LEGAL
Privacy Notice
What we collect about you on mantis.io and as a RECON user, why, and what you can do about it. Cookies are covered in section 9.
Last updated . Version 1.1.
1. What this notice covers, and what it does not.
This notice covers personal data we hold as controller: data about you when you visit mantis.io, contact us, apply to become a partner, attend an event, or hold a user account on RECON (your login, role, settings and support history).
It does not cover video, location, event or driving data recorded by a RECON system in a vehicle. The fleet operator decides what is recorded and who sees it, and we act on their instructions. That data is covered by the RECON Driver Privacy Notice and by our data processing terms with the operator.
2. Who we are.
The controller is MANTIS Live Ltd for the UK, Ireland and everywhere outside the United States, and MANTIS Live Inc for the United States.
MANTIS Live Ltd, company number NI653181, registered office c/o A&L Goodbody Northern Ireland LLP, 42-46 Fountain Street, Belfast BT1 5EF; trading address Unit 3 Curlew Pavilion, 189 Airport Road West, Belfast BT3 9ED, Northern Ireland.
MANTIS Live Inc, a Delaware corporation, registered agent address 8 The Green, Ste R, Dover, DE 19901; office at 1515 E Cesar Chavez St, Ste 100, Austin, TX 78702.
Questions, requests and complaints go to hello@mantis.io, or in writing to either address marked for the attention of the data protection lead.
3. What we collect.
What you give us
Enquiries and demo requests: name, company, work email, phone number, fleet size and vehicle types, and your message. Partner applications: the same, plus territory and the telematics platforms you resell. Event registrations. Anything you send us by email and our reply.
RECON user accounts
Your name, work email, organisation, role and permissions, login activity, settings, and the support tickets you raise. Your organisation creates and controls your account.
Collected automatically
IP address, browser, operating system, time zone and screen size; the pages you open, how you arrived, what you clicked and how long you stayed; cookie identifiers where you have allowed the category they belong to; and, in RECON, the actions you take in the platform, which are logged for security and audit.
We do not take payments on the website and we do not ask for special category data. Please do not send health, criminal offence or incident data through the enquiry form.
4. Why we use it.
| What we do | Data used | Legal basis (UK and EU) |
|---|---|---|
| Answer your enquiry and arrange a demo | Contact and fleet details, message | Legitimate interests; steps at your request before a contract |
| Pass a qualified enquiry to the telematics partner or reseller who would serve you | Contact and fleet details | Legitimate interests in operating a channel model, disclosed at the point of enquiry |
| Assess a partner application | Application details | Steps at your request before a contract |
| Provide, secure and support RECON for your organisation | Account data, login and activity logs, support tickets | Performance of our contract with your organisation; legitimate interests in security and audit |
| Run, secure and debug the website | Device and connection data, necessary cookies | Legitimate interests in keeping the site available and defended |
| Understand how the website is used | Analytics cookies, usage data | Your consent |
| Show you MANTIS advertising on other sites | Marketing cookies | Your consent |
| Identify the organisation a website visit comes from, so our sales team can follow up | IP address, cookie identifiers | Your consent |
| Send you updates you asked for | Email address, preferences | Consent, or the soft opt-in for existing business contacts; every message lets you stop |
| Meet legal, tax and regulatory duties and defend claims | Whatever the duty or claim requires | Legal obligation; legitimate interests in defending claims |
Where we rely on legitimate interests we have weighed our interest against your rights and concluded the processing is what a business contact would expect. Ask and we will send you that assessment.
5. Who we share it with.
We do not sell personal data. We share it in four situations: with the telematics partner or reseller best placed to serve your enquiry, and we tell you at the point of enquiry; with service providers acting on our instructions (hosting, email, CRM, support tooling, and analytics, advertising and company-identification providers where you have consented or, in the United States, have not opted out), who may not use it for their own purposes; with professional advisers, auditors and insurers where they need it; and with authorities, courts and regulators where the law requires, or with a buyer or investor in a corporate transaction.
