Privacy Policy

Enderway (“we”) builds and hosts professional websites for service businesses. This notice explains how we handle personal data on enderway.com and in the sites we operate for clients.

When you book a walkthrough we collect your name, phone number, and optionally email, current website, and a short description of what you do. We use this only to contact you about a site preview. We do not sell this data or use it for unrelated marketing.

On client websites, visitors may submit a quote request (typically name, phone, optional email, and answers about the job). That data is stored for the client so they can follow up. We process it on their behalf as a service provider.

We keep walkthrough and lead records as long as needed to provide the service and for a reasonable period afterwards for support and accounting, then delete or anonymise them. Business customers can export or permanently delete quote leads from the workspace CRM without contacting us.

You can ask for access, correction, or deletion of your data by emailing hello@enderway.com. If you are in the EEA or UK you may also contact your local data protection authority.

Some forms use Cloudflare Turnstile to reduce automated spam. Turnstile may process minimal technical signals (such as IP address and browser characteristics) solely to distinguish humans from bots. We do not use Turnstile to profile visitors for marketing. For more detail, see Cloudflare's Turnstile Privacy Addendum at https://www.cloudflare.com/en-gb/turnstile-privacy-policy/.

We use only essential cookies and similar storage needed to run the service: signed-in sessions, language preference on client sites after you switch language, and temporary quote-form progress if you start a calculator. The marketing site language comes from the URL only. We do not use advertising or third-party marketing cookies, so we do not show a cookie consent banner. Country for phone defaults and pricing is resolved from the request (for example Vercel edge location) and is not stored in a cookie.

For business customers, our Data Processing Agreement (including the list of sub-processors) is published at /dpa. If we change how we use data, we will update this page and, where required, notify customers.