Privacy policy

Last updated: 4 October 2026

This privacy policy explains which personal data we process when you visit mantaclothing.com, create an account or order a shirt – why we do it, how long we keep it, who we share it with and what rights you have.

Data controller

MANTA AB, company registration number 559603-4669, Infanterigatan 17, 171 59 Solna, Sweden, is the controller for the processing of your personal data. You can reach us at info@mantaclothing.com.

What we process and why

Orders. When you order, we process your name, email address, delivery address (recipient, company if any, street address, postal code, city, region, country), phone number, the products ordered, the amount and the payment reference. We need this to make, deliver and charge for your order, send the order confirmation and handle complaints. Legal basis: contract. We keep accounting records because the Swedish Bookkeeping Act requires it (legal obligation).

Account. If you order without being signed in, we automatically create an account linked to your email address, so you can see your order, keep your measurements and contact us about it. You sign in with a link we email to you, or with Google or Facebook (see Sign in with Google or Facebook). Legal basis: contract.

Measurements. To make your shirt we process your body or shirt measurements, including height, weight and body-shape details. We use your measurements to make and adjust your shirts. We also use them, with names and other directly identifying details removed, to develop tools that help customers find their measurements from fewer inputs – for example by suggesting measurements from your height, weight and body type. They are never used for marketing. You can object to your measurements being used for this development at any time by contacting us. The measurements used for an order are kept with that order, so we can show what was actually made; if you delete a measurement profile from your account, the copy in past orders therefore remains. If you enter measurements before you have an account, they are stored only in your browser until you order. Legal basis: contract (making your shirts) and legitimate interest (product development).

Fit guarantee and remakes. If you request a remake, we process your answers, your message and the photos you upload of yourself wearing the shirt. Legal basis: contract. The form is protected against abuse by Google reCAPTCHA (legitimate interest).

Payment. Payments are handled by Stripe. We never receive or store your card details – we only keep a payment reference and the amount. Stripe processes details of your payment, your IP address and your device to carry out the payment and prevent fraud. Legal basis: contract and legitimate interest (fraud prevention).

Gift cards. If you buy a gift card, we link it to your account and record how it is used. Legal basis: contract.

Contact form. When you write to us, we process your name, email address, topic, any order number and your message so we can reply. Legal basis: legitimate interest (answering your question), or contract when it concerns an order.

Newsletter. If you subscribe, we process your email address to send news and offers. You confirm the subscription through a link in an email, and can unsubscribe at any time through the link in every mailing. Legal basis: consent.

Security and operations. When you visit the site, your IP address and technical information about your browser are processed to deliver the pages, protect the site and limit abuse (for example too many sign-in attempts). Legal basis: legitimate interest.

Statistics and marketing. See the cookies section below.

If you choose to sign in with Google or Facebook, we receive your name and email address from that service. Google also sends your profile picture, which we do not store. We use this data only to create your Manta account and sign you in. We never receive or store your password for those services, and we never sell the data or use it for advertising.

Deleting your data. To have your account and the data we hold about you deleted, email info@mantaclothing.com from the email address linked to your account and ask us to delete it. We delete the account within 30 days and confirm by email. Order details that the Swedish Bookkeeping Act requires us to keep are retained for the period stated under “How long we keep your data”.

Removing Manta's access. You can also disconnect Manta from your Google or Facebook account at any time – on Facebook under Settings & privacy → Settings → Apps and websites, and on Google at myaccount.google.com/permissions. This stops future sign-ins through that service, but does not delete the data we already hold; email us for that.

Cookies and similar technologies

We only use cookies that are not strictly necessary if you have accepted them in our cookie banner. You can change or withdraw your choice at any time with the cookie icon (“Cookie settings”) at the bottom of every page.

