Privacy Policy
How we collect, use, and protect your information.
At Minapin, your privacy matters. This Privacy Policy explains what information we collect, how we use it, the legal bases for processing, and the choices you have. It applies to all visitors of our website regardless of location, and addresses requirements under the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable data privacy laws.
1. Data Controller
Minapin is the data controller responsible for the processing of your personal data. If you have questions about this policy or wish to exercise your rights, you can reach us at:
Email: hello@minapin.com
2. Information We Collect
Information You Provide
When you submit an inquiry through our website, we collect the information you voluntarily provide, including your name, email address, company name, phone number, service interest, budget range, project details, referral source, and any other information you choose to share in the form fields.
Information Collected Automatically
When you visit our website, our servers may automatically record certain information, including your IP address (anonymized where analytics are used), browser type and version, operating system, referring URL, pages visited, time and date of your visit, and time spent on each page.
If you consent to analytics cookies, we use Google Analytics 4 to collect aggregate usage data. Google Analytics uses cookies to gather this information. Analytics cookies are only loaded after you provide explicit consent via our cookie consent banner. Without your consent, no analytics data is collected.
3. Legal Bases for Processing (GDPR)
Under the GDPR, we process personal data on the following legal bases:
- Consent (Art. 6(1)(a)): For analytics cookies and any optional marketing communications. You may withdraw consent at any time by adjusting your or contacting us.
- Legitimate interest (Art. 6(1)(f)): For basic server logging required to maintain website security, prevent abuse, and ensure site availability. We have assessed that this processing is proportionate and does not override your fundamental rights.
- Contract performance (Art. 6(1)(b)): For processing inquiry form submissions to respond to your request and potentially enter into a service agreement.
- Legal obligation (Art. 6(1)(c)): Where we are required to retain or disclose data under applicable law.
4. How We Use Information
We use the information we collect for the following purposes:
- Responding to inquiries: To review your project requirements and contact you about potential engagements.
- Improving our website: To analyze aggregate usage patterns and optimize site performance, content, and navigation (only with your consent for analytics).
- Communication: To send you relevant information about our services, but only when you have expressed interest or given explicit consent.
- Security and operations: To maintain website security, detect and prevent abuse, and ensure service availability.
- Legal compliance: To comply with applicable laws, regulations, and legal processes.
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We do not sell or share personal information as defined under the CCPA/CPRA.
5. Cookies and Tracking Technologies
Cookies are small text files stored on your device that help us recognize your browser and remember certain information. We categorize them as follows:
Essential Cookies
These are strictly necessary for core website functionality, including session management (CSRF protection) and remembering your cookie consent preferences. They cannot be disabled as the site cannot function properly without them.
| Cookie | Purpose | Duration |
|---|---|---|
| csrftoken | Cross-site request forgery protection | 1 year |
| sessionid | Session management | 2 weeks |
| minapin_consent | Stores your cookie consent preferences | 1 year |
Analytics Cookies (Consent Required)
These cookies are set by Google Analytics 4 only after you explicitly accept analytics cookies via our consent banner. They help us understand how visitors interact with our website by collecting anonymous, aggregated data. IP addresses are anonymized.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes unique visitors | 2 years |
| _ga_* | Maintains session state | 2 years |
Managing Your Cookie Preferences
You can manage your cookie preferences at any time by clicking in the footer of any page. You can also control cookies through your browser settings, though disabling essential cookies may affect site functionality.
6. Third-Party Services
We use the following third-party service, only with your consent:
- Google Analytics 4 (Google LLC) — web analytics service. Data may be transferred to the United States. Google acts as a data processor on our behalf. For details on Google's data handling, see Google's Privacy Policy and Google Analytics data practices.
We do not knowingly share personally identifiable information with third parties except as necessary to provide our services, comply with the law, or protect our rights.
7. International Data Transfers
If you consent to analytics cookies, some data may be processed by Google in countries outside the European Economic Area (EEA), including the United States. Where such transfers occur, they are subject to appropriate safeguards, including the EU-U.S. Data Privacy Framework and Standard Contractual Clauses, to ensure your data is protected in accordance with GDPR requirements.
8. Data Retention
We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:
- Inquiry submissions: Retained for up to 24 months after last contact, or longer if required for an ongoing business relationship.
- Analytics data: Google Analytics retains data for 14 months (our configured retention period). Aggregated, non-identifying analytics data may be kept longer.
- Server logs: Retained for up to 90 days for security and operational purposes.
- Cookie consent records: Retained for 12 months or until you update your preferences.
When personal information is no longer required, we securely delete or anonymize it. If you would like us to delete your data sooner, please contact us.
9. Your Rights
Rights Under GDPR (EEA/UK Residents)
If you are located in the European Economic Area or United Kingdom, you have the following rights under the GDPR:
- Right of Access (Art. 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17): Request deletion of your personal data, subject to certain legal exceptions.
- Right to Restrict Processing (Art. 18): Request that we limit how we use your data in certain circumstances.
- Right to Data Portability (Art. 20): Request a copy of your data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3)): Withdraw consent at any time where processing is based on consent (e.g., analytics cookies). Withdrawal does not affect the lawfulness of processing before withdrawal.
We will respond to your request within 30 days. If we need more time, we will inform you and explain why. You also have the right to lodge a complaint with your local data protection authority.
Rights Under CCPA/CPRA (California Residents)
If you are a California resident, you have additional rights under the CCPA as amended by the CPRA:
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the sources of that information, our business purposes for collecting it, and the categories of third parties with whom we share it.
- Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Correct: You may request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: We do not sell or share your personal information as defined by the CCPA/CPRA. No opt-out is needed.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA/CPRA.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
To exercise your CCPA/CPRA rights, contact us at hello@minapin.com. We will verify your identity before processing your request and respond within 45 days.
Categories of Personal Information (CCPA Disclosure)
In the preceding 12 months, we may have collected the following categories of personal information:
- Identifiers: Name, email address, phone number, IP address.
- Commercial information: Service interest, budget range, project details.
- Internet activity: Browsing history on our website, interaction with our site (only with consent).
- Professional information: Company name.
We collect this information directly from you (via the inquiry form) and automatically (via server logs and, with consent, analytics). We do not sell this information to third parties, nor do we use it for cross-context behavioral advertising.
10. Children's Privacy
Our website is not directed at children under the age of 16 (or 13 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.
11. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS/TLS), secure server configurations, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
12. Do Not Track
Some browsers send a "Do Not Track" (DNT) signal. Because there is no industry standard for how to respond to DNT signals, we do not currently respond to them. However, you can control analytics tracking through our cookie consent mechanism, which provides a clearer and more reliable way to manage your preferences.
13. Contact for Privacy Inquiries
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:
Email: hello@minapin.com
We take all privacy inquiries seriously and will make every effort to address your concerns promptly. For GDPR requests, we will respond within 30 days. For CCPA/CPRA requests, we will respond within 45 days.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the "Last Updated" date below and, where required, notify you or seek renewed consent. We encourage you to review this page periodically to stay informed about how we protect your information.
Last Updated: March 29, 2026