Privacy Policy

Last updated: September 2026

This Privacy Policy explains how Menta ("Menta", "we", "us" or "our") collects, uses, shares and protects personal data when you visit our website at mentaexperts.com (the "Site") or submit an inquiry to us.

Menta is a web design and development practice operated by Luis Alfredo Ponce Guevara. For any matter related to this Policy or to your personal data, you can contact us at info@mentaexperts.com.

We act as the data controller for the personal data described below, which means we decide why and how it is processed.

1. Scope of this Policy

This Policy applies to personal data we process about:

• Visitors who browse the Site.
• Prospective clients and business contacts who submit our inquiry or proposal request form.

This Policy does not cover third-party websites that we link to. Those sites have their own privacy policies, and we are not responsible for them.

We address requirements that may apply to visitors in different regions, including the European Economic Area (EEA), the United Kingdom, the United States (including California), Brazil and Australia, as well as Ecuador, where Menta operates. Where a specific regional right applies to you, the relevant section below explains it.

2. The personal data we collect

Information you provide to us

When you complete our inquiry or proposal request form, we collect the information you choose to enter, which may include:

• Your contact name.
• Your email address.
• Your phone number (optional).
• Your company name.
• Your industry.
• The services you are interested in.
• Your project budget range.
• Your project timeline.
• A free-text description of your project, challenges and goals.

Please only include in the free-text field the information you are comfortable sharing. Avoid entering sensitive personal data or confidential third-party information that is not necessary for us to respond.

Information we collect automatically

When you use the Site, we and our service providers collect certain technical and usage data through cookies and similar technologies, including:

• Device and browser information (such as device type, operating system and browser version).
• Approximate location derived from your IP address.
• Pages viewed, links clicked, time spent and navigation paths.
• Behavioral analytics such as mouse movement, scrolling and clicks, and session recordings, captured to help us understand how the Site is used.
• Advertising and measurement identifiers used to evaluate marketing performance.

We do not collect financial account data, government identification numbers, passwords or similar sensitive identifiers through the Site.

3. The tools and service providers we use

We rely on a small number of established providers to operate the Site and understand its performance. Each one acts as our processor or as an independent controller for the data it handles:

• Cloudflare provides the hosting and content delivery infrastructure for the Site and protects it against attacks and malicious traffic; it processes technical data such as IP addresses and security logs.
• Web3Forms processes the submissions you send through our forms and delivers them to our inbox.
• Sanity hosts our content management system and delivers the Site's images, and Bunny Stream delivers the videos in our portfolio. Both process standard technical data, such as your IP address, when your browser loads that content.
• Google Analytics 4 helps us measure traffic and understand how visitors use the Site.
• Google Search Console reports on how the Site performs in search results. It works with aggregated data and does not track or identify individual visitors.
• Microsoft Clarity provides heatmaps and session recordings so we can see how the Site is used and improve it. Recordings are configured to mask sensitive input fields.
• Google Ads measures the performance of our marketing campaigns and may be used for remarketing, which shows our ads to people who have previously visited the Site.

Some pages embed videos from YouTube or Vimeo. These embeds load only when you choose to play them, and from that point they are governed by those providers' own privacy policies.

These analytics and advertising tools run subject to your cookie choices: if you visit from the European Economic Area, the United Kingdom or Switzerland, they only run if you accept them through our cookie banner, and wherever you are you can opt out at any time through the “Cookie settings” link in the footer, as described in Section 5.

4. Why we use your data and our legal grounds

We process personal data for the purposes below. Where the EEA or UK General Data Protection Regulation applies, the legal basis for each purpose is shown in brackets.

• To respond to your inquiry and prepare a proposal. We use the information you submit to reply, scope your project and send you a proposal. (Legal basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business inquiries.)
• To communicate with you about your inquiry and any resulting engagement. (Legal basis: legitimate interest, or performance of a contract once one exists.)
• To measure and improve the Site through analytics and behavioral analytics. (Legal basis: legitimate interest, subject to the note on consent below.)
• To run and measure our marketing, including conversion tracking and remarketing. (Legal basis: legitimate interest, subject to the note on consent below.)
• To keep the Site secure and prevent misuse, including basic server and security logs. (Legal basis: legitimate interest.)
• To comply with legal obligations that apply to us. (Legal basis: compliance with a legal obligation.)

A note on consent and cookies. Our analytics and advertising tools rely on cookies and similar technologies. If you visit from the EEA, the United Kingdom or Switzerland, we only use these cookies with your prior consent, which we ask for through the cookie banner shown on your first visit (legal basis: consent, which you can withdraw at any time through the “Cookie settings” link in the footer). Where consent is not required, we rely on our legitimate interest, and you can still refuse these cookies at any time using the same controls, described in Section 5.

Where we rely on legitimate interest, you can object, as described in Section 9.

5. Cookies and similar technologies

The Site uses cookies and similar technologies, grouped into the following categories:

• Strictly necessary, which are required for the Site to function and cannot be switched off.
• Analytics, which help us understand how the Site is used.
• Advertising, which support marketing measurement and remarketing.

