Legal

Privacy Policy

Last updated · April 2026

This Privacy Policy explains what personal data Enzale collects when you interact with our website and services, why we collect it, how we use it, and the rights you have over it. We follow the EU General Data Protection Regulation (GDPR) and the French Data Protection Act.

01

Data controller

Enzale, headquartered in Paris, France, acts as the data controller for the personal data processed through this website. You can reach our team at hello@enzalebio.com.

02

What we collect

We only collect data that we actually need:

  • Email address — when you subscribe to our newsletter or write to us.
  • Message content — when you contact us via email.
  • Technical data — IP address, browser type, device info, and pages viewed, collected by our hosting provider for security and analytics.
  • Cookies — see our Cookie Policy for details.
03

Why we use it

  • To send you the newsletter you subscribed to (consent).
  • To respond to your inquiries (legitimate interest).
  • To operate, secure, and improve the Services (legitimate interest).
  • To comply with legal obligations.
04

Legal basis

We process your personal data based on your consent (e.g. newsletter subscription, non-essential cookies), our legitimate interests (e.g. site security, responding to messages), and our legal obligations where applicable.

05

Sharing & processors

We do not sell your personal data. We share it only with trusted service providers acting on our behalf, including:

  • Hosting and infrastructure providers.
  • Email delivery and newsletter platforms.
  • Analytics tools used in an anonymised, privacy-respecting way.

These providers are contractually bound to protect your data and process it only on our instructions.

06

International transfers

Some of our service providers may process data outside the European Economic Area. When that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.

07

How long we keep it

  • Newsletter data: until you unsubscribe.
  • Email correspondence: up to 3 years after the last exchange.
  • Technical logs: up to 12 months.
08

Your rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request deletion ("right to be forgotten").
  • Object to or restrict certain processing.
  • Withdraw consent at any time.
  • Receive your data in a portable format.
  • Lodge a complaint with the CNIL (the French data protection authority).

To exercise any of these rights, write to hello@enzalebio.com.

09

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. No system is perfectly secure, but we work hard to keep yours safe.

10

Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be notified through the Services.

Questions? Write to hello@enzalebio.com.