Privacy Policy

Last Updated: January 2025

Jurisdictional Compliance

Manifesto is based in Albania and complies with Albanian data protection laws and GDPR. We also ensure compliance with international standards including CCPA (California), PIPEDA (Canada), and the Australian Privacy Act for our global clients.

1. Information We Collect

Personal Information

Contact Information: Name, email address, phone number, company name
Project Information: Service requirements, budget range, project details
Communication Records: Email correspondence, meeting notes, project communications
Technical Information: IP address, browser type, device information (for website optimization)

Automatically Collected Information

Website usage data and analytics
Cookie and tracking technology data
Performance and error logs

2. How We Use Your Information

Service Delivery: To provide digital marketing services and support
Communication: To respond to inquiries and provide project updates
Improvement: To enhance our services and website functionality
Legal Compliance: To meet regulatory requirements in applicable jurisdictions
Marketing: To send relevant updates and offers (with your consent)

3. Legal Basis for Processing (GDPR)

Contract Performance: Processing necessary for service delivery
Legitimate Interest: Business operations and service improvement
Consent: Marketing communications and non-essential cookies
Legal Obligation: Compliance with applicable laws

4. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

Service Providers: Hosting, email, analytics, and payment processors
Legal Requirements: When required by law or to protect our rights
Business Transfers: In case of merger, acquisition, or asset sale

5. International Data Transfers

Manifesto is based in Albania, which follows GDPR standards. When we work with international clients or service providers, data may be transferred globally. All transfers are protected by:

GDPR compliance (Albania follows EU data protection standards)
Standard Contractual Clauses (SCCs) where required
Appropriate technical and organizational safeguards
Encryption and secure transmission protocols

6. Your Rights

🇪🇺 GDPR Rights (EU)

Right to access your data
Right to rectification
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

🇺🇸 CCPA Rights (California)

Right to know what data is collected
Right to delete personal information
Right to opt-out of sale (we don't sell data)
Right to non-discrimination

7. Data Retention

Active Clients: Duration of service relationship plus 7 years
Prospects: 3 years from last contact (or until withdrawal of consent)
Website Analytics: 26 months maximum
Legal Requirements: As required by applicable law

8. Security Measures

SSL/TLS encryption for data transmission
Encrypted data storage
Regular security audits and updates
Access controls and staff training
Incident response procedures

9. Cookies and Tracking

We use cookies for:

Essential: Website functionality and security
Analytics: Understanding website usage (with consent)
Marketing: Personalized content and advertising (with consent)

You can manage cookie preferences through your browser settings or our cookie banner.

10. Contact Information

Data Protection Officer

Email: info@manifesto.al

Address: Rruga Urani Pano, Tirana, Albania

Supervisory Authorities:

Albania: Commissioner for Information and Data Protection (CIDP)
EU Clients: Your local Data Protection Authority
UK Clients: Information Commissioner's Office (ICO)
Canada Clients: Office of the Privacy Commissioner
Australia Clients: Office of the Australian Information Commissioner

11. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or website notice.