Privacy Policy

Effective from June 5, 2026

1. Introduction

Enlear (“Enlear”, “we”, “us”, or “our”) is a developer content marketing agency. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit www.enlear.com (the “Site”), engage us for our services, or otherwise interact with us (collectively, the “Services”).

We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA/CPRA), as well as other regional privacy laws where applicable.

2. Data Controller

For the purposes of GDPR, Enlear acts as the data controller for personal data collected through our Site and provided to us in the course of our Services. For data processed on behalf of our clients during the delivery of contracted services, Enlear acts as a data processor under instructions from our client. Our contact details are set out at the end of this Policy.

3. Information We Collect

We collect only the information necessary to provide and improve our Services. The categories of personal data we may collect include:

• Identification data: name, job title, and company name.
• Contact data: email address, phone number (including for WhatsApp communication), and business address.
• Communication content: the content of messages and inquiries you send to us through forms, email, calls, or scheduled meetings (via Calendly).
• Engagement data: content briefs, project requirements, feedback, and other materials you share with us during a service engagement.
• Technical data: IP address, browser type and version, device information, operating system, referring URLs, and pages visited.
• Cookie and usage data: information collected through cookies and similar technologies, as described in our Cookie Policy.

We do not knowingly collect sensitive personal data (such as health, biometric, or government-issued identifiers) and ask that you do not submit such information to us.

4. How We Use Your Information

We use personal data for the following purposes:

• To respond to your inquiries and provide requested information.
• To deliver our content strategy, content production, and content distribution Services.
• To send transactional communications, contracts, invoices, and project updates.
• To send marketing communications about our Services where permitted, with the ability to opt out at any time.
• To operate, maintain, secure, and improve the Site and our Services.
• To detect, prevent, and address technical issues, fraud, or security incidents.
• To comply with legal obligations and enforce our agreements.

5. Legal Bases for Processing (GDPR)

Where GDPR applies, we rely on the following legal bases to process personal data:

• Performance of a contract – to deliver Services you have engaged us for.
• Legitimate interests – to operate and promote our business, respond to inquiries, secure our Site, and improve our Services, provided your rights do not override these interests.
• Consent – for non-essential cookies, marketing emails, and any other processing for which we ask your explicit consent. You may withdraw consent at any time.
• Legal obligation – to comply with applicable laws, tax obligations, and lawful requests from authorities.

6. Sharing and Disclosure

We do not sell personal data. We may share personal data with the following categories of recipients, only as needed to operate our business:

• Service providers: hosting, analytics, email, CRM, scheduling (e.g., Calendly), payment processing, and similar vendors who process data on our behalf under contractual confidentiality and security obligations.
• Professional advisors: lawyers, auditors, and accountants where necessary.
• Authorities: where required by law, court order, or to protect our rights, property, or safety, or that of others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, in which case we will notify affected individuals where required by law.

7. International Data Transfers

We operate from offices in the United States (Delaware) and Sri Lanka and work with service providers and clients in multiple jurisdictions. When we transfer personal data outside your country of residence, including outside the European Economic Area (EEA) or the United Kingdom, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms permitted by applicable law.

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy any legal, accounting, or reporting requirements. Service engagement records are typically retained for the duration of the engagement and for a reasonable period afterwards to comply with contractual, financial, and legal obligations. When retention is no longer necessary, we delete or anonymize the data.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. While we take reasonable steps to safeguard your information, no method of transmission or storage on the internet is fully secure, and we cannot guarantee absolute security.

10. Cookies and Tracking

We use cookies and similar technologies to operate, secure, and improve the Site, and to understand how visitors interact with our content. You can manage your preferences through our cookie banner. For full details, please see our Cookie Policy.

11. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Right of access to the personal data we hold about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (“right to be forgotten”), where applicable.
• Right to restrict or object to processing.
• Right to data portability, where applicable.
• Right to withdraw consent at any time where processing is based on consent.
• Right to lodge a complaint with a data protection supervisory authority in your jurisdiction.

California residents may have additional rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information as defined under California law. To exercise any of these rights, please contact us using the details below.

12. Children's Privacy

Our Services are intended for business users and are not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us so we can take appropriate action.

13. Third-Party Links

The Site may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective from” date above and, where appropriate, provide additional notice. Your continued use of the Services following any changes constitutes acceptance of the updated Policy.

15. Contact Us

If you have questions about this Policy or wish to exercise any of your rights, please contact us at privacy@enlear.com or by post at our offices listed in the footer of our Site.