Approved business details can become public, but saved businesses, review notes, verification records, and portal activity stay inside controlled CHIMA™ Systems workflows.
Privacy Policy
Effective draft: June 21, 2026. This draft is written for CHIMA™ internal review and should receive final legal review before production launch.
This Privacy Policy explains what The Enterprise Gallery and connected CHIMA™ Systems workflows may collect, how that information is used, what may become public, and what should stay private.
1. Scope and connected systems
Legal terms
This Policy applies to The Enterprise Gallery marketplace website, business registration and claim flows, saved business features, hire request intake, Spotlight, Showcase, SnapShots-related surfaces, and related CHIMA™ Systems portal/account workflows.
Some authenticated records may be processed inside CHIMA™ Systems/Odoo or a secure backend-for-frontend/API layer rather than inside the public static frontend.
What this means
The public website is only one piece. Login, review, requests, credits, and business management connect back to CHIMA™ Systems, which is the source of truth for sensitive account data.
2. Information we collect
Legal terms
CHIMA™ may collect account information, contact details, business registration details, claim verification information, submitted profile content, public business information, media assets, hire request details, saved businesses, credit/boost activity, portal action activity, communications, device and usage information, analytics events, and security logs.
CHIMA™ may also receive information from public sources, business owners, authorized representatives, customers, service providers, CHIMA™ Systems records, and marketplace review processes.
What this means
We may collect the information needed to run the marketplace: who you are, what business you manage, what you submit, what you save, what requests you send, and basic site/security activity.
3. How information is used
Legal terms
CHIMA™ may use information to create and manage accounts, verify business authority, review registrations and claims, publish safe business profiles, process hire requests, operate saved business lists, manage Marketplace/Spotlight/Showcase/SnapShots workflows, provide credits or boosts, moderate content, prevent misuse, communicate with users, improve services, and comply with legal obligations.
What this means
We use data to make the marketplace work: find businesses, review submissions, help customers request services, help owners manage their profiles, and keep unsafe or fake activity out.
4. Public versus private information
Legal terms
Approved business profile information may be displayed publicly, including business name, category, service area, public website, social links, public contact methods, descriptions, photos, work previews, trust labels, availability signals, Spotlight/Showcase/SnapShots references, and other approved listing details.
Saved business lists, private account settings, internal review notes, verification documents, non-public contact details, request drafts, customer identity for saved-only activity, and CHIMA™ administrative notes should not be public.
What this means
A public listing can show business details that help people decide who to hire. Your private shortlist, account details, verification records, and internal CHIMA™ notes should stay private.
5. Saved businesses and hire requests
Legal terms
Saving a business is intended to be private account activity. Businesses may receive aggregate or anonymized interest metrics where appropriate, but they should not receive your name, contact details, or request details unless you submit a hire request, introduction request, quote request, or other explicit communication.
Hire requests may be reviewed, routed, priced, moderated, or clarified by CHIMA™ before a business receives actionable customer details.
What this means
Saving a business is like bookmarking it. The business should not know it was you unless you choose to contact them or send a request.
6. How information may be shared
Legal terms
CHIMA™ may share information with service providers, hosting providers, analytics providers, payment processors, security vendors, professional advisors, CHIMA™ affiliates, marketplace businesses when users initiate requests, distribution channels approved for publication, and authorities or third parties when required by law or needed to protect rights, safety, or security.
CHIMA™ should not sell personal information in the ordinary meaning of exchanging it for money. If future advertising or data-sharing practices trigger state privacy opt-out rights, CHIMA™ should provide the required notices and controls before launch.
What this means
We share data when needed to run the service, process requests, host the site, protect the system, or comply with law. If future ad or data-sharing rules require opt-outs, CHIMA™ should add those controls before using them.
7. Cookies, analytics, and security logs
Legal terms
The marketplace may use cookies, local storage, analytics, server logs, bot protection, rate-limiting, and similar technologies to remember preferences, maintain sessions, measure usage, improve performance, detect abuse, and secure marketplace services.
Production launch should define the specific tools used, cookie categories, retention periods, and any consent or opt-out mechanisms required by applicable law.
What this means
The site may use normal web tools to keep you logged in, understand what works, and block abuse. Before launch, CHIMA™ should list the exact tools and cookie choices.
8. Security and retention
Legal terms
CHIMA™ uses reasonable administrative, technical, and organizational safeguards designed to protect information. No system can be guaranteed perfectly secure. CHIMA™ should retain information only as long as needed for marketplace operations, account management, legal compliance, dispute handling, security, auditing, and legitimate business needs.
CHIMA™ should maintain incident response, access control, logging, least-privilege permissions, and data minimization practices for CHIMA™ Systems and related APIs.
What this means
Security matters. CHIMA™ should collect what it needs, protect it carefully, limit who can see it, and delete or archive records when they are no longer needed.
9. Privacy choices and rights
Legal terms
Depending on location and applicable law, users may have rights to request access, correction, deletion, portability, restriction, objection, opt-out of certain sharing, or withdrawal of consent. CHIMA™ should verify requests before acting and may retain information where legally permitted or required.
Business profile corrections may be handled through claim, verification, portal, or support workflows so CHIMA™ can protect against unauthorized changes.
What this means
You may be able to ask CHIMA™ to show, correct, delete, or limit certain data. Business listing changes may need verification so someone else cannot hijack a profile.
10. Children, changes, and contact
Legal terms
The marketplace is intended for business users and general customers, not children under 13. CHIMA™ does not knowingly collect personal information from children under 13 through The Enterprise Gallery.
CHIMA™ may update this Policy as services, integrations, legal requirements, or data practices change. Material changes should receive reasonable notice where appropriate.
What this means
This is a business marketplace, not a child-focused service. The Policy will need updates as the platform grows, especially when new API, credits, analytics, or distribution features launch.