Last updated: 9 August 2026
1. Who we are
This website, https://mantasquadron.com, and the data described here are controlled by Ari Pang Ojanperae, trading as Manta Squadron, NIE Y8862746S, Calle Juan Rejón 37, 35008 Las Palmas de Gran Canaria, Canary Islands, Spain. Contact: team@mantasquadron.com.
We are the data controller for everything in this policy unless stated otherwise.
2. What data we collect, and where it comes from
Enquiries. When you use the contact form, we collect your name, email address, and the details you choose to include in your message — typically your club or team name, location, and what you’re looking for. This is submitted directly by you.
Newsletter. If you sign up, we collect your email address. This is submitted directly by you, and only used once you’ve opted in.
Rosters and order data. Once you place an order, we collect the design and roster information needed to produce your kit — player names and numbers, sizes, and quantities. This is usually submitted by whoever manages the order on your club’s behalf, not by each named player individually. Where a roster includes the details of a minor, the club or organisation submitting it is responsible for having a lawful basis to share that information with us. We only ask for what production genuinely requires.
Site usage. Cookies and similar technologies, covering analytics and advertising. Full detail is in our Cookie Policy.
What we don’t collect. We don’t process payment card data — payment is by bank transfer, handled directly by your bank, and no card details ever pass through us or our website.
3. Why we process it, and on what legal basis
| What | Why | Legal basis |
|---|---|---|
| Enquiry details | Responding to you, preparing a quote | Steps taken at your request prior to a contract (Art. 6(1)(b) GDPR) |
| Newsletter email | Sending the newsletter | Your consent (Art. 6(1)(a) GDPR), withdrawable any time |
| Roster and order data | Producing and delivering your order | Performance of a contract (Art. 6(1)(b) GDPR) |
| Invoicing and payment records | Legal accounting and tax obligations | Legal obligation (Art. 6(1)(c) GDPR) |
| Analytics and advertising cookies | Understanding site usage, measuring and running ads | Your consent via the cookie banner (Art. 6(1)(a) GDPR) |
4. Who we share it with
We don’t sell personal data. We share it only where a service genuinely requires it:
- Email delivery. Our email service provider delivers our transactional and newsletter emails on our behalf.
- Analytics and advertising. Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited (Meta Ads), each acting as an independent controller for their own purposes as well as processing on ours. Full detail, including their own privacy information, is in our Cookie Policy.
- Consent management. Usercentrics A/S (Cookiebot), which records and stores your cookie consent choices.
- Hosting. Our website hosting provider, which stores the site and its data on our behalf.
- Delivery. Our delivery and logistics partners, who receive your delivery address and contact details to the extent needed to deliver your order.
- Professional advisors. Our accountant and, where necessary, our lawyer, bound by their own confidentiality obligations.
- Authorities. Where required by law — for example tax authorities, or in response to a valid legal request.
5. International transfers
Google and Meta are established in the EU (Ireland) but are global companies whose infrastructure can involve transferring data outside the European Economic Area. Where that happens, it’s covered by the European Commission’s Standard Contractual Clauses or another safeguard recognised under the GDPR as providing an adequate level of protection.
The same safeguards apply to any of our other service providers that transfer personal data outside the EEA.
6. How long we keep it
Roster and design data: 24 months from delivery, matching our Terms and Conditions of Sale, so reorders stay straightforward. You can ask us to delete it sooner.
Enquiries that don’t lead to an order: 24 months from our last contact with you.
Newsletter: until you unsubscribe.
Invoices and accounting records: 6 years, as required under Spanish commercial and tax law.
Cookie consent records: as set out in our Cookie Policy.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of anything inaccurate or incomplete.
- Erasure, sometimes called the right to be forgotten, subject to our legal obligations (for example, we can’t erase invoice data before its statutory retention period ends).
- Restriction of processing in certain circumstances.
- Portability — receiving your data in a structured, machine-readable format.
- Object to processing based on legitimate interest or for direct marketing.
- Withdraw consent at any time, without affecting processing that already happened while consent was active.
- Complain to the Agencia Española de Protección de Datos (www.aepd.es) if you think we’ve got something wrong.
To exercise any of these, contact team@mantasquadron.com. We will respond within one month, which may be extended by a further two months where a request is particularly complex. We’ll tell you if that happens.
8. Cookies
We use cookies and similar technologies for site functionality, analytics, and advertising. What we use, why, and how to control your choices is set out in full in our separate Cookie Policy — that document is the authority on cookies specifically; this one covers personal data more broadly.
9. Security
We take reasonable technical and organisational measures to protect the personal data we hold, including HTTPS/TLS encryption across the site, access limited to those who need it, and the security controls provided by our hosting provider. No method of transmission or storage is completely secure, and we can’t guarantee absolute security, but we treat this seriously and review it periodically.
10. Changes to this policy
We may update this policy as our data practices change. The date at the top shows when it was last revised. Material changes will be reflected here; where required by law, we’ll notify you directly.