Privacy Policy

Last updated: June 2026

This Privacy Policy explains how Menta ("Menta", "we", "us" or "our") collects, uses, shares and protects personal data when you visit our website at mentaexperts.com (the "Site") or submit an inquiry to us.

Menta is a web design and development practice operated by Luis Alfredo Ponce Guevara. For any matter related to this Policy or to your personal data, you can contact us at info@mentaexperts.com.

We act as the data controller for the personal data described below, which means we decide why and how it is processed.

1. Scope of this Policy

This Policy applies to personal data we process about:

• Visitors who browse the Site.
• Prospective clients and business contacts who submit our inquiry or proposal request form.

This Policy does not cover third-party websites that we link to. Those sites have their own privacy policies, and we are not responsible for them.

We address requirements that may apply to visitors in different regions, including the European Economic Area (EEA), the United Kingdom, the United States (including California), Brazil and Australia, as well as Ecuador, where Menta operates. Where a specific regional right applies to you, the relevant section below explains it.

2. The personal data we collect

Information you provide to us

When you complete our inquiry or proposal request form, we collect the information you choose to enter, which may include:

• Your contact name.
• Your email address.
• Your phone number (optional).
• Your company name.
• Your industry.
• The services you are interested in.
• Your project budget range.
• Your project timeline.
• A free-text description of your project, challenges and goals.

Please only include in the free-text field the information you are comfortable sharing. Avoid entering sensitive personal data or confidential third-party information that is not necessary for us to respond.

Information we collect automatically

When you use the Site, we and our service providers collect certain technical and usage data through cookies and similar technologies, including:

• Device and browser information (such as device type, operating system and browser version).
• Approximate location derived from your IP address.
• Pages viewed, links clicked, time spent and navigation paths.
• Behavioral analytics such as mouse movement, scrolling and clicks, and session recordings, captured to help us understand how the Site is used.
• Advertising and measurement identifiers used to evaluate marketing performance.

We do not collect financial account data, government identification numbers, passwords or similar sensitive identifiers through the Site.

3. The tools and service providers we use

We rely on a small number of established providers to operate the Site and understand its performance. Each one acts as our processor or as an independent controller for the data it handles:

• Webflow hosts the Site and processes the submissions you send through our forms.
• Google Analytics 4 helps us measure traffic and understand how visitors use the Site.
• Google Search Console reports on how the Site performs in search results. It works with aggregated data and does not track or identify individual visitors.
• Microsoft Clarity provides heatmaps and session recordings so we can see how the Site is used and improve it. Recordings are configured to mask sensitive input fields.
• Google Ads measures the performance of our marketing campaigns and may be used for remarketing, which shows our ads to people who have previously visited the Site.

These analytics and advertising tools are active on the Site. We have not yet implemented a cookie consent banner, and we are working to add one. Until it is in place, you can control or opt out of these tools using the browser settings and provider opt-outs described in Section 5.

4. Why we use your data and our legal grounds

We process personal data for the purposes below. Where the EEA or UK General Data Protection Regulation applies, the legal basis for each purpose is shown in brackets.

• To respond to your inquiry and prepare a proposal. We use the information you submit to reply, scope your project and send you a proposal. (Legal basis: steps taken at your request before entering a contract, and our legitimate interest in responding to business inquiries.)
• To communicate with you about your inquiry and any resulting engagement. (Legal basis: legitimate interest, or performance of a contract once one exists.)
• To measure and improve the Site through analytics and behavioral analytics. (Legal basis: legitimate interest, subject to the note on consent below.)
• To run and measure our marketing, including conversion tracking and remarketing. (Legal basis: legitimate interest, subject to the note on consent below.)
• To keep the Site secure and prevent misuse, including basic server and security logs. (Legal basis: legitimate interest.)
• To comply with legal obligations that apply to us. (Legal basis: compliance with a legal obligation.)

A note on consent and cookies. Our analytics and advertising tools rely on cookies and similar technologies. In some regions, including the EEA and the United Kingdom, non-essential cookies normally require your prior consent. We have not yet implemented a cookie consent banner, and we are working to add one. Until it is in place, you can refuse or opt out of these cookies at any time using the controls in Section 5. Once the banner is live, we will rely on your consent for analytics and advertising and will update this Policy.

Where we rely on legitimate interest, you can object, as described in Section 9.

5. Cookies and similar technologies

The Site uses cookies and similar technologies, grouped into the following categories:

• Strictly necessary, which are required for the Site to function and cannot be switched off.
• Analytics, which help us understand how the Site is used.
• Advertising, which support marketing measurement and remarketing.

