PRIVACY POLICY

1. General provisions

This Privacy Policy explains how the Mantica online store at mantica.ee collects, uses, stores and protects the personal data of customers and website visitors.

The controller of personal data is:

Mantiline OÜ
Registry code: 17600520
Address: Harju County, Tallinn, Mustamäe District, A. H. Tammsaare tee 101-7, Estonia
Email: info@mantica.ee

Hereinafter referred to as the Online Store or Mantica.

Mantica processes personal data in accordance with the European Union General Data Protection Regulation (GDPR), the laws of the Republic of Estonia and this Privacy Policy.

2. Personal data processed by Mantica

Depending on how a customer or website visitor uses Mantica’s services, Mantica may process the following personal data:

• name;
• email address;
• telephone number;
• billing and delivery address;
• order number and order contents;
• purchase history;
• selected delivery and payment method;
• payment-related information, excluding complete payment-card details where these are processed by a separate payment-service provider;
• customer-account information;
• information provided during customer-service enquiries, returns, complaints and other communications;
• technical information relating to use of the website, such as IP address, browser type, device information, approximate location based on the IP address and log data;
• information collected through cookies and similar technologies in accordance with the visitor’s choices and consent;
• other information voluntarily provided by the customer when communicating with Mantica.

Mantica’s product selection may include intimate products. Information about the contents of such orders may be particularly private for the customer. Mantica treats order contents as confidential and does not use purchase history to infer or create profiles concerning a customer’s sex life, sexual orientation or other sensitive personal characteristics.

3. Purposes and legal bases for processing personal data

Mantica processes personal data only for specified purposes and where an appropriate legal basis exists.

3.1 Receiving and fulfilling orders

Mantica uses the customer’s name, contact details, delivery address, order contents and other necessary information to process the order, arrange payment, dispatch the goods and communicate with the customer about the order.

Legal basis: entering into and performing a contract.

3.2 Managing customer accounts

If a customer creates an account in the Mantica online store, the account information is used to create the account, enable sign-in, display orders and provide account functions.

Legal basis: performance of a contract or taking pre-contractual measures at the customer’s request.

3.3 Returns, complaints and customer service

Mantica processes customer information to answer enquiries, handle withdrawal requests, returns, warranty matters and complaints, and protect its rights where necessary.

Legal basis: performance of a contract, compliance with legal obligations and, where necessary, Mantica’s legitimate interest in protecting and establishing its legal claims.

3.4 Accounting and other legal obligations

Information relating to orders and payments is processed to comply with accounting, taxation and other legal obligations.

Legal basis: compliance with a legal obligation.

3.5 Website security and prevention of misuse

Mantica may process technical information, logs and other necessary data to ensure the security of the website, customer accounts and ordering system, prevent fraud and misuse, and identify technical problems.

Legal basis: Mantica’s legitimate interest in ensuring the security of its online store and its customers’ information.

3.6 Marketing

Mantica sends newsletters, offers or other direct marketing by email or another electronic channel only where a valid legal basis exists.

Where marketing is based on the customer’s consent, the customer may withdraw that consent at any time by using the unsubscribe option in the message or by contacting info@mantica.ee.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

3.7 Analytics and non-essential cookies

Analytics, advertising and other cookies or similar technologies that are not necessary for the basic operation of the online store are used only after the visitor has provided consent, unless otherwise permitted by law.

Visitors can change or withdraw their consent as easily as they provided it.

4. Sources of personal data

Mantica primarily receives personal data:

• directly from the customer when placing an order, creating an account, using the contact form, sending an email or communicating in another way;
• from technical information generated automatically when the website and online store are used;
• from the payment-service provider regarding payment status and payment information necessary to fulfil the order;
• from delivery or logistics partners regarding the delivery status of an order;
• from another lawful source where necessary to fulfil the customer’s request or order.

If personal data is obtained from a source other than the customer, the customer will be informed to the extent required by applicable data-protection law.

5. Disclosure of personal data and service providers

Mantica does not sell its customers’ personal data.

To fulfil orders and operate the online store, Mantica may disclose personal data, only to the extent necessary, to the following recipients or categories of recipients:

• payment-service providers;
• banking and financial-service providers;
• transport, postal, parcel-machine and courier-service providers;
• Mantica’s partner warehouses, suppliers and dropshipping partners where necessary to deliver goods to the customer or arrange a return;
• web-hosting, server, ecommerce, IT, security and technical-support service providers;
• email and customer-communication service providers;
• accounting and financial-service providers;
• legal advisers, auditors and other professional advisers where necessary;
• government and supervisory authorities where disclosure is required by law.

Service providers receive only the information necessary to provide the relevant service.

The specific service providers used by Mantica may change over time. This Privacy Policy will be updated where necessary.

6. Dropshipping and partner warehouses

Mantica may use a dropshipping model under which goods are sent directly to the customer by a supplier or partner warehouse.

In such cases, fulfilling the order may require Mantica to provide the partner with information such as:

• the customer’s name;
• delivery address;
• telephone number or email address where required for delivery;
• information about the ordered product;
• order or shipment reference number.

