Privacy Policy

We may collect the following information.

1.1 User information

When users contact us, register interest, submit an enquiry, or use the platform, we may collect:

• Name
• Email address
• Phone number
• Postcode or approximate location
• Enquiry details
• Communication history

We do not ask users to provide full home addresses unless needed for a specific service.

1.2 Merchant information

We may collect and display merchant/business information, including:

• Business name
• Business category
• Business address or trading location
• Postcode or area served
• Business phone number
• Website or public social media links
• Opening hours
• Publicly available business description

Where merchant information relates only to a limited company or organisation, it may not be personal data. Where it identifies an individual, sole trader, owner, or small partnership, it may be personal data under UK data protection law.

1.3 Technical information

We may collect limited technical information needed to operate and secure the website, such as:

• IP address
• Browser type
• Device type
• Pages visited
• Error logs
• Security logs

At present, we do not use marketing cookies, tracking cookies, or advertising cookies.

We may collect information:

• Directly from users
• Directly from merchants
• From publicly available sources
• From business websites, public directories, social media pages, or official registers
• From communications with us

We use personal information to:

• Operate the Mandii platform
• Help users discover relevant local merchants
• Display merchant business listings
• Respond to enquiries
• Correct, update, or remove business listings
• Prevent misuse, fraud, spam, or security issues
• Improve the platform
• Comply with legal obligations

We do not sell user personal information. We do not use user contact details for third-party marketing. We do not show user personal information publicly.

Under UK GDPR, we must have a lawful basis for using personal information. The ICO states that privacy notices should explain the lawful basis, purposes, retention, sharing, and rights.

We rely on the following lawful bases:

4.1 Legitimate interests

We rely on legitimate interests to:

• Create and display merchant listings using business information
• Help users discover local businesses
• Keep business listings accurate and useful
• Protect the platform from misuse
• Respond to merchant correction or removal requests

Our legitimate interest is to operate a useful local business discovery platform. We only use information in a way that is limited, relevant, and generally expected in a business listing context.

4.2 Contract or pre-contract steps

Where a user or merchant asks us to provide a service, create an account, or respond to a request, we may process information to take steps before entering into a contract or to perform a contract.

4.3 Legal obligation

We may process information where required by law, regulation, court order, or lawful authority.

4.4 Consent

Where we rely on consent, we will ask clearly. You can withdraw consent at any time.

If you are a merchant, owner, manager, or authorised representative and believe a listing is inaccurate, outdated, or should not be displayed, contact us at geton.mandii@gmail.com.

We may ask you to verify your connection with the business before making changes.

We will review requests fairly and may correct, restrict, or remove information where appropriate.

We may share limited personal information with:

• Website hosting providers
• Database and cloud infrastructure providers
• Email and communication providers
• Professional advisers, such as lawyers or accountants
• Regulators, authorities, or courts where legally required

We do not sell user personal information.

We do not publicly display user name, email, phone number, or enquiry details.

If any service provider stores or processes information outside the UK, we will take reasonable steps to ensure appropriate safeguards are in place, such as UK-approved transfer mechanisms where required.

We keep personal information only as long as needed.

Indicative retention periods:

• User enquiries: up to 24 months after last contact
• User account information: while the account is active, then up to 24 months
• Merchant listing information: while the business appears active or until correction/removal is appropriate
• Legal, tax, or dispute records: up to 6 years where necessary
• Security logs: usually up to 12 months unless needed for investigation

Under UK data protection law, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion
• Object to processing based on legitimate interests
• Restrict processing
• Request data portability
• Withdraw consent where consent is used
• Complain to the ICO

To exercise your rights, contact geton.mandii@gmail.com.

You can also complain to the UK Information Commissioner's Office at ico.org.uk.

We use reasonable technical and organisational measures to protect personal information, including access controls, secure hosting, restricted database access, and operational safeguards.

No online platform is completely risk-free, but we take reasonable steps to protect information from unauthorised access, loss, misuse, or alteration.

Mandii is not intended for children under 13. We do not knowingly collect information from children.

At present, we do not use marketing cookies, tracking cookies, or advertising cookies.

If we later introduce cookies or analytics tools, we will update this Privacy Policy and, where legally required, ask for consent.

We may update this Privacy Policy from time to time. The latest version will be posted on this page with the updated date.

For privacy questions, correction requests, listing removal requests, or data rights requests, contact:

Mandii
Email: geton.mandii@gmail.com