Privacy policy
Enigma is a private club built on trust — and that trust starts with how we handle your data. Here, in plain terms, is what we collect and why.
This page is translated for convenience. The French version is the original and legally authoritative text.
Who is responsible for your data
HITECH GROUP, the company that publishes Enigma (see our legal notice for full details), is the data controller for your personal data under the General Data Protection Regulation (GDPR).
What data we collect
When you submit your application, we ask for:
- your first name, email and city;
- your date of birth — solely to verify that you are 18 or older, a condition of access to the club;
- your professional situation and field of activity;
- your search preferences (who you'd like to meet, age range, languages spoken);
- your answers to the form's open questions — what you're looking for, what makes you who you are, what you'd like to bring to the circle.
These last answers sometimes touch on personal aspects of your life. We're aware of that: they are only ever read by our team, with the sole purpose of reviewing your application with care — never for any other purpose, and never shared beyond that.
Why we use it
This information is used solely to:
- review your application within our team;
- communicate with you about your application (acknowledgment, decision, invitation);
- manage your membership in the club, once you are a member.
On what legal basis
We process your data on the basis of your consent — you provide it voluntarily by submitting the form — and, for applications that lead to membership, on the basis of pre-contractual measures (preparing your arrival in the club).
Who has access to it
Internally, only our team reviews the content of your application. To run the site, we rely on technical service providers, who only access your data to the strict extent necessary for their service:
- Supabase
- database hosting
- Resend
- sending emails (confirmation, decision)
- Sentry
- tracking technical errors on the site
- PostHog
- anonymized usage statistics, without cookies
We never sell or share your data for commercial or advertising purposes, with anyone.
Your data stays in Europe
None of your data is transferred outside the European Union: hosting, database and emails are all located within the EU (Ireland and France).
How long we keep it
- Rejected application
- 12 months from the decision
- Accepted application
- duration of your club membership, then 3 years
- Billing data
- 10 years (statutory accounting requirement)
Your rights
Under the GDPR, you have the right to access, rectify, erase, object to, restrict and port your data. To exercise any of these rights, simply write to us at admin@enigma.paris — we will respond as soon as possible.
If, after contacting us, you believe your rights are not being respected, you may file a complaint with the CNIL: 3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07 — www.cnil.fr.
How we protect it
Your data is transmitted encrypted (TLS), hosted within the European Union, and access to our database is restricted through row-level security policies — only strictly authorized people and services can consult it.
Minimum age
Enigma is reserved for adults. We verify your date of birth at the application stage and do not accept any registration under 18 years old.