Analytics and advertising cookies are currently active on the Site. We have not yet implemented a cookie consent banner or preference center; one is planned, and when it is live you will be able to accept or decline non-essential cookies directly on the Site.

In the meantime, you can refuse or remove these cookies at any time through the following controls:

• Your browser settings, which let you block or delete cookies. Disabling strictly necessary cookies may affect how the Site works.
• Google Analytics, through Google's opt-out browser add-on.
• Google Ads, through your Google Ads settings.
• Microsoft Clarity, as described in Microsoft's privacy documentation.

We will publish the specific cookies in use, including their names and durations, when the consent tool is implemented.

6. How we share your data

We do not sell your personal data for money.

We share personal data only with:

• The service providers listed in Section 3, who process data on our behalf or in connection with the services they provide to us.
• Professional advisors, such as legal or accounting advisors, where reasonably necessary.
• Authorities or third parties where we are required to do so by law, or to protect our rights, safety or property.

When we use advertising and remarketing tools, your data may be shared with the relevant advertising provider for measurement and ad personalization. In some regions this is treated as "sharing" of personal information, and you can opt out as described in Section 9.

7. International data transfers

Some of our providers, including Google, Microsoft and Webflow, are based in the United States, so your personal data may be transferred to and processed there.

Where data is transferred out of the EEA, the United Kingdom or Switzerland, we rely on recognized safeguards. Google and Microsoft are certified under the EU-US Data Privacy Framework, together with its UK and Swiss extensions, which the European Commission recognizes as providing an adequate level of protection. As an additional safeguard, transfers may also be covered by Standard Contractual Clauses approved by the European Commission. You can request more information about these safeguards using the contact details in this Policy.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes described in this Policy:

• Inquiry and proposal data is kept while we handle your request and for up to 5 years afterward so we can follow up, unless a client relationship begins, in which case it is kept for the duration of that relationship and as required for our records.
• Analytics and advertising data is retained according to the settings we configure with each provider and that provider's own retention periods.
• Security and server logs are kept for a short period as needed for security and troubleshooting.

When we no longer need personal data, we delete it or anonymize it.

9. Your rights

Depending on where you live, you may have some or all of the following rights over your personal data:

• Access: to ask for a copy of the data we hold about you.
• Rectification: to ask us to correct inaccurate or incomplete data.
• Erasure: to ask us to delete your data in certain circumstances.
• Restriction: to ask us to limit how we use your data.
• Portability: to receive your data in a portable format, or have it sent to another provider.
• Objection: to object to processing based on legitimate interest, and to object to direct marketing at any time.
• Withdraw consent: to withdraw consent at any time, without affecting processing that already took place.

To exercise any right, contact us at info@mentaexperts.com. We will respond within the time required by the law that applies to you. We may need to verify your identity before acting on a request.

Region-specific rights

EEA and United Kingdom. Your rights are described above under the GDPR and UK GDPR. You also have the right to lodge a complaint with your local data protection authority. In the United Kingdom, this is the Information Commissioner's Office (ICO).

California (United States). If you are a California resident, you may have the right to know what personal information we collect and how we use and disclose it, to request deletion or correction, and to opt out of the "sale" or "sharing" of your personal information. We do not sell personal information for money, but the use of advertising and remarketing tools may qualify as "sharing" under California law. You can opt out using the browser and provider controls described in Section 5, or by contacting us. We will not discriminate against you for exercising your rights.

Brazil. If you are in Brazil, you have rights under the Lei Geral de Proteção de Dados (LGPD), including confirmation of processing, access, correction, anonymization or deletion, portability and information about sharing. You may also contact the national authority (ANPD).

Australia. If you are in Australia, you may request access to and correction of the personal information we hold about you under the Australian Privacy Principles, and you may raise concerns with the Office of the Australian Information Commissioner (OAIC).

Ecuador. If you are in Ecuador, you have rights under the Ley Orgánica de Protección de Datos Personales, including access, rectification, deletion, opposition, portability and the suspension of processing, and you may file a claim with the Superintendencia de Protección de Datos Personales (SPDP).

10. Automated decisions

We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing. Advertising and remarketing tools use profiling to show relevant ads, but this does not have a legal or similarly significant effect on you, and you can opt out using the controls in Section 5.

11. Children

The Site is intended for businesses and professional audiences. It is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Security

We take reasonable technical and organizational measures to protect personal data against loss, misuse and unauthorized access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

13. Changes to this Policy

We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, provide additional notice. We encourage you to review this Policy periodically.

14. Contact us

If you have questions about this Policy or wish to exercise your rights, contact us at:

Email: info@mentaexperts.com