No more personal data will be disclosed to the partner than is necessary to fulfil the order.

Where an order is dispatched by a partner warehouse, Mantica remains responsible for its customer communications and its own processing of personal data to the extent that Mantica determines the purposes and means of processing.

7. Transfers of personal data outside the European Economic Area

Some of Mantica’s service providers, suppliers or partners may be located outside the European Economic Area or may process personal data outside the European Economic Area.

In such cases, Mantica ensures that an appropriate legal basis and the safeguards required by data-protection law are in place.

Depending on the circumstances, a transfer may be based on a European Commission adequacy decision, the European Commission’s Standard Contractual Clauses or another transfer mechanism permitted under the GDPR.

Information about a specific international transfer and its safeguards can be requested from info@mantica.ee.

8. Retention of personal data

Mantica retains personal data only for as long as necessary to fulfil the purpose for which it was collected or to comply with a legal retention obligation.

Documents relating to orders and accounting, together with the personal data contained in them, are generally retained for seven years from the end of the relevant financial year to the extent required by accounting or other applicable legislation.

Customer-account information is retained while the account is in use. After the account is closed, information is retained only to the extent and for the period necessary to comply with legal obligations, resolve possible claims or protect legal rights.

Customer-service correspondence and information relating to returns and complaints are retained for as long as necessary to resolve the relevant matter and for the applicable period during which claims may be made or defended.

Marketing information is retained until the customer withdraws consent, objects to the processing or there is otherwise no valid legal basis for continued processing.

Technical logs and security information are retained only for as long as necessary to maintain website security, resolve technical issues and investigate possible misuse. The retention period is determined according to the type of data, the security risk and potential legal claims.

Cookie-retention periods depend on the particular cookie and are described in Mantica’s cookie settings or cookie list.

Cookie-consent choices are generally retained for 180 days, after which the visitor may be asked to make a new selection.

9. Cookies and similar technologies

Mantica’s website may use cookies and other similar technologies.

Essential cookies

Essential cookies enable the basic functions of the website and online store, including ordering, user sessions, security and storage of language or privacy preferences. They are used only to the extent necessary for the service to function.

Additional cookies

Analytics, advertising, personalisation and other cookies that are not required for the basic operation of the website are activated only after the visitor has provided prior consent, unless otherwise permitted by law.

Before providing consent, visitors must be able to obtain information about at least the purpose and duration of the cookies and any relevant third parties.

Visitors can change their cookie preferences and withdraw their consent through the “Cookie Preferences” link in the website footer. The current list of cookies, their purposes, providers and retention periods is displayed in the cookie settings.

10. Data-subject rights

Subject to the conditions established by applicable law, customers and website visitors have the right to:

• receive information about the processing of their personal data;
• request access to their personal data;
• request the correction of inaccurate or incomplete information;
• request the deletion of personal data where there is no longer a legal basis for processing it;
• request restriction of the processing of personal data;
• receive personal data they have provided in a structured, commonly used and machine-readable format and, where permitted by law, transmit it to another controller;
• object to the processing of personal data where processing is based on a legitimate interest;
• withdraw consent to the processing of personal data at any time;
• lodge a complaint with the Estonian Data Protection Inspectorate;
• apply to a court to protect their rights.

To exercise these rights, please contact info@mantica.ee.

Before fulfilling a request, Mantica may ask the person making the request to verify their identity where necessary to prevent personal data from being disclosed to an unauthorised person.

Mantica responds to data-subject requests without undue delay and generally within one month of receiving the request. Where a request is complex or extensive, the response period may be extended under the conditions permitted by law. The person making the request will be informed of any such extension.

11. Right to lodge a complaint

If a customer believes that Mantica is processing their personal data unlawfully or has infringed their rights, the customer is encouraged, where possible, to contact Mantica first at info@mantica.ee.

The customer has the right to lodge a complaint at any time with the Estonian supervisory authority:

Estonian Data Protection Inspectorate
Website: www.aki.ee/en

The customer also has the right to apply to a court to protect their rights.

12. Automated decision-making and profiling

Mantica does not make decisions concerning customers based solely on automated processing where those decisions would produce legal effects or similarly significantly affect the customer, unless the customer has been informed separately and a lawful basis exists for such processing.

Mantica does not use customers’ intimate-product purchase history to create profiles or infer information about their sex life, sexual orientation or other sensitive personal characteristics.

13. Security and confidentiality of personal data

Mantica applies appropriate technical and organisational security measures to protect personal data, taking into account the nature and scope of the processing and the possible risks.

Access to personal data is granted only to people and service providers who require it for their duties or to provide the relevant service.

Mantica takes reasonable measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction.

For orders involving intimate products, Mantica pays particular attention to customer privacy and the confidentiality of order contents.

14. Changes to this Privacy Policy

Mantica may amend this Privacy Policy if its methods of processing personal data, service providers, online-store functions or applicable legislation change.

Customers will be informed of significant changes in an appropriate manner where necessary.

The current version of this Privacy Policy is always available on the Mantica website.

Last updated: 20 October 2026