Privacy and your trial data

Built to UK GDPR and Data Protection Act 2018 requirements. This page covers the eny Analytics trial at analytics.enyinc.uk.

Who is responsible

The controller is eny (enyinc.uk). Contact: info@enyinc.uk.

What we collect, and why

At signup: your business name and work email. That is all. We use them to run the trial you asked for (lawful basis: contract), and to follow up about it (legitimate interest). Anyone you add to your team is stored by email only.

Inside the trial: the datasets you upload or pick, the KPIs you define, and an audit log of actions in your workspace (who, what, when). The trial is for demo or test data only. Please do not upload personal data about customers or staff.

eny staff can see the trial signup name, email and usage counts (when the workspace was last used, and how many actions of each kind), to support the trial. Lawful basis: legitimate interest.

How long we keep it

30 days from signup. After that the workspace locks, and every dataset, KPI, user and audit entry in it is permanently deleted automatically. There are no backups of trial data. We keep only the workspace's random id and its dates, with the name and email blanked, so the trial counts stay correct.

Your rights

• Get a copy of everything in your workspace as JSON (Articles 15 and 20): Account, then Export my data (/account/export).
• Delete it all now (Article 17): Account, then Delete everything (/account/delete). It is immediate and cannot be undone.
• Anything else, including correction or objection: info@enyinc.uk.
• You can complain to the Information Commissioner's Office: ico.org.uk.

Cookies and tracking

One cookie: the sign-in session, which is HttpOnly, Secure and SameSite=Lax. No analytics, no advertising tags and no third-party scripts, enforced by the page's Content Security Policy. The one exception is Cloudflare Turnstile on the signup page, which checks you are not a bot.

Who processes it for us

Cloudflare hosts the app and its database, and runs Turnstile. Brevo sends the sign-in emails, and the email that tells us a trial has started.

Security

HTTPS only. Signed session cookies. Managers and viewers have different permissions. Every database query is parameterised and scoped to your workspace. Signup and sign-in are rate-limited. Pages send security headers that stop them being framed or loading code from elsewhere.