Privacy Policy
Last updated August 12, 2026
EnAffaire is a service of RKP Atlantic Business Services, Grand-Barachois, New Brunswick, Canada. This page explains what we collect, why, who else sees it, where it is kept, and how to get it corrected or removed. It is written to be read, not to be survived.
The short version. We collect what we need to run your business page, bill you, and send the alerts your customers ask for. We do not sell personal information and we do not rent or trade mailing lists. Our servers are in Germany. You can ask us for a copy of your data, or ask us to delete it, at hello@enaffaire.com.
1. Two different relationships
EnAffaire handles personal information in two distinct roles, and your rights differ slightly depending on which one applies to you.
- You are a business that uses EnAffaire. We hold your account and billing details, and we are responsible for them.
- You subscribed to alerts from a business that uses EnAffaire. That business owns its subscriber list. We store and send on its behalf. If you want off that list, use the unsubscribe link in any message, or contact that business directly — though you can always contact us too and we will act on it.
2. What we collect
If you run a business page with us
- Business name, tagline and the content you publish (photos, specials, prices, links).
- Owner email address and phone number.
- Province and country, and a business address if you publish one.
- Billing records: what was charged and when, the result of each attempt, and a token from our payment processor that lets us bill the same card again. We do not store your full card number — it stays with the processor.
- Login and device records: when you use a magic link to sign in, we keep a hashed identifier for that device, the browser user-agent string, and the IP address at the time the device was remembered, so you are not asked to sign in again on every visit.
If you subscribe to a business's alerts
- Your email address, and whether the subscription is pending, confirmed or cancelled.
- The IP address and browser user-agent recorded at the moment you subscribed. We keep these as the record that consent was actually given, and for no other purpose. Subscriptions are confirmed by a second step, so an address cannot be added without access to that inbox.
- If you turn on phone alerts, the push subscription your browser issues — an endpoint address and the two keys needed to encrypt a message to it — plus your browser user-agent. This identifies a browser on a device, not a person by name.
- Delivery records: what was sent, when, and whether it succeeded.
- If you tap the heart on a special, an opaque device identifier so the same device is not counted twice. It is not linked to your email address.
If you connect your Facebook Page
Connecting a Facebook Page is optional, you start it, and you can undo it at any time. If you do connect one, Facebook gives us:
- The list of Pages you manage, so you can choose which one to connect. We keep only the one you pick.
- That Page's name and its Facebook Page ID.
- Content the Page itself has published — posts, photos and their captions — which we use to fill in your EnAffaire board so you are editing rather than starting from an empty page.
- An access token for that Page, which we store encrypted and use only to read the items above. We never post, reply, delete or advertise as your Page.
- The Facebook user ID of whoever granted the connection, so we can honour a deletion request from that person.
What we do not ask Facebook for: your personal profile beyond that user ID, your friends, your private messages, your ad accounts, or anything written by visitors to your Page such as their comments and reviews.
You can disconnect at any time from your portal, and Facebook can revoke our access at any time from your Facebook settings. Either one stops all further reading immediately and deletes the stored token. Photos already imported stay on your EnAffaire board, because they are your page's content by then — you can delete any of them yourself. Facebook can also send us a deletion request on your behalf; that is handled at enaffaire.com/fb/data-deletion.php and you are given a confirmation code you can look up.
If you are just visiting the site
- Standard web server logs: IP address, the pages requested, timestamps, referring page and user-agent. These are ordinary security and troubleshooting records.
- Analytics and advertising measurement, described in section 4.
3. Cookies
We set three cookies of our own. None of them are used for advertising.
| Cookie | Purpose | Lifetime |
|---|---|---|
ea_device | Keeps you signed in to your own business page after a magic-link login. Not readable by JavaScript. | Up to 90 days |
ea_dev | An anonymous device marker so the same device is not counted twice when hearting a special. | 1 year |
ea_staff | Internal staff access. Never set for ordinary visitors. | Session |
Third parties named in section 4 may also set their own cookies. You can block or delete
cookies in your browser; blocking ea_device means you will be asked to sign in
more often, and nothing else on the site will break.
4. Third parties on this site
These services run on our pages or receive information from them. Each one necessarily receives your IP address and the page you are on, because that is how a web request works.
| Service | What it does here |
|---|---|
| Cloudflare | Serves and protects the site, filters malicious traffic, and provides basic aggregate traffic statistics. |
Google Ads (tag AW-18054540130) | Tells us which advertisements led to a signup, so we know what to stop paying for. |
| Meta (Facebook) pixel | Added August 2026. Reports that a page from one of our Facebook advertisements finished loading, and measures results. This pixel is shared with our sister service Find Me First. |
| Google Fonts | Serves the typefaces the site uses. Your IP address is disclosed to Google to deliver them. |
| Omnilo | Our own chat and translation widget, run on a separate domain. If you start a chat, the messages are stored so we can reply. |
| Elavon / Converge | Processes card payments. Card details are entered with and held by the processor. |
Google and Meta use what they collect here in line with their own terms as well as ours. If you would rather not be measured by them, browser tracking protection and ad-blocking extensions both prevent these tags from loading, and the site works normally without them.
5. Where your information is stored
Our servers are located in Germany. If you are in Canada, this means your information is stored outside the country and is subject to the laws of the jurisdiction it sits in, including lawful access requests by authorities there. Our third-party providers may process information in the United States and elsewhere. We tell you this because Canadian privacy law expects it to be said plainly, not buried.
6. Why we are allowed to hold it
- To provide the service — publishing your board, sending alerts, keeping you signed in.
- To bill you and keep the records a business is required to keep.
- With your consent — subscribing to a business's alerts is opt-in and confirmed, and can be withdrawn at any time.
- Legitimate operation — security logging, fraud prevention, and knowing which advertisements work.
7. Who else we share it with
We do not sell personal information, and we do not share subscriber lists between businesses. A business using EnAffaire can see its own subscribers and nobody else's. Beyond the providers in section 4, we disclose information only where the law requires it, or where it is necessary to protect the service against abuse.
8. How long we keep it
- Account and published content — for as long as the account exists. Suspending or ending an account does not by itself erase it, so that a page can be restored if you come back. Ask us and we will delete it.
- Billing records — kept as long as tax and accounting rules require.
- Subscribers — until the subscription is cancelled. We keep a record that an address unsubscribed so that it is not accidentally re-added.
- Device and login records — until they expire or you sign out.
- Server logs — kept for a short period for security and diagnosis.
9. Your rights
Under Canadian privacy law you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it, where we are not required to keep it;
- stop sending you things, at any time.
Write to hello@enaffaire.com and we will respond within 30 days. There is no charge. If you are not satisfied with our answer, you may complain to the Office of the Privacy Commissioner of Canada.
10. Security
The site is served over HTTPS, sign-in tokens and device identifiers are stored hashed rather than in the clear, and access to the systems is limited to people who need it. No service can promise perfect security, and we would rather say so than imply otherwise.
11. Children
EnAffaire is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe we have, tell us and we will remove it.
12. Changes to this policy
If we change what we collect or who we share it with, we will update this page and change the date at the top. Material changes affecting your account will also be emailed to you.
13. Contact
RKP Atlantic Business Services, a trading name of 687441 NB Inc.
105-69 Cap Bimet Blvd.
Grand-Barachois, NB, Canada
Email: hello@enaffaire.com
Office: 506-870-8499 · Toll-free: 1-877-212-0562