Skip to content

Privacy Policy

Draft — pending legal review. This document has not yet been reviewed by counsel and may change before it takes effect. Version 0.1-draft · effective 2026-10-01 · updated 2026-09-27.

This Privacy Policy explains what personal data Enamela collects from people who visit enamela.app or use the Enamela app as clinic staff, why we collect it, how long we keep it, and how to exercise your rights. It does not cover patient data collected by a clinic through Enamela, which is covered by the clinic's own notice and our Patient Privacy Notice.

1. Who this applies to

This Privacy Policy applies to visitors of our marketing website (enamela.app), people who sign up for or use the Enamela app (app.enamela.app) as clinic staff, and people who interact with our sales or support channels. It is issued by [Company legal name].

If you are a patient of a clinic that uses Enamela, please see the Patient Privacy Notice and contact your clinic directly; the clinic controls your patient data, not Enamela.

2. What we collect

  • Sign-up details: name, email, phone, clinic name, and role, provided when you create an account or request a demo.
  • Marketing and attribution data: first-party UTM parameters and first-touch source data captured when you visit our website, so we know which channel brought you to Enamela.
  • Device and usage data: browser type, approximate location from IP address, pages viewed, and similar technical data.
  • Analytics data: once enabled, Google Analytics 4 (GA4) data is collected only with your consent through our cookie banner (planned; see Cookie Policy).
  • Support communications: messages you send to hello@enamela.app or through in-app support.

3. Why we collect it

  • To create and manage your account and provide the Enamela service.
  • To respond to support requests and sales inquiries.
  • To understand which marketing channels are effective, using first-touch attribution.
  • To improve the website and product experience.
  • To meet legal, billing, and security obligations.

4. How we share data

We share data with the subprocessors listed on our Subprocessors page (for example hosting, database, and messaging providers) strictly to operate the service. We do not sell personal data. We may disclose data if required by law or to protect the rights, safety, or property of Enamela, our users, or the public.

5. Retention

We keep account and sign-up data for as long as your account is active, and for a reasonable period after closure to meet legal, billing, and dispute-resolution needs. Website analytics and attribution data is retained for a limited period consistent with the tool used to collect it. Specific retention periods are being finalized [confirm retention periods].

6. Your rights

Depending on where you are located, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact privacy@enamela.app [confirm address].

Visitors in the European Union and United Kingdom have rights under the GDPR and UK GDPR, including the right to lodge a complaint with a supervisory authority. Enamela processes website visitor data based on consent (for analytics) or legitimate interest (for basic site operation and security). Cross-border transfer safeguards will be confirmed with counsel [confirm transfer mechanism].

7. Security

We use encryption in transit and at rest, daily backups, role-based permissions, and an audit log to help protect data. See the Security page for details. No system is completely secure, and we cannot guarantee absolute security.

8. Children

The Enamela website and app are intended for clinic staff and business visitors, not for children. We do not knowingly collect personal data directly from children through the website.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected in the "updated" date above, and where appropriate we will provide additional notice.

10. Contact

Questions about this Privacy Policy can be sent to privacy@enamela.app [confirm address], or by post to [registered address].