie data | See our Cookie Policy |
How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Processing and fulfilling your orders | Contract performance |
| Sending order confirmations, shipping updates, and DOA claim correspondence | Contract performance |
| Managing your customer account | Contract performance |
| Responding to enquiries and support requests | Legitimate interests / Contract |
| Fraud prevention and security | Legitimate interests / Legal obligation |
| Compliance with legal and tax obligations | Legal obligation |
| Sending marketing emails and promotions | Consent (you may opt out at any time) |
| Analytics to improve our website | Consent |
Legal Bases for Processing
Under UK GDPR and EU GDPR, we rely on the following legal bases:
Contract performance: Processing necessary to fulfil an order you have placed, or to take steps at your request before entering into a contract.
Legitimate interests: Where processing is necessary for our legitimate business interests (e.g. fraud prevention, improving our services), provided these are not overridden by your rights.
Legal obligation: Where we are required to process data to comply with UK law (e.g. tax records, HMRC requirements).
Consent: For marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.
How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Order records (name, address, items, payment) | 7 years (HMRC / legal requirement) |
| Customer account data | Duration of account, plus 2 years after last activity |
| DOA claim correspondence and media | 2 years from claim date |
| Marketing consent records | Until consent is withdrawn, plus 1 year |
| Server logs (IP addresses) | 90 days |
| Analytics data | 26 months (or as configured in your analytics platform) |
Your Rights
Under UK GDPR and EU GDPR you have the following rights regarding your personal data:
Cookies
We use cookies and similar tracking technologies on mantarea.com. For full details of the cookies we use, your choices, and how to manage them, please see our Cookie Policy.
You can manage your cookie preferences at any time using the cookie settings panel accessible via the banner at the bottom of this page.
International Data Transfers
Some of our third-party service providers may process data outside the UK or EEA. Where this occurs, we ensure appropriate safeguards are in place, such as:
— UK adequacy regulations or EU adequacy decisions
— Standard Contractual Clauses (SCCs) approved by the ICO or European Commission
— Other lawful transfer mechanisms
You may request details of the safeguards in place for any specific transfer by contacting us.
Contact & Complaints
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:
Get in Touch
We aim to respond to all privacy-related enquiries within 30 days.