Privacy Policy
Last Updated
PURPOSE
Enginira Inc. (herein referred to as “Organization,” “Company,” “we,” “our,” or “us,” etc.) is committed to protecting the privacy of individuals who interact with us. This policy explains how we collect, use, store, and safeguard personal data to ensure transparency and build trust with our users, customers, and partners.
SCOPE
This policy explains how we collect, use, store, and safeguard personal data to ensure transparency and build trust with our users, customers, and partners, in line with UK data protection law including the UK GDPR and the Data Protection Act 2018.
DEFINITION
IP Address: A unique string of characters that identifies each computer using the Internet Protocol to communicate over a network.
Personal Data: Any information relating to an identifiable individual (e.g., name, email, IP address).
Processing: Any operation performed on personal data, such as collection, storage, use, disclosure, or deletion.
Data Controller: The entity that determines the purposes and means of processing personal data.
Data Processor: The entity that processes data on behalf of the data controller.
RESPONSIBILITIES
CTO is responsible for developing, implementing, maintaining, and enforcing the policy.
Employees are responsible and/or accountable to ensure adherence to this policy’s terms during their job duties.
POLICY
Data We Collect
We may collect the following types of personal data as applicable to our product:
Identification Information: Name, email, company role.
Account Information: Username, email, account preferences.
Technical Data: IP address, device identifiers, operating system, cookies, and usage analytics.
How We Collect Data
We collect personal data through the following methods:
Directly from you: When you fill out forms, create accounts, or contact us.
Manually by us: E.g. notes taken during meetings (sales, customer support)
Automatically: Through analytics tools and service logs when you use our website or services (e.g., Google Analytics on our website and PostHog in our application), and through system/service logs where available.
Third Parties/Public sources: In a B2B context, we may receive business contact details from service providers or public professional sources (e.g., company websites, LinkedIn) for sales and relationship management. We do not intentionally collect sensitive categories for this purpose.
Legal Bases for Processing Personal Data
We process personal data only when permitted by law. The legal bases include:
Consent: When you opt in to receive communications (e.g., subscribing to newsletters or product updates). Individuals can unsubscribe at any time.
Contractual Necessity: To fulfil a contract with you (e.g., processing orders).
Legal Obligation: To comply with legal and regulatory requirements.
Legitimate Interests: For fraud prevention, improving services, ensuring security, and B2B sales and relationship management. Individuals can object to processing for direct marketing at any time.
How We Use Personal Data
We use personal data for the following purposes:
Providing and improving our services.
Processing transactions and managing accounts.
Communicating with you regarding updates, offers, and support.
Conducting analytics and research to improve user experience.
Ensure security, detect fraud, and comply with legal obligations.
Data Sharing and Disclosure
We may share personal data under these circumstances:
Service Providers: With vendors or contractors who perform services on our behalf.
Legal Compliance: To comply with laws, subpoenas, or other legal processes.
Business Transfers: In the event of mergers, acquisitions, or asset sales.
Consent: When you explicitly agree to share your data.
We may transfer personal data outside the UK where our service providers or infrastructure are located in other countries. Where transfers occur, we use appropriate safeguards required under UK data protection law, such as adequacy regulations or approved standard contractual clauses.
Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, unless a longer retention period is required by law. Retention periods and deletion practices are defined in our Data and Record Retention and Deletion Policy. After the retention period expires, data is securely deleted or anonymized.
Data Security
We implement industry-standard technical and organizational measures to safeguard personal data, including:
Encryption (at rest and in transit).
Access controls and authentication protocols.
Periodic reviews of access and key security configurations.
Security monitoring and logging where supported by our providers and tools
Your Rights
Depending on your jurisdiction, you may have the following rights:
Access: Request access to your data.
Rectification: Correct inaccurate or incomplete data.
Deletion: Request deletion of your data.
Data Portability: Obtain a copy of your data in a portable format.
Restriction: Request a limitation on the processing of your data.
Objection: Object to certain processing activities (e.g., direct marketing).
Withdraw Consent: Withdraw your consent when processing is based on consent.
To exercise your rights, please contact us at privacy@enginira.com. Individuals also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if they have concerns about how we handle personal data.
Cookies and Tracking Technologies
We use cookies and other tracking technologies to enhance your browsing experience. You can manage your preferences through our cookie policy or browser settings.
Children’s Privacy
Our services are not directed to children and we do not knowingly collect personal data from children under the age of 16. If we become aware of such data, we will delete it promptly.
Third-Party Links
Our website or services may contain links to third-party websites. We are not responsible for their privacy practices and encourage you to review their privacy policies.
Data Processing Agreement (DPA)
Please contact our team at privacy@enginira.com to be provided with a copy of our DPA for your records.
Enginira's Data Protection Officer (DPO) is Jonathan Arnold. To contact Enginira's DPO use privacy@enginira.com.
Updates to This Policy
We may update this policy periodically to reflect changes in laws, regulations, or business practices.
