Legal

Privacy Policy

Last updated 23 August 2026

This policy explains what personal data Enquiro collects, why we collect it, and what rights you have over it. It applies to businesses who use Enquiro (“you”, the “account holder”) and to the customers who submit an enquiry through an Enquiro form (“your customers”).

Enquiro is a UK-based service, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.

Who we are

Enquiro (“Enquiro”, “we”, “us”) provides guided enquiry forms and a lead dashboard for service businesses. For any question about this policy or your data, contact us at support@enquiro.io.

What we collect

If you're a business using Enquiro, we collect:

Account details: name, email address, and password (hashed, never stored in plain text).
Business details: business name, logo, brand colours, phone number, and notification preferences.
Billing details: handled entirely by our payment processor, Stripe. We never see or store your card details.
Usage data: pages visited, forms created, and general activity within your dashboard, used to keep the product working and secure.

If you're a customer submitting an enquiry through a business's Enquiro form, we collect:

The details you enter into that form: typically your name, phone number and/or email, location, and job details.
Any photos you choose to upload as part of an enquiry.
Basic technical data (such as IP address) used only for fraud and abuse prevention.

How we use it

To operate your account and deliver enquiries to the business you contacted, by email and/or WhatsApp.
To send you service emails: confirmations, notifications, and important account or billing updates.
To generate form content using AI, where you've asked us to (see “AI features” below).
To keep Enquiro secure, prevent abuse, and meet our legal obligations.
To understand how Enquiro is used, so we can improve it.

AI features

When a business asks Enquiro's AI to generate or edit a form, we send the business's description and, where provided, their logo image to our AI provider (Anthropic) to generate a response. Customer enquiry data submitted through a live form is never sent to an AI model.

Who we share data with

We don't sell personal data. We share it only with the service providers that help us run Enquiro, each bound by their own data protection obligations:

Supabase, for database hosting and authentication.
Resend, for sending transactional email.
Stripe, for payment processing.
Anthropic, for AI-generated form content, as described above.

A business using Enquiro receives their own customers' enquiry data directly; that business is responsible for how it handles that data once received.

How long we keep it

We keep account and enquiry data for as long as an account stays active, so businesses retain their full lead history. If you close your account, we delete personal data within 30 days, except where we're required to keep it for legal or accounting reasons.

Your rights

Under UK GDPR, you can ask us to access, correct, delete, or export your personal data, and you can object to or restrict certain uses of it. To exercise any of these rights, email support@enquiro.io. If a business holds your data as a customer of theirs, you may need to contact that business directly, as they control what happens to enquiries they receive.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).