Privacy policy
Version 1.0 · Last updated 2026-08-19
This policy describes what EnneonRadar actually holds about you, why, for how long, and what you can ask us to do about it. It is specific to EnneonRadar — if something is not listed here, we do not do it.
1. Who is responsible
The controller of your personal data is [to be confirmed], of [to be confirmed], operating EnneonRadar. Privacy contact: [to be confirmed].
2. What we collect, and why
We collect the minimum needed to run the service. We do not collect data because it might be useful one day.
| What | Why | Lawful basis |
|---|---|---|
| Email address | To send the newsletter or alerts you asked for, and to operate your account | Consent for marketing; contract for account messages |
| Name (optional) | To address messages to you | Consent |
| Password (stored hashed, never readable) | To sign you in | Contract |
| Country and time zone (optional) | To send at a sensible local hour and show relevant currency | Consent |
| Your Radars and saved properties | To match finds to your criteria and keep your bookmarks | Contract |
| Enquiries you send | To pass on your enquiry and keep a record of it | Contract |
| Message history — what we sent, when, and whether it was delivered | To avoid sending duplicates and to diagnose delivery problems | Legitimate interests |
| Consent records — the exact wording you agreed to, when, and from where | To evidence that we were entitled to message you, and that we stopped when asked | Legal obligation |
| Subscription and payment status | To give you the access you paid for and meet tax obligations | Contract; legal obligation |
| How you first arrived (campaign parameters on your first visit) | To know which campaigns reach people | Legitimate interests; consent where cookies are involved |
| Technical request data, kept briefly | Security, abuse prevention and debugging | Legitimate interests |
We do not ask for or want special-category data, financial account details, identity documents or information about your family. Please don't send them.
3. Card details
EnneonRadar never sees or stores your card number. Payments are processed by a payment provider that holds those details under its own terms; we hold only the subscription state and the record of what was charged.
4. Email consent
Creating an account is not consent to marketing. Each type of email is a separate choice. We keep a record of the exact sentence you agreed to and when, so that if you ever ask why you received something, we can show you.
You can withdraw any of it at any time — from the link in any message, without signing in, or from your account. Withdrawing one thing never silently withdraws another.
5. Marketing versus service messages
Newsletters and alerts are marketing and always optional. Messages about your account — password resets, receipts, security notices, notice of changes to our terms — are not marketing, are necessary to operate an account you asked for, and continue while your account exists. When you unsubscribe, it takes effect immediately, and we do not send a “are you sure?” message afterwards.
6. Who we share data with
Only where it is needed to run the service, and only to the extent needed:
- • the provider that delivers our email;
- • our hosting and database provider;
- • a payment provider, if you subscribe to Premium;
- • professional advisers, or an authority, where we are legally required to.
Each is bound to process data only on our instructions. We do not sell your personal data, and we do not share it for anyone else's advertising. We name specific vendors here once they are configured rather than listing tools we might use.
When you send an enquiry about a property, its content goes to the party the enquiry is for. That is the purpose of sending it.
7. Where data is held
Our infrastructure is in the European Economic Area. Where a provider processes data outside it, we rely on an adequacy decision or on standard contractual clauses, and we keep the transfer to what the service needs.
8. How long we keep things
We do not keep data indefinitely, and we will not pretend everything disappears the moment you ask. Some records must be retained, and this is which:
| Record | Retention | Why |
|---|---|---|
| Your account and preferences | While your account exists | To provide the service |
| Inactive accounts | 24 months of inactivity, then deleted | Not keeping what nobody is using |
| Consent and opt-out evidence | 6 years after withdrawal | To prove we were entitled to message you and that we stopped |
| Billing and invoice records | 7 years | Tax and accounting law |
| Security and access logs | 180 days | Detecting and investigating abuse |
| Analytics events | 395 days | Understanding how the service is used |
9. Your rights
Depending on where you live, you may have the right to ask for a copy of your data, to have it corrected, to have it deleted, to restrict or object to how we use it, to receive it in a portable form, and to withdraw consent. These rights are not identical everywhere and some have conditions and exceptions — we will tell you plainly which apply to your request rather than implying every right applies in every case.
- • See or export your data: if you have an account, download it now as JSON. Otherwise ask us.
- • Correct something: most details are editable in your account settings; for anything else, ask us.
- • Change what we send: use the link in any message — no login needed.
- • Delete your account: request deletion. We act within 30 days.
When we delete an account we remove your profile, your Radars, your saved properties and your message history. We keep the consent evidence and the billing records described above for the periods stated, because we are required to — and we will say so in our reply rather than claiming total erasure.
We may need to confirm you control the email address before acting, to avoid handing your data to someone else. We do not charge for this, and we do not treat a request as a reason to try to keep you.
10. Complaints
If you think we have handled your data badly, tell us first — [to be confirmed]. You also have the right to complain to a data protection authority: [to be confirmed], or the authority in the country where you live.
11. Cookies
Essential cookies keep you signed in and protect forms. Analytics and marketing cookies are optional, off until you allow them, and never loaded before you decide. See the cookie policy or change your preferences.
12. Automated decisions
Radar matching and the EnneonRadar Score are automated, but neither makes a decision about you with legal or similarly significant effect: they decide which property listings to show you. There is no profiling of you for credit, employment, insurance or pricing.
13. Children
EnneonRadar is for adults. We do not knowingly collect data about anyone under 18; if we learn we have, we delete it.
14. Security
Passwords are stored hashed and salted, traffic is encrypted in transit, access to production data is limited to the people who need it, and we keep short-lived logs so we can spot abuse. No system is perfectly secure; if a breach affects you and the law requires it, we will notify you and the relevant authority.
15. Property information and personal data
Property listings themselves are not data about you. Where a listing names an agent or a contact, we hold that as part of the listing record and use it only to attribute the listing and to pass on an enquiry. If you are named in a listing we show and want that changed, use the report form.
16. Changes to this policy
The version and date at the top of this page show what is current. For a change that materially affects you, we will tell you before it takes effect.
Questions about this document: [to be confirmed]. Privacy specifically: [to be confirmed].
Other documents: Terms · Privacy · Disclaimer · Cookies