Manu FrancisLegal
Privacy policy
Last updated: 29 October 2026
Who is responsible
This website, manufrancis.com, is run by Manu Francis, who is the data controller for the personal data described here. For any privacy question or request, use the contact form (choose "Something else").
The short version
- No analytics, no advertising, no tracking pixels, no social media widgets.
- No cookies are set for visitors. Fonts, scripts and images are all served from this site, so your browser does not contact any third party.
- Personal data is collected only when you choose to send the contact form, and only to reply to you.
What is collected and why
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| Name, email, optional phone and organisation, topic and message | To read and reply to your enquiry and to follow up on it | Your consent (6(1)(a)) and steps you ask for before a possible contract (6(1)(b)) |
| Date and time you gave consent, and the consent wording you saw | To be able to show that consent was given | Legal obligation to demonstrate consent (6(1)(c), Art. 7(1)) |
| A one-way keyed hash of your IP address (the IP itself is never stored) | To limit abuse and spam of the form; kept for at most 24 hours | Legitimate interest in keeping the site secure (6(1)(f)) |
| Only if someone tries to sign in to the private admin area: IP address, browser and the time of each attempt | To detect and block unauthorised access; kept for 90 days | Legitimate interest in keeping the site secure (6(1)(f)) |
| Standard web server logs kept by the hosting provider | Security and running the service | Legitimate interest (6(1)(f)) |
You do not have to give any data. Without name, email and message I cannot reply, so the form will not send without them.
How long data is kept
Enquiries are deleted automatically 24 months after they are received, or earlier if you ask. Abuse-protection records are deleted within 24 hours. Admin sign-in and security records are deleted after 90 days.
Who receives it
Your data is never sold or shared for marketing. It is stored on servers of the website's hosting provider (Hostinger), which acts as a data processor under a data processing agreement. A copy of new enquiries is sent by email to Manu Francis so they can be answered. Data may be processed in India and in the countries where the hosting provider operates; where data leaves the EU/EEA, the provider's standard contractual clauses apply.
How it is protected
The site is served only over HTTPS. Enquiries are kept in a private database at the hosting provider that is not reachable from the web. Only Manu Francis and admins he authorises can open them, through an admin area protected by a password, two-step verification and login limits. Every sign-in, export and deletion is recorded.
Your rights
Under the GDPR (and India's Digital Personal Data Protection Act, 2023), you can:
- ask for a copy of the data held about you (access and portability);
- have it corrected or deleted;
- restrict or object to how it is used;
- withdraw your consent at any time. This does not affect what was done before you withdrew it.
To use any of these rights, use the contact form (choose "Something else"). You will get an answer within one month. You can also complain to the data protection authority in your country.
Changes
If this policy changes, the new version will be posted here with a new date.