Privacy Policy

This site is operated by Enfec LLC(“Enfec,” “we,” “us”). We have offices in Bellevue, Washington (United States) and Hyderabad, Telangana (India). For any privacy questions, write to privacy@enfec.com.

We only collect personal data when you give it to us deliberately. There is no hidden tracking on this site.

• Contact form. Name, email, subject and message, when you write to us via the contact form.
• Job applications. Full name, email, mobile, city, notice period and your résumé file, when you apply to a role on our careers page.
• Newsletter. Email address only, if you choose to subscribe.
• Admin sessions. An authentication cookie set only on /admin routes, used by our team to manage the site. Public visitors do not receive this cookie.

We do not use Google Analytics, Facebook Pixel, advertising trackers or third-party chat widgets on the public site.

• To respond to your enquiry or job application.
• To send our newsletter, if you opted in.
• To keep the site secure and prevent abuse.
• To comply with our legal and tax obligations.

We do not sell your data, and we do not use it to profile or advertise to you.

Where the EU/UK General Data Protection Regulation applies, we rely on the following bases:

• Consent for newsletter subscriptions and any non-essential cookies you opt into.
• Performance of a contract or pre-contract steps for processing job applications.
• Legitimate interests for responding to your contact-form messages and keeping the site secure.
• Legal obligation for record-keeping required by tax, employment or other law.

We use a small number of trusted processors. They only act on our instructions and are bound by contract to protect your data.

• Supabase hosts our database and file storage (résumés, images uploaded by our team).
• Vercel hosts and serves this website.
• Email delivery services send transactional emails such as application receipts and newsletter messages.
• YouTube (via youtube-nocookie.com) loads only when you press play on an embedded video. The privacy-enhanced mode means YouTube does not set cookies until that point.

Some of these providers are based in the United States. Where personal data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses or equivalent safeguards.

• Contact messages: up to 24 months from your last interaction, unless you ask for earlier deletion.
• Job applications: up to 12 months after the role closes, then deleted, unless we agree with you to keep them on file for future roles.
• Newsletter subscribers: until you unsubscribe.

You can ask us to:

• see what personal data we hold about you;
• correct anything that is wrong;
• delete your data (subject to legal retention obligations);
• restrict or object to certain uses;
• port your data to another provider;
• withdraw consent at any time, including for newsletter and non-essential cookies.

Email us at privacy@enfec.comand we’ll respond within 30 days. EU/UK residents may also complain to their local supervisory authority.

See our cookie policy for the full list of cookies and how to manage them. You can change your preferences any time from that page.

Personal data is held on encrypted infrastructure with restricted access. We follow industry-standard practices, but no system is completely secure. If we ever discover a breach affecting your data, we will notify you and the relevant authorities as required.

This site is not directed to children under 16, and we do not knowingly collect personal data from them.

This policy is governed by the laws of the State of Washington, United States, and the laws of India applicable to our Hyderabad office, each to the extent relevant. Nothing in this policy overrides rights you have under GDPR or other mandatory local law.

We’ll update this page when our practices change. The “last updated” date at the top will reflect any revision; material changes will be flagged on the site itself.