Privacy policy
What we collect, why, and the control you keep over your data.
Generic preview version. It will be finalised with the operating entity's details before commercial launch.
Who is responsible
The Manai Ger project is responsible for the personal data processed through this site. The registered operating entity will be named in the legal notice before launch. For any privacy question, use the contact page.
What we collect
- Account data: your first and last name, email, phone number, and the role you choose (member, host, producer).
- Address: the billing or contact address you provide.
- Order data: what you ordered, from which ger and producer, and the status of each order.
- Preferences: your chosen pickup area and whether you want transactional and marketing emails.
- Technical data: minimal data needed to keep the service secure and working (for example the IP address used for rate limiting).
Why we use it
We use your data to create and manage your account, process and coordinate your orders and pickups, send you the transactional messages an order requires, keep the service secure, and, only if you opt in, send occasional news about producers and sales near you.
Legal basis
We process your data to perform the service you asked for (your account and orders), to meet our legal obligations (for example keeping records of sales), and, for marketing only, on the basis of your explicit consent, which you can withdraw at any time.
Who we share it with
We do not sell your personal data. We share only what is necessary with the providers that run the service: Cloudflare (hosting and database), our email provider (Resend, for transactional and opted-in emails), and the payment provider (QPay, to process payments). Each handles your data only to provide their part of the service.
How long we keep it
We keep account data while your account is active. Order records are kept as long as the law requires for commercial and tax purposes. When you close your account, we delete or anonymise what we are not legally required to retain.
Your rights
You can access, correct, export or delete your personal data, object to certain processing, and withdraw marketing consent. You manage your area and email preferences on your account page, and you can ask us for anything else through the contact page.
Security
Passwords are stored only as salted hashes, never in plain text. Connections are encrypted. We limit access to personal data to what running the service requires. See also our cookie policy.