1. Who we are
Enigmatix Global Ltd ("Enigmatix Global", "we", "us") is a UK-incorporated software engineering company with offices in the United Kingdom, Saudi Arabia, Bahrain, and Pakistan. We are the data controller for any personal information collected through this website.
Our registered address and other contact details are at the bottom of this page.
2. What we collect
We only collect personal information you give us deliberately. We do not buy lists, do not scrape LinkedIn, and do not run third-party tracking pixels for advertising. The information we collect comes from one source — the contact form on this site — and includes:
- Your name and the email address you provide
- Your phone number (only if you choose to share it)
- Your company name (only if you choose to share it)
- Project context you tell us about: the type of work, budget range, timeline, and any free-text message
- The page you submitted from (the HTTP Referer header), so we know whether your enquiry was sparked by a case study, a service page, or something else
- The timestamp of your submission
We do not collect your IP address, location, browser fingerprint, or anything else from the form submission itself. The website does load Firebase Analytics, which is covered separately in the Cookies and analytics section below.
3. Why we collect it
The legal basis for processing your personal information is legitimate interest under Article 6(1)(f) of UK GDPR — you have asked us to get back to you about a potential engagement, and we cannot do that without your contact details.
The data is used solely to:
- Reply to your enquiry, usually within one working day
- Forward your enquiry internally to the right person (typically the regional lead for your office or industry)
- Maintain a record of the conversation if you become a client, so we can reference what we previously discussed
We do not use form submissions for marketing emails, newsletters, or any automated drip campaigns. We do not sell, share, or transfer your data to any third party for advertising or commercial purposes.
4. How long we keep it
If your enquiry does not become a client engagement, we retain it for up to 24 months from your last contact, then delete it. This window lets us pick up where we left off if you come back to us later.
If your enquiry leads to a signed engagement, communication records become part of the standard project file and are retained for the duration of our business relationship plus any legal or contractual obligation period (usually six years for tax purposes).
You can ask us to delete your data sooner — see Your rights below.
5. Who else sees it
Your data is processed by a small number of carefully chosen third parties, each with their own GDPR-compliant data processing agreements:
- Resend (Resend, Inc., USA) — delivers the transactional email containing your form submission to our internal team. Bound by their Data Processing Agreement.
- Vercel (Vercel, Inc., USA) — hosts the website and the serverless function that processes your form submission. Bound by their Data Processing Agreement.
- Google (Firebase Analytics) — sees aggregate, pseudonymous usage data from this site if your browser allows it. See Cookies and analytics.
- Cal.com(Cal.com, Inc., USA) — only if you click a "Book a 30-min call" link and complete a booking. Cal.com then collects its own data under its own privacy policy. We never see anything you enter on cal.com beyond the booking confirmation.
These transfers may involve personal data leaving the UK or EU. Where that happens, transfers are governed by the UK Addendum to the EU Standard Contractual Clauses, which is the safeguard recognised by the UK Information Commissioner's Office.
6. Your rights
Under UK GDPR, you can ask us to:
- Access the personal information we hold about you
- Rectify anything that is incorrect
- Eraseyour data (sometimes called the "right to be forgotten")
- Restrict how we use it, while we resolve a dispute
- Port it — receive a machine-readable copy you can take elsewhere
- Object to our processing it for legitimate interests
To exercise any of these rights, write to privacy@enigmatixglobal.com. We respond to all requests within 30 days, usually faster.
If you are not satisfied with how we handled your request, you can complain to the UK Information Commissioner's Office at ico.org.uk.
8. Changes to this policy
We may update this policy from time to time — typically when we add or change a third-party processor, or when relevant law changes. The Last updated date at the top of this page reflects the most recent revision.
Significant changes (a new processor, a new lawful basis, or a major scope expansion) will be flagged on the homepage for at least 14 days before they take effect.
9. Contact us
For privacy or data-protection questions:
Email: privacy@enigmatixglobal.com
General enquiries: contact form or info@enigmatixglobal.com
Post: Enigmatix Global Ltd, London, United Kingdom (full registered address provided on request)