Privacy Policy
Effective date: 2026.06.15
Version: 2026.06.15
This Privacy Policy is a founder-review draft for Eniblu, a free booking and reservations SaaS MVP. It explains how Eniblu collects, uses, stores, and shares personal data in relation to booking, support, newsletter, media-upload, and legal-document workflows.
This draft should be finalized before publication. It does not claim that a registered company already exists where one has not yet been formed.
1. Who Controls Your Data
Eniblu currently operates as a private project and brand name. The legal operator details have not been finalized yet, so this Privacy Policy should be read as applying to the Eniblu project until those details are formally established.
In this draft, "Eniblu," "we," "our," or "us" refers to the Eniblu project and, once established, the legal operator identified above.
2. What Data We Collect
Depending on how you use Eniblu, we may process the following categories of personal data:
- Account and profile data: username, first name, last name, email address, phone number, preferred language, time zone, preferred currency, date format, theme, booking-reminder preference, and marketing-emails preference.
- Booking and appointment data: first name, last name, email, phone number, business, employee, service, booking identifiers, reservation date and time, and related booking status data.
- Support and contact data: full name, email, topic, category, message, image IDs, attachments, and related support-request content.
- Newsletter data: email address and related subscription or unsubscribe records.
- Legal-document decision data: document type, locale, version, decision status, timestamp, IP address, user agent, and the account or correlation ID linked to the decision.
- Technical and usage data: IP address, user agent, authentication/session state, device or browser information, operational logs, security data, and continuity identifiers used to support anonymous flows.
- Media data: uploaded files, images, metadata, and identifiers associated with user or anonymous upload flows.
3. How We Collect Data
- Directly from you when you create an account, make a booking, submit a support ticket, or subscribe to a newsletter.
- From your use of the platform when you browse businesses, reviews, services, and booking availability.
- Automatically from your browser or device for session continuity, security, and operational logging.
- From booking, consent, or support workflows that rely on tokens or correlation identifiers for anonymous continuity.
- From participating businesses or service data already made available through the platform.
4. Why We Process Personal Data
- To provide account access and authentication.
- To display businesses, employees, services, reviews, tags, cities, and featured businesses.
- To create, manage, confirm, cancel, or otherwise support bookings and appointment requests.
- To support anonymous appointment flows, including token-based confirmation and cancellation.
- To store evidence of accepted or declined legal-document versions.
- To process support tickets, including optional anonymous image uploads for support-related flows.
- To manage newsletter subscriptions and unsubscribe requests.
- To send operational notifications and service messages related to bookings, support, legal updates, security, or account events.
- To operate, maintain, secure, troubleshoot, and improve Eniblu.
- To comply with legal obligations, enforce rights, and prevent misuse.
5. Legal Bases
Depending on the activity, our legal bases may include:
- Performance of a contract or pre-contractual steps for account, booking, appointment, and support workflows.
- Consent where you expressly agree to a processing activity, including required booking consent and optional newsletter communications.
- Legitimate interests in operating, securing, defending, and improving the platform, preventing abuse, and maintaining records of legal-document decisions.
- Compliance with legal obligations where retention, disclosure, or recordkeeping is required by applicable law.
6. Cookies and Similar Storage
Eniblu currently uses essential cookies or similar local storage for operational purposes such as authentication/session continuity, security, language or interface continuity where applicable, and anonymous flow continuity.
For example, Eniblu may use a correlation ID or similar identifier to maintain continuity for anonymous legal-consent and booking flows and to link the latest accepted legal-document decisions to the same anonymous journey.
Eniblu does not currently describe non-essential analytics or advertising cookies as part of this draft. If such tools are introduced later, this Privacy Policy and any related cookie disclosures should be updated before use.
7. Sharing and Processors
We may share personal data only where reasonably necessary to operate Eniblu, complete a requested action, comply with law, or protect rights and security.
- With participating businesses involved in a booking or appointment workflow.
- With service providers that support authentication, cloud storage, notification delivery, hosting, security, or similar operational functions.
- With Google Maps where location and geocoding-related functionality is used.
- With professional advisers, authorities, or counterparties where disclosure is legally required or reasonably necessary.
We describe internal handling at a high level only. Personal data may move within Eniblu systems and service infrastructure required to operate the platform.
8. International Transfers
Some providers or infrastructure used by Eniblu may process data outside your country. Where international transfers occur, Eniblu should use an appropriate transfer mechanism required by applicable law.
The final transfer details must be completed here if required: the transfer mechanism and relevant transfer disclosures are not yet finalized.
9. Retention
Eniblu retains personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including service delivery, security, support, legal compliance, dispute handling, and recordkeeping.
- Booking and support records may be retained for operational, legal, and audit purposes.
- Legal-document decision records may be retained as evidence of accepted or declined document versions.
- Newsletter records may be retained to manage subscription status and suppress future sends where required.
Specific operational retention periods must still be finalized: the retention schedule or retention criteria are not yet finalized.
10. Your Rights
Depending on applicable law, including GDPR-style rights where relevant, you may have the right to:
- request access to your personal data;
- request correction of inaccurate data;
- request deletion of data in some circumstances;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable; and
- withdraw consent where processing is based on consent, without affecting prior lawful processing.
11. Security
Eniblu uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or disclosure. No system can guarantee absolute security, but we aim to use measures appropriate to the current MVP and the nature of the data processed.
12. Children and Minors
Eniblu is intended for adults only and is not designed for children. If you believe personal data relating to a child has been submitted inappropriately, contact support@eniblu.com.
13. Changes to This Privacy Policy
Eniblu may update this Privacy Policy from time to time. When a new version becomes the currently enforced version for booking use, acceptance of that version may be required before further booking activity.
14. Contact
For privacy questions or rights requests, contact: support@eniblu.com.