Privacy and your data

Built to UK GDPR and Data Protection Act 2018 requirements. The controller is eny (enyinc.uk). Contact: info@enyinc.uk.

What we collect

At signup, only your business name and work email, plus a hashed PIN so you can sign back in. Everything else in the workspace is the stock data you or your staff enter. Please use demo or test data during the trial.

Why (lawful basis)

To run the trial you asked for (contract), and so eny staff can see the trial signup name, email and usage counts to support the trial (legitimate interest). We are told about each new signup by email.

How long

30 days from signup. After that the workspace locks, and a nightly job deletes every row belonging to it. There is no backup of trial data. You can delete it sooner yourself.

Your rights

• Get a copy of everything in your workspace as JSON: /account/export (Articles 15 and 20).
• Delete it now: /account/delete (Article 17).
• Complain to the Information Commissioner's Office: ico.org.uk.

No tracking

This site loads no analytics, advertising or tracking scripts, and sets one cookie: the signed session cookie that keeps you signed in. The only third-party script is Cloudflare Turnstile on the signup page, to stop bots.

Security

HTTPS only. Sessions are signed and the cookie cannot be read by scripts. PINs are stored hashed. Every workspace is kept separate from every other, roles limit what staff can change, and every change is written to an audit log your manager can read.