This page supplements the main Enshored Privacy Notice for residents of the European Economic Area, the United Kingdom, and Switzerland.
Legal Bases for Processing
Under European privacy laws, Enshored must establish a valid legal basis to collect and process your personal data. Depending on the processing purpose, we rely on the following legal grounds:
- Consent: You have given clear, explicit consent for us to process your personal data for a specific purpose (e.g., subscribing to a newsletter). You may withdraw consent at any time.
- Performance of a Contract: Processing is necessary to fulfill our contractual obligations to you or your company, or to take pre-contractual steps at your request.
- Legal Obligation: Processing is required to satisfy our legal, regulatory, statutory, or tax obligations.
- Legitimate Interests: Processing is necessary to pursue our legitimate commercial interests—such as ensuring network security, conducting B2B marketing, maintaining data hygiene, and improving our operational services—provided these interests do not override your fundamental rights and freedoms.
Your Rights
Subject to statutory conditions and legal exceptions, residents of the EEA, UK, and Switzerland hold the following rights:
- Right to Access: You may request confirmation of whether we process your personal data and receive a copy of that data. To prevent unauthorized disclosure, we must verify your identity before fulfilling an access request.
- Right to Rectification: You may request that we correct inaccurate, incomplete, or outdated personal data held in our systems.
- Right to Erasure (“Right to be Forgotten”): You may request the deletion of your personal data when it is no longer necessary for processing purposes or if you withdraw consent.
Note on Deletion: Unless you instruct us otherwise, we may retain minimal data on a secure suppression list to ensure your opt-out preferences are honored in the future. We may also retain certain records where strictly required by law, accounting regulations, or security protocols.
- Right to Restrict Processing: You may request that we temporarily halt or limit the processing of your personal data under specific statutory conditions (e.g., while disputing data accuracy).
- Right to Data Portability: You may request a copy of the personal data you provided to us in a structured, commonly used, and machine-readable format to transfer to another controller.
- Right to Object & Ad Opt-Out: You have the right to object at any time to the processing of your personal data for direct marketing or profiling. Online advertising networks with whom we partner operate as independent controllers; you can opt out of personalized ad targeting through their respective platform tools or your cookie preferences.
Data Controller vs. Data Processor Roles
European data privacy law distinguishes between organizations that determine the purpose of processing (Data Controllers) and those that process data on behalf of others (Data Processors):
- When Enshored is a Data Controller: We act as a Data Controller when collecting personal data directly related to our own business operations—such as data belonging to Site visitors, Client representatives, prospective Clients, and vendors. This Privacy Notice applies directly to data handled in this capacity.
- When Enshored is a Data Processor: As a BPO service provider, Enshored acts primarily as a Data Processor when handling end-user, customer, or employee data on behalf of our corporate Clients. In these circumstances, processing is governed strictly by our Client’s written contract and the Client’s Privacy Notice. If you are an end-user seeking to exercise your privacy rights, please direct your request directly to the respective Client (the Data Controller).
Questions, Concerns, and Regulatory Complaints
If you have questions, concerns, or wish to exercise your data subject rights, please see the instructions under the How to Exercise Your Rights section of our Privacy Notice.
If you believe we have not resolved your privacy concern satisfactorily, you have the right to lodge a complaint with your local Supervisory Authority: