How this website handles information.

Last updated: 24 October 2026.

This notice covers the Mossaic marketing website, enquiries sent through it and optional website measurement.

When you request a demo

The enquiry form requires an email address, a description of the work and permission to use those details to respond. Your name and organisation are optional. We also record the submission time, source page and a reference for the enquiry.

We use these details to understand your request, respond and prepare for a conversation. Submitting an enquiry does not subscribe you to a newsletter. Please leave out passwords, confidential business records and sensitive personal information.

The website saves a successful enquiry in its database before attempting an email notification to the Mossaic team. The notification includes your enquiry details. The form confirms storage; it does not confirm that an email reached an inbox.

Optional analytics

When optional analytics is enabled, you can allow or decline it. With permission, the website records actions such as opening a process example or submitting an enquiry, together with the page path. These events exclude enquiry text, names, email addresses and full URL query strings.

Approved campaign tags can accompany permitted events, including the record that an enquiry was saved. Arbitrary campaign values are not retained. The website does not use a visitor or session identifier to join your page views into a browsing history.

Do Not Track and Global Privacy Control signals keep optional analytics off, including when a previous choice allowed them. Use Cookie preferences in the footer to change your choice. Declining or withdrawing permission stops future optional events and clears stored campaign attribution. It does not automatically erase records already saved.

Basic counts and security

Separate totals count saved enquiries. When page counting is enabled, it also counts successful page requests by date and page path. These totals do not identify unique people or connect one page request to another.

The server can inspect a request's user agent and available hosting signals to estimate broad traffic types, such as a browser, search crawler or AI tool. Page totals store only coarse labels, not raw user agents, IP addresses or hosting bot scores. These estimates do not verify who made a request.

The enquiry service validates submissions and limits repeated requests using short-lived keyed hashes. Hosting and security providers may separately process connection information needed to operate and protect their services.

Hosting and notification services

Cloudflare hosts the public website and its D1 enquiry and measurement database. Cloudflare Turnstile checks form submissions for automated abuse. The live form's security check requires JavaScript.

Postmark processes enquiry notification emails. It receives the email address, optional name and organisation, enquiry text, source page and enquiry reference needed for the notification. The recipient's email provider also handles and stores that message.

Service providers may process information in different countries. This notice does not promise that every record stays in one country.

Preferences and downloads

Your analytics choice is stored in your browser for up to 90 days. Approved campaign attribution, when present and permitted, lasts for the browser session. These use browser storage; the website does not create an advertising identifier.

The optional process outline is generated on your device as a text download. Its contents are not submitted or stored by the website.

How long records are kept

Routine website enquiries are removed from the website database after 180 days. Optional analytics events are removed after 90 days. Aggregate page and enquiry counts are removed after 16 months. Scheduled maintenance applies these database retention periods.

The 180-day database cleanup does not remove copies in notification emails, subsequent correspondence or provider records. Email-provider records follow that provider's retention settings. Correspondence is kept while we handle the enquiry and related follow-up. Records for an agreed customer engagement are handled separately.

Removing a live database record does not immediately erase provider backups. Backup copies remain until their applicable retention period expires.

Access and privacy requests

Enquiries are intended for the Mossaic team members handling the request and the providers needed to operate the website and email service. Analytics events do not include your enquiry text or email address.

You can ask about information you submitted, request a copy or correction, or ask for deletion. We may need enough information to verify that the enquiry is yours. Deletion requests can include associated email copies; anonymous totals that cannot identify you may remain.

Email privacy@mossaic.ai for a privacy request, or use the enquiry form. Include only the details needed to identify your enquiry.

External links, including our LinkedIn page, take you to services with their own privacy notices.

Product information

Product data location, access, retention and AI-provider handling depend on the implementation. Discuss those requirements with us when defining the process and its scope.