6. International transfers.
MANTIS operates in the UK, Ireland and the United States, and some providers are based in the United States, so your data may be transferred between those countries. For data subject to UK or EU GDPR we rely on adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, or the EU standard contractual clauses, with a transfer risk assessment on file. Ask and we will tell you which mechanism covers a particular transfer.
7. How long we keep it.
| What | How long |
|---|---|
| Enquiry and partner application records | For the life of the relationship, then for the period needed to defend a claim |
| RECON user account data | For as long as your organisation keeps your account active, then per the retention in their agreement with us |
| Marketing contacts | Until you unsubscribe, reviewed periodically for people who have stopped engaging |
| Records kept for tax and statutory reasons | The period the relevant law sets |
| Cookies | See section 9 |
8. Your rights.
You can ask us to tell you what we hold about you and give you a copy; correct anything wrong; delete it where we have no continuing reason to keep it; restrict what we do with it while a dispute is resolved; give it to you or someone else in a portable format where the law provides for that; stop processing based on legitimate interests, including profiling; and withdraw consent at any time without affecting what was done before.
Write to hello@mantis.io. We answer within one month, or tell you if a complex request needs longer. There is no charge unless a request is manifestly unfounded or excessive. We do not make decisions about website visitors or users by automated means that have a legal or similarly significant effect.
For RECON accounts, your organisation controls who has an account, so some requests (for instance deleting your account) go to them. We will help them answer you.
9. Cookies.
We use four categories of cookie and similar technology. Necessary cookies make the site and RECON work (session, security, cookie preferences) and cannot be switched off; they last for the session or up to one week for login. Preference cookies remember choices such as your region and last six months. Analytics cookies tell us how the site is used and last up to two years; we use Google Analytics, and you can refuse the category here or opt out across all sites with Google's browser add-on. Marketing cookies let us show MANTIS advertising on other sites and last up to thirteen months. Marketing cookies also include ZoomInfo WebSights, which identifies the company a visit comes from. In the UK and Ireland it runs only if you allow marketing cookies. In the United States it runs unless you opt out.
You choose which categories to allow when you first visit, and you can change your mind at any time through the cookie settings link in the footer. Withdrawing is as easy as giving consent. Your browser settings also let you block or delete cookies, although blocking necessary cookies will stop parts of the site working.
10. Security.
Access to personal data is limited to the people who need it. Data is encrypted in transit and at rest. Providers are assessed before we use them and bound by written terms. No system is immune, and we will not claim otherwise. If a breach is likely to put your rights at risk we will tell the relevant regulator within the time the law sets and tell you where the law requires it.
11. Children.
The website and RECON are for fleet operators, insurers, partners and their staff. They are not directed at children and we do not knowingly collect data from anyone under 18. If you think we have, tell us and we will delete it.
12. Where the two markets differ.
United Kingdom and Ireland
Your rights in section 8 are those under UK GDPR and the Data Protection Act 2018, or EU GDPR if you are in Ireland or elsewhere in the EU. If you are not satisfied with our response you can complain to the Information Commissioner's Office at ico.org.uk or, in Ireland, the Data Protection Commission at dataprotection.ie. We would rather you came to us first.
United States
Depending on your state you may have the right to know what personal information we hold, to access and correct it, to delete it, to opt out of its sale or sharing for cross-context behavioural advertising, and not to be discriminated against for exercising these rights. We do not sell personal information. Where marketing cookies are enabled, the law of some states treats that as sharing; you can opt out through the cookie settings link, and we honour Global Privacy Control signals as an opt-out. We use ZoomInfo WebSights by default. You can opt out through the cookie settings link or “Do not sell or share my personal information”, and we treat a Global Privacy Control signal as an opt-out. We do not knowingly collect sensitive personal information through the website. Some state laws exclude data an employer holds about an employee; for RECON accounts, requests may therefore need to go to your organisation. To exercise a right, or to appeal a decision we make on a request, write to hello@mantis.io. We verify your identity before acting and respond within the time your state's law sets.
This section is the notice at collection for California residents. The categories of personal information collected, the purposes, the recipients and the retention periods are set out in sections 3 to 7.
13. Changes.
We update this notice when our practices or the law change. The date at the top is the date of the current version. Where a change materially affects you we will tell you rather than rely on you noticing.