Necessary – no consent required:

qmtoken, qmtoken_info – keep you signed in, until you sign out or close the browser.
language – your language choice (1 year).
cookie_consent – your cookie choice and a random id for it (12 months).
Cart, checkout, measurement units and measurements entered without an account – kept in your browser's local storage until you remove them or order.
Stripe (__stripe_mid, __stripe_sid) – set only at checkout, for payment and fraud prevention (up to 1 year).
Google reCAPTCHA – only on the remake request form, to stop abuse.

Statistics – only with your consent: Google Analytics (cookies _ga and _ga_*, up to 2 years) shows us which pages are visited and how the site is used.

Marketing – only with your consent, and only if you have also accepted statistics: Google may link the statistics to your Google account (Google signals), giving us reports on visitors' age, gender and interests, and for ad personalisation.

Without cookies: we also count visits with Cloudflare Web Analytics, which stores nothing on your device and does not follow you across sites.

We keep a record of your cookie choices (time, choice and the random id – not your IP address) so we can demonstrate that consent was given.

Who we share data with

We never sell your personal data. We share it only with the suppliers needed to run the service, who process it on our behalf under contract:

Our production partner, a tailoring workshop in Bangkok, Thailand – sews your shirt and receives the work order with your measurements, height and weight. The work order identifies you only by your account number, not by name or contact details.
The transport company that delivers your parcel – receives your name, address and phone number.
Cloudflare – website hosting, database and file storage.
Stripe – payments (Stripe is also an independent controller for some data, under Stripe's privacy policy).
Zoho (ZeptoMail) – sending emails such as order confirmations and sign-in links, from EU data centres.
Mailchimp (Intuit) – newsletter.
Google – Google Analytics (with consent), reCAPTCHA, sign-in with Google and fonts (Google Fonts).
Meta – sign-in with Facebook.
Font Awesome (Fonticons) – icons loaded from their servers.

Pages load fonts and icons from Google and Font Awesome, which means your IP address is sent to them.

We may also disclose data to authorities where the law requires it.

Transfers outside the EU/EEA

Some of our suppliers are in the USA (among them Google, Stripe, Mailchimp, Meta and Cloudflare). These transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses. The work order sent to our production partner in Thailand is transferred under the European Commission's standard contractual clauses. Contact us if you would like a copy of the safeguards.

How long we keep your data

Orders and accounting records: 7 years after the end of the calendar year in which the financial year ended, as required by the Swedish Bookkeeping Act.
Account, addresses and measurements: for as long as you have your account. If you ask us to delete it, we remove the data, except what the Bookkeeping Act requires us to keep in the order history.
Remake photos and details: until the request is closed, then at most 12 months.
Contact form messages: at most 12 months after the enquiry is closed.
Newsletter: until you unsubscribe.
Cookie choices: the cookie for 12 months; the record of your choice for 2 years.
Google Analytics: user-level statistics are kept for 2 months.

Your rights

You have the right to:

know what data we hold about you and get a copy of it,
have incorrect data corrected – much of it you can change yourself under “My account”,
have your data erased, unless the law requires us to keep it,
ask us to restrict processing,
receive the data you gave us in a machine-readable format (data portability),
object to processing based on our legitimate interest,
withdraw consent at any time – for cookies with the cookie icon at the bottom of the page, for the newsletter through the link in each mailing. Withdrawal does not affect processing already carried out.

Send your request to info@mantaclothing.com. We may need to confirm your identity, for example by asking you to write from the email address linked to your account. We reply within one month.

If you are unhappy with how we process your personal data, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), Box 8114, 104 20 Stockholm, Sweden, www.imy.se.

Automated decisions

We make no decisions about you based solely on automated processing or profiling. If we suggest measurements for you, they are only suggestions: you can always check and change them before you order.

Security

We protect your data with technical and organisational measures, including encrypted connections and access control so that only staff who need the data can see it.

Changes

We may update this policy. The date at the top shows when it was last changed. We will tell you about significant changes, and if a change concerns cookies we will ask for your consent again.