Privacy policy
Last updated: 16 October 2026
1. Introduction
Enceladus AI Limited (“Enceladus AI”, “we”, “us” or “our”) is committed to protecting your privacy and handling your personal information responsibly.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, enceladus.ai, or contact us.
We process personal information in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and other applicable data protection legislation.
Who we are
Enceladus AI Limited
Company number: 12851617
Registered office: Suite 12, Tower House, York, YO10 4UA, United Kingdom
Email: [email protected]
Enceladus AI Limited is the data controller responsible for personal information collected through this website.
This policy applies to the Enceladus AI corporate website only. Our products and services, including Sign2Approve, have or will have their own privacy policies explaining how personal information is processed within those services.
2. Information we collect
We collect limited personal information when you interact with our website.
Information you provide
When you submit our contact form, we collect:
- Your name
- Your email address
- Your company name, if provided
- The contents of your message
We use this information to respond to your enquiry and communicate with you about the matter you have raised.
Providing this information is voluntary, although we require your name, email address and message to respond to an enquiry.
Information collected automatically
When you visit our website, certain technical information may be processed to operate, secure and understand the use of the website.
This may include information such as your IP address, browser type, device information and details of requests made to the website.
We use Cloudflare services for website hosting, security, spam prevention and visitor statistics, as explained below.
3. How we use your information
We process personal information for the following purposes:
Responding to enquiries
We use the information submitted through our contact form to respond to questions, discuss potential business opportunities and handle requests.
Our lawful basis is our legitimate interests in responding to enquiries and conducting our business. Where an enquiry relates to taking steps towards entering into a contract with you personally, we may instead rely on contractual necessity.
Website security and spam prevention
We process limited technical information to protect our website against malicious activity, automated submissions and other security threats.
Our lawful basis is our legitimate interests in maintaining a secure and reliable website.
Website analytics
We use aggregated visitor statistics to understand how our website is used and identify opportunities to improve it.
Where you accept analytics cookies, we also use Google Analytics. Our lawful basis for this is your consent, which you can withdraw at any time using “Cookie settings” at the bottom of any page.
Our lawful basis, where personal data is processed, is our legitimate interests in understanding and improving our website.
We do not use information submitted through our contact form for automated marketing campaigns or add you to a mailing list simply because you have contacted us.
4. Contact form and email delivery
When you submit our contact form, your message is sent to [email protected] using Postmark, a third-party email delivery service operated from the United States.
Contact form submissions are not stored in a database on our website.
However, your message and contact details are processed by Postmark to deliver the email and are retained within our business email system so that we can respond to your enquiry.
Postmark may also retain message information in accordance with its service configuration and retention policies.
We use appropriate contractual and technical safeguards when engaging third-party service providers to process personal information on our behalf.
5. Website hosting and security
Our website is hosted by Cloudflare.
Cloudflare provides infrastructure, performance and security services that help us deliver the website reliably and protect it against malicious traffic.
As part of providing these services, Cloudflare may process technical information, including IP addresses, browser information and request metadata.
Spam prevention
Our contact form uses Cloudflare Turnstile to distinguish legitimate visitors from automated submissions.
Turnstile analyses browser and interaction signals to help identify and prevent spam and abuse.
This processing is carried out for website security purposes and is not used by Enceladus AI to create advertising profiles.
6. Website analytics and cookies
We use Cloudflare Web Analytics to understand how visitors use our website.
Cloudflare Web Analytics:
- Does not use cookies to identify visitors.
- Does not track visitors across different websites.
- Provides website usage statistics without requiring visitors to create an account or identify themselves.
With your consent, we also use Google Analytics, provided by Google, to understand how visitors find and use our website. Google Analytics is only loaded, and its cookies only set, if you choose “Accept analytics” in our cookie banner. We have switched off Google’s advertising features, including Google signals and ad personalisation. Google Analytics does not log or store IP addresses. See our cookie policy for details.
Although Cloudflare Web Analytics does not use cookies, other Cloudflare security services may use cookies or similar technologies where necessary to protect the website.
We do not use cookies for behavioural advertising or cross-site marketing.
7. Sharing your information
We do not sell your personal information.
We share information only where necessary to operate our website, respond to enquiries, meet legal obligations or protect our legitimate interests.
Our principal service providers are:
- Cloudflare — website hosting, security, spam prevention and analytics.
- Postmark — delivery of contact form messages to our business email system.
- Google — website analytics, only where you have accepted analytics cookies.
- Our business email provider — receipt, storage and management of correspondence.
We may also disclose information where required by law, regulation or a valid request from an authorised public authority.
8. International data transfers
Some of our service providers operate outside the United Kingdom.
In particular, Postmark is a US-based service, Google may process analytics data in the United States, and Cloudflare operates an international network.
Personal information may therefore be processed in, or transferred to, countries outside the UK.
Where a transfer is subject to UK GDPR international transfer requirements, we ensure that an appropriate legal transfer mechanism is in place. Depending on the provider and circumstances, this may include applicable UK adequacy regulations or appropriate contractual safeguards.
You may contact us for further information about the safeguards applicable to your personal information.
9. How long we keep your information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected.
Contact enquiries
Messages received through our contact form are retained in our business email system for as long as necessary to manage the enquiry, maintain relevant business correspondence and meet any applicable legal obligations.
Information that is no longer required is deleted in accordance with our internal retention practices.
Website analytics
Website usage statistics are retained in accordance with the configuration and retention arrangements of Cloudflare Web Analytics. Google Analytics data is kept for 14 months.
Security information
Technical information processed for website security is retained in accordance with the relevant Cloudflare service arrangements and our operational requirements.
10. How we protect your information
We take reasonable technical and organisational measures to protect personal information against unauthorised access, accidental loss, disclosure, alteration or destruction.
These measures include using reputable service providers, secure website connections and appropriate access controls.
No internet-based service can guarantee absolute security, but we work to maintain safeguards appropriate to the nature of the information we process.
11. Your data protection rights
Under UK data protection legislation, you have rights concerning your personal information.
Depending on the circumstances, these include:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete information.
- Erasure: Ask us to delete your personal information where the law provides this right.
- Restriction: Ask us to restrict how we process your information in certain circumstances.
- Data portability: Request certain information in a structured, commonly used and machine-readable format where this right applies.
Your right to object
Where we rely on legitimate interests to process your personal information, you have the right to object to that processing. We will consider your objection in accordance with applicable data protection law.
To exercise any of your rights, please contact [email protected].
We will respond within the timescales required by applicable data protection legislation.
We do not use personal information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals.
12. Third-party websites and services
Our website may contain links to other websites, including our own products and services.
Those websites may operate under separate privacy policies.
We encourage you to review the relevant privacy policy when visiting another website or using a separate service.
13. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our website, services, legal obligations or data processing practices.
The latest version will always be published on this website, together with the date it was last updated.
Where changes materially affect how we use personal information, we will take appropriate steps to bring those changes to the attention of affected individuals.
14. Contact us
If you have questions about this Privacy Policy or how we handle your personal information, please contact:
Enceladus AI Limited
Suite 12, Tower House
York, YO10 4UA
United Kingdom
Email: [email protected]
15. Complaints
If you are concerned about how we handle your personal information, please contact us first so that we can investigate and address your concerns.
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information is available from the ICO.