Who is responsible?

Motolani Olaiya, based in the Netherlands, operates MandelBlog personally and is the data controller for this website. MandelBlog is Nigerian-founded and primarily intended to serve African businesses; it is not a registered company. For privacy questions or requests, email [email protected].

Visiting the website

The website does not use advertising, analytics or tracking tools. When you open a page, the web server records technical request data — IP address, date and time, requested page, referring page and browser type — to deliver the site and keep it secure. These server logs are kept for 14 days. The site is delivered through Cloudflare, which processes the same kind of request data to route traffic and protect the site against attacks. The legal basis is our legitimate interest in a secure, available website.

Project enquiries

If you send the project enquiry form, we receive your name, email address, the service you choose and your project description, plus your company, timing and budget if you add them. The information is checked, encrypted and stored in a database on our server in Nuremberg, Germany, before the website confirms receipt. An email notification with your enquiry is then sent through Brevo to Motolani Olaiya's mailbox; replies go to the email address you entered.

To prevent abuse, the form uses a hidden spam trap and a short-lived request limit based on a one-way coded (hashed) version of your IP address, deleted after two days. We use your enquiry only to answer it and, if relevant, to take steps towards a possible agreement — not for unrelated marketing. The legal basis is taking steps at your request before a possible contract, or our legitimate interest in answering your message. If you email us directly, we handle your message in the same way.

Cookies

Visitors are not tracked, and no cookies are set when you browse the website. When you send the enquiry form, the site sets one security cookie (csrftoken) that protects the form against forged submissions; it is strictly necessary for that purpose and contains no information about you. Separate login cookies are used only by authorised editors in the website's content management system.

Service providers and international transfers

  • Hetzner Online GmbH (Germany) hosts the website, the enquiry database and the server logs in Nuremberg, Germany, as our processor.
  • Cloudflare, Inc. provides DNS, content delivery and security for the website as our processor under its data processing addendum. Cloudflare operates a global network, so request data can be processed outside the European Economic Area, including in the United States; Cloudflare relies on the EU–U.S. Data Privacy Framework and, as a fallback, the European Commission's Standard Contractual Clauses.
  • Brevo (Sendinblue SAS, France) delivers the email notification of an enquiry as our processor. Brevo hosts data in the EU (Belgium and France); some of its sub-processors may be outside the EEA, under Standard Contractual Clauses.
  • Apple (iCloud Mail) hosts the mailbox that receives enquiry notifications and email. For users in the EEA, Apple Distribution International (Ireland) is responsible for iCloud data, which Apple may store with Apple Inc. in the United States under Standard Contractual Clauses.

How long information is kept

Enquiries that do not lead to a customer relationship are kept for 12 months after the last meaningful contact and then deleted from the database automatically, unless a legal obligation or an active dispute requires longer. Email copies are deleted from the mailbox on the same schedule. Database backups that may still contain deleted enquiries are kept for at most 14 days. Server logs are kept for 14 days. Records of actual customers follow their own legal retention rules.

Your rights

Depending on the circumstances, you can ask for access to, correction or deletion of your information, restriction of or objection to its use, and a copy of it. Email [email protected]. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl). This website makes no automated decisions with legal or similarly significant effects.

Last updated

27 October 2026