If you visit from the European Economic Area, the United Kingdom or Switzerland, analytics and advertising cookies are off by default and are only set if you accept them through the cookie banner shown on your first visit. You can accept or reject all of them, or choose per category under “Manage preferences”. Elsewhere, these cookies are active by default. In all cases, you can review or change your choice at any time through the “Cookie settings” link in the footer of every page. Your choice is stored in your browser for 12 months, after which we will ask again.

The specific cookies and similar technologies in use are:

• Google Analytics: _ga and _ga_W2EHH9DMY6 (analytics; duration up to 2 years).
• Microsoft Clarity: _clck and _clsk (analytics; duration up to 1 year and 1 day, respectively) and MUID, set by Microsoft (duration up to 1 year).
• Google Ads: _gcl_au and related conversion cookies (advertising; duration up to 3 months), used only while our advertising campaigns are active.
• Cloudflare, which protects the Site against attacks and malicious traffic, may set security cookies such as cf_clearance and __cf_bm (strictly necessary; their durations are controlled by Cloudflare and are typically short).
• Our own consent record, stored in your browser under the key mx_consent (strictly necessary; kept for 12 months), which remembers the choice you made in the banner, and a session flag (mx_lead_sent) that prevents counting the same form submission twice.

Durations are approximate and set by each provider, and may change with provider updates. You can also refuse or remove cookies at any time through the following controls:

• Your browser settings, which let you block or delete cookies. Disabling strictly necessary cookies may affect how the Site works.
• Google Analytics, through Google's opt-out browser add-on.
• Google Ads, through your Google Ads settings.
• Microsoft Clarity, as described in Microsoft's privacy documentation.

6. How we share your data

We do not sell your personal data for money.

We share personal data only with:

• The service providers listed in Section 3, who process data on our behalf or in connection with the services they provide to us.
• Professional advisors, such as legal or accounting advisors, where reasonably necessary.
• Authorities or third parties where we are required to do so by law, or to protect our rights, safety or property.

When we use advertising and remarketing tools, your data may be shared with the relevant advertising provider for measurement and ad personalization. In some regions this is treated as "sharing" of personal information, and you can opt out as described in Section 9.

7. International data transfers

Some of our providers, including Google, Microsoft, Cloudflare and Web3Forms, are based in the United States, so your personal data may be transferred to and processed there. Others are based in Europe, such as Sanity (Norway) and Bunny Stream (Slovenia).

Where data is transferred out of the EEA, the United Kingdom or Switzerland, we rely on recognized safeguards. Google, Microsoft and Cloudflare are certified under the EU-US Data Privacy Framework, together with its UK and Swiss extensions, which the European Commission recognizes as providing an adequate level of protection. As an additional safeguard, transfers may also be covered by Standard Contractual Clauses approved by the European Commission. You can request more information about these safeguards using the contact details in this Policy.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes described in this Policy:

• Inquiry and proposal data is kept while we handle your request and for up to 5 years afterward so we can follow up, unless a client relationship begins, in which case it is kept for the duration of that relationship and as required for our records.
• Analytics and advertising data is retained according to the settings we configure with each provider and that provider's own retention periods.
• Security and server logs are kept for a short period as needed for security and troubleshooting.

When we no longer need personal data, we delete it or anonymize it.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access: to ask for a copy of the data we hold about you.
• Rectification: to ask us to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data in certain circumstances.
• Restriction: to ask us to limit how we use your data.
• Portability: to receive your data in a portable format, or have it sent to another provider.
• Objection: to object to processing based on legitimate interest, and to object to direct marketing at any time.
• Withdraw consent: to withdraw consent at any time, without affecting processing that already took place.

To exercise any right, contact us at info@mentaexperts.com. We will respond within the time required by the law that applies to you. We may need to verify your identity before acting on a request.

Region-specific rights

EEA and United Kingdom. Your rights are described above under the GDPR and UK GDPR. You also have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

California (United States). If you are a California resident, you may have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information for money, but the use of advertising and remarketing tools may qualify as "sharing" under California law. You can opt out using the browser and provider controls described in Section 5, or by contacting us. We will not discriminate against you for exercising your rights.

Brazil. If you are in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, anonymization or deletion, portability and information about sharing. You may also contact the national authority (ANPD).

Australia. If you are in Australia, you may request access to and correction of the personal information we hold about you under the Australian Privacy Principles, and you may raise concerns with the Office of the Australian Information Commissioner (OAIC).

Ecuador. If you are in Ecuador, you have rights under the Ley Orgánica de Protección de Datos Personales, including access, rectification, deletion, opposition, portability and the suspension of processing, and you may file a claim with the Superintendencia de Protección de Datos Personales (SPDP).

10. Automated decisions

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Advertising and remarketing tools use profiling to show relevant ads, but this does not have a legal or similarly significant effect on you, and you can opt out using the controls in Section 5.

11. Children

The Site is intended for businesses and professional audiences. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

We take reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, provide additional notice. We encourage you to review this Policy periodically.

14. Contact us

If you have questions about this Policy or wish to exercise your rights, contact us at:

Email: info@mentaexperts.com