Privacy Policy | Mosaic Innovation

Last updated: 1 September 2026

Who we are

Mosaic Innovation Ltd ("Mosaic", "we", "us") is an innovation and insight consultancy registered in England and Wales, company number 12574374. Our registered office is Kemp House, 124–128 City Road, London, EC1V 2NX. We are the data controller for the personal data described in this policy.

What this policy covers

This policy explains how we handle personal data collected through mosaic-innovation.com, including when you download a guide, submit the contact form, or otherwise get in touch. It does not cover data we process on client engagements under separate contractual terms, which is governed by the relevant client agreement.

The data we collect

What	When
Name, work email, company name	Downloading a guide or toolkit
Name, email, company name, message content	Submitting the contact form
Email address	If you email us directly
Pages visited, general location (country/region), device and browser type	Browsing the site, via basic analytics

We do not knowingly collect financial information, government ID numbers, or any special category data (such as health or political opinion data) through this site.

How we use it

To send the resource you requested — the legal basis is your consent, given at the point of download.
To respond to your enquiry — the legal basis is our legitimate interest in dealing with enquiries sent to us, or the steps necessary to enter into a contract with you.
To send occasional email updates on Jobs to Be Done, Outcome-Driven Innovation, AI in innovation and related Mosaic content, where you have opted in — the legal basis is consent. You can withdraw this at any time via the unsubscribe link in any email, or by contacting us directly.
To understand how the site is used, so we can improve it — the legal basis is legitimate interest.

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects.

Who we share it with

We use the following processors to run this site and our marketing:

Brevo (Sendinblue SAS) — for form handling, email delivery and marketing automation. Brevo is based in the EU and provides appropriate safeguards for any data transferred outside the UK/EEA.
Cloudflare, Inc. — our hosting provider, which also provides basic, privacy-respecting site analytics and security filtering. Cloudflare may process data outside the UK/EEA under standard contractual clauses.
Google Fonts — used to load our typeface. Loading a font makes a request to Google's servers, which may log your IP address as part of normal web infrastructure. Google is a certified participant in relevant international data transfer frameworks.

We do not share your data with any other third party for their own marketing purposes.

How long we keep it

We keep contact and enquiry data for as long as you remain subscribed or in an active dialogue with us, and for a reasonable period afterwards in case you get back in touch, after which it is deleted or anonymised. If you unsubscribe from marketing emails, we retain a minimal record of that request so we don't accidentally re-contact you.

Your rights

Under UK GDPR, you have the right to:

Ask what personal data we hold about you, and get a copy of it
Ask us to correct inaccurate data
Ask us to delete your data
Ask us to restrict or object to certain processing
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
Data portability, where relevant
Complain to the UK Information Commissioner's Office (ICO) at ico.org.uk if you think we've mishandled your data

To exercise any of these rights, contact hello@mosaic-innovation.com. We'll respond within one month.

Cookies and similar technologies

This site uses only the technical cookies/local storage strictly necessary for it to function, plus Cloudflare's basic security and performance features. We do not currently use advertising or cross-site tracking cookies. If that changes, we will update this policy and, where required, ask for your consent first.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised. Material changes will be reflected here; we encourage you to check back periodically.