Legal

Privacy Policy

Last updated 2 September 2026

This policy explains what personal data Enquiro collects, why we collect it, and what rights you have over it. It applies to businesses who use Enquiro (“you”, the “account holder”) and to the customers who submit an enquiry through an Enquiro form (“your customers”).

Enquiro is a UK-based service, and we handle personal data in line with the UK GDPR and the Data Protection Act 2018.

Who we are

Enquiro (“Enquiro”, “we”, “us”) provides guided enquiry forms and a lead dashboard for service businesses. For any question about this policy or your data, contact us at support@enquiro.io.

What we collect

If you're a business using Enquiro, we collect:

Account details: name, email address, and password (hashed, never stored in plain text).
Business details: business name, logo, brand colours, phone number, and notification preferences.
Billing details: handled entirely by our payment processor, Stripe. We never see or store your card details.
Usage data: pages visited, forms created, and general activity within your dashboard, used to keep the product working and secure.

If you're a customer submitting an enquiry through a business's Enquiro form, we collect:

The details you enter into that form: typically your name, phone number and/or email, location, and job details.
Any photos you choose to upload as part of an enquiry.
Basic technical data (such as IP address) used only for fraud and abuse prevention.

How we use it

To operate your account and deliver enquiries to the business you contacted, by email and/or WhatsApp.
To send you service emails: confirmations, notifications, and important account or billing updates.
To generate form content using AI, where you've asked us to (see “AI features” below).
To keep Enquiro secure, prevent abuse, and meet our legal obligations.
To understand how Enquiro is used, so we can improve it.

AI features

When a business asks Enquiro's AI to generate or edit a form, we send the business's description and, where provided, their logo image to our AI provider (Anthropic) to generate a response. Customer enquiry data submitted through a live form is never sent to an AI model.

Calendar sync (Google & Microsoft)

Business-plan businesses can connect a Google or Microsoft (Outlook) calendar to Enquiro. This is entirely optional, and only available if you choose to turn it on.

If you connect a calendar, we access:

Your calendar's busy/free times, so Enquiro doesn't offer a booking slot you're already busy at.
Your calendar events' title and time, to show them alongside your Enquiro bookings in your dashboard.
The ability to create and delete events on your calendar, so a booking made through Enquiro appears on your calendar automatically, and disappears if that booking is cancelled.

We only ever read and write your own calendar. We don't access anyone else's calendar, and we don't use your calendar data for anything beyond the booking sync described above, such as advertising. Your access token is encrypted before it's stored, and you can disconnect a calendar at any time from your Bookings page, which deletes our copy of your access token immediately. You can also revoke Enquiro's access directly from your Google or Microsoft account's own security settings.

Limited Use compliance: Enquiro's use of information received from Google Workspace APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't use, transfer, or sell this data, including in raw, aggregated, or derived form, to develop, train, or improve any generalised or foundational AI/ML models. Enquiro's AI features (see “AI features” above) only ever process the business description and logo a business gives us when asking Enquiro's AI to edit a form; they never process Google Calendar data.

Who we share data with

We don't sell personal data. We share it only with the service providers that help us run Enquiro, each bound by their own data protection obligations:

Supabase, for database hosting and authentication.
Loops, for sending transactional email.
Stripe, for payment processing.
Anthropic, for AI-generated form content, as described above.
Sentry, for error monitoring, so we can detect and fix bugs before they affect you.

A business using Enquiro receives their own customers' enquiry data directly; that business is responsible for how it handles that data once received.

How long we keep it

We keep account and enquiry data for as long as an account stays active, so businesses retain their full lead history. If you close your account, we delete personal data within 30 days, except where we're required to keep it for legal or accounting reasons.

Your rights

Under UK GDPR, you can ask us to access, correct, delete, or export your personal data, and you can object to or restrict certain uses of it. To exercise any of these rights, email support@enquiro.io. If a business holds your data as a customer of theirs, you may need to contact that business directly, as they control what happens to enquiries they receive.

You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO).