Privacy Policy
How MANDA Institute collects, uses, shares, and protects your personal data. This explanation is written to be clear, honest, and GDPR-aligned.
- Your privacy, in plain language.
- We follow EU data protection rules across the markets we serve.
- We never sell your data
- We share it only to run the Services, with your consent, or when the law requires it.
- You stay in control
- Access, correct, export, or delete your personal data whenever you want.
- Confidential by design
- Buyers see your confidential details only with your consent, under an NDA.
- This summary is for convenience only; the full Policy below is what governs.
- MANDA Institute ("MANDA Institute", "we", "us", or "our") is a software assisted business valuation and M&A platform operated by Leptis Magna Capital. We are committed to protecting your privacy and handling your personal data responsibly.
- This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and the rights you have. It applies to our website, our platform, and the related services we provide (together, the "Services").
- We process personal data in line with the EU General Data Protection Regulation (GDPR) and the data protection laws applicable across the EU, EEA, and EFTA markets we serve. By using the Services, you confirm that you have read and understood this Policy.
- Who We Are
- MANDA Institute is operated by Leptis Magna Capital, its institutional parent. For the purposes of the GDPR, Leptis Magna Capital acts as the data controller for personal data processed through the Services.
- We work remote-first across the EU, EEA, and EFTA, with hubs in Luxembourg, Amsterdam, and Belgrade.
- How to reach us
- Our contact page is the primary channel for any privacy question and for exercising your data protection rights; requests sent there reach the team responsible for data protection. Formal registered-entity details (legal name, registered office, and registration number) are available on request.
- Information We Collect
- We collect the following categories of personal data:
- Account & identity
- Business & financial information
- Documents you upload
- Technical & usage data
- How We Use Your Information
- Legal Bases for Processing
- Under the GDPR, we rely on the following legal bases:
- Performance of a contract (Art. 6(1)(b))
- To provide the Services you request, such as generating valuations and supporting a transaction.
- Legitimate interests (Art. 6(1)(f))
- To run, secure, and improve our Services and to prevent fraud, balanced against your rights and freedoms.
- Consent (Art. 6(1)(a))
- For optional marketing communications and non-essential cookies. You can withdraw consent at any time.
- Legal obligation (Art. 6(1)(c))
- To meet legal, tax, accounting, and regulatory requirements.
- Automated Processing & AI
- Our platform uses automated tools and artificial intelligence to generate valuation estimates, benchmarks, and insights from the information you provide.
- These outputs are decision-support tools. They do not produce legal or similarly significant effects on you without human involvement, and they are not a substitute for professional advice. You can contact us if you have any questions about automated processing.
- AI service providers
- Some features rely on trusted third-party AI providers that process the content you submit in order to return a result. We share only what is needed to deliver the feature, and we do not sell your data.
- Information from public company registers
- For company research we hold some information about the people who run and own registered companies, taken from the public register that files it. This section is about those people, who are usually not our users.
- For companies registered in the United Kingdom we read, from Companies House, the officers of a company (directors and secretaries) and its persons with significant control, together with the ownership relationships between legal entities that the Global Legal Entity Identifier Foundation (GLEIF) publishes. We read only through the registers' official interfaces and only for the United Kingdom at present; other countries follow only when their register grants access and a data protection review has been completed for them.
- What we keep
- The name as filed, the role or the kind of control, the dates of appointment, resignation, notification and cessation, the natures of control the register records, the register's own reference for the entry, and for corporate entries their registered number and legal form. We do not keep dates of birth, home or service addresses, nationalities, occupations or countries of residence, and we do not keep the register's raw response.
- Why and on what basis
- Our legitimate interest in showing who owns and who runs a company to people researching it for a possible transaction, using information the company was legally required to file in a public register. Officers and controlling persons expect this information to be public; we show it only to signed in users with a legitimate reason to see that company (the company's own owner, a buyer who has signed the confidentiality agreement on that deal, a buyer researching a company their mandate matched, or our staff), never on a public page and never to an automated assistant.
- What we derive
- Company level signals such as long serving leadership or a recent leadership change, worked out by fixed rules over the filed dates. Each signal states the dates it rests on. We do not score, profile or rank any person, and we hold nothing about anyone's wealth.
- How long
- Current entries for as long as the company stays in our register data and the register keeps answering our reads; a list the register has not answered for in two years is removed, whether or not we kept trying. Entries showing a resignation or cessation are kept for three years after that date and then removed.
- Your rights as an officer or controlling person
- How We Share Information
- We share personal data only as needed to run the Services. We do not sell your personal data. Recipients may include:
- Service providers (processors)
- Buyers and advisors: only with your consent
- Legal and regulatory
- Business transfers
- International Data Transfers
- Reach us
- We use only the essential cookies required to operate the platform securely. We do not use Google Analytics, Facebook pixels, LinkedIn tracking, or any other third-party analytics or advertising cookies.
- Because we use only essential cookies, we do not present a cookie consent banner with opt-in categories. If we introduce non-essential cookies in the future, we will update this policy and obtain your consent first. For full details, see our Cookie Policy.
- Our Services are intended for businesses and professionals and are not directed at anyone under 18. We do not knowingly collect personal data from children.
- The instant benchmark gives you an indicative value range in under 60 seconds, measured against completed sales of medium sized European businesses. The full valuation takes about 5 minutes, uses your own financials and shows up to four methods. Both are free. Both are indicative estimates, not a formal appraisal.
- The one success fee we intend to charge applies only when a deal closes. Provisional. No engagement letter has been drafted yet, so this is how we intend to charge rather than terms you can hold us to.
See what it's worth