Privacy Policy

1. Introduction

Enrumweb (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [enrumweb.com] (the “Site”) and use our services.

This Privacy Policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information You Provide

We may collect the following personal information when you voluntarily provide it to us:

• Contact Information: Name, email address, phone number, company name, job title
• Project Information: Project requirements, budget information, timeline preferences
• Communication Records: Messages sent through contact forms, emails, and other communications
• Newsletter Subscription Data: Email address and subscription preferences
• Consultation Data: Information discussed during consultations and meetings

2.2 Automatically Collected Information

When you visit our website, we automatically collect certain information:

• Device Information: IP address, browser type and version, operating system, device type
• Usage Data: Pages visited, time spent on pages, referring website, exit pages
• Location Data: General geographic location based on IP address
• Technical Data: Screen resolution, language settings, time zone

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Analyze website traffic and user behavior
• Improve website functionality and user experience
• Provide personalized content

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Provision

• Responding to inquiries and providing customer support
• Processing and fulfilling Next.js web application development requests
• Delivering modern web application development services
• Managing project communications and deliverables

3.2 Business Operations

• Improving our website and services
• Conducting internal analytics and research
• Managing our business relationships
• Processing payments and billing

3.3 Marketing Communications

• Sending newsletters and marketing communications (with consent)
• Promoting our services and special offers
• Conducting customer satisfaction surveys

3.4 Legal and Security

• Complying with legal obligations
• Protecting against fraud and security threats
• Enforcing our terms and conditions
• Protecting our rights and interests

4. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contract Performance: When processing is necessary to perform our contractual obligations
• Legitimate Interests: When processing serves our legitimate business interests
• Legal Obligation: When required to comply with applicable laws

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Website hosting and maintenance
• Email delivery services
• Analytics and performance monitoring
• Payment processing
• Customer relationship management

5.2 Legal Requirements

We may disclose information when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal process or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate fraud or security issues

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of the transaction, subject to appropriate confidentiality protections.

5.4 Consent

We may share information with your explicit consent for specific purposes not covered by this policy.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption: Data transmission and storage encryption
• Access Controls: Limited access to personal information on a need-to-know basis
• Security Monitoring: Regular monitoring for security threats and vulnerabilities
• Employee Training: Regular privacy and security training for employees
• Incident Response: Procedures for responding to data breaches and security incidents

Important: However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:

• Contact Inquiries: 3 years from last contact
• Client Project Data: 7 years after project completion for business records
• Marketing Data: Until you unsubscribe or withdraw consent
• Website Analytics: 26 months from data collection
• Legal Requirements: As required by applicable laws

8. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

8.1 General Rights

• Right to Access: Request a copy of your personal information
• Right to Rectification: Request correction of inaccurate or incomplete information
• Right to Erasure: Request deletion of your personal information
• Right to Restrict Processing: Request limitation of processing activities
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to certain processing activities

8.2 GDPR Rights (EU Residents)

EU residents have additional rights under GDPR:

• Right to Withdraw Consent: Withdraw consent for specific processing activities
• Right to Lodge a Complaint: File a complaint with supervisory authorities

8.3 CCPA Rights (California Residents)

California residents have specific rights under CCPA:

• Right to Know: Request information about data collection and sharing practices
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not face discrimination for exercising privacy rights

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers include appropriate safeguards:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contract terms for data transfers
• Certification Programs: Participation in recognized privacy certification programs

10. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately, and we will take steps to remove such information.

11. Third-Party Links and Services

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

12. Cookie Management

You can manage cookie preferences through:

12.1 Browser Settings

Most browsers allow you to:

• View and delete cookies
• Block third-party cookies
• Block all cookies (may affect website functionality)

12.2 Cookie Consent

We provide cookie consent mechanisms that allow you to:

• Accept or reject non-essential cookies
• Modify your cookie preferences
• Withdraw consent at any time

13. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will:

• Post the updated policy on our website
• Update the “Last Updated” date
• Notify you of material changes via email (if applicable)
• Obtain your consent for material changes (where required)

14. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

15. Specific State Privacy Laws

15.1 California Consumer Privacy Act (CCPA)

California residents have specific rights under CCPA. In the preceding 12 months, we have collected the following categories of personal information:

• Identifiers (name, email, IP address)
• Commercial information (project inquiries, service history)
• Internet activity (website usage data)
• Professional information (company, job title)

Important: We do not sell personal information to third parties.

15.2 Virginia Consumer Data Protection Act (VCDPA)

Virginia residents have rights similar to GDPR, including access, correction, deletion, and data portability rights.

15.3 Other State Laws

We comply with applicable state privacy laws and will update this policy as new regulations take effect.