Last updated: 15 September 2026
Saturn Dynamics Privacy & Cookie policy
This Privacy Policy describes how we collect, use, and protect the personal data of users who visit the saturndynamics.com website (the “Site”) and interact with its forms, services, and content.
This policy is drafted in compliance with Regulation (EU) 2016/679 (GDPR), the UK GDPR, the UK’s Data Protection Act 2018, and, for users residing in California, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
This is a global Privacy Policy. The general provisions below apply to everyone who uses the Site. Additional information and rights for individuals in the United Kingdom and the European Economic Area (under the UK GDPR and EU GDPR) are set out in Section 9, and additional rights for residents of certain United States states (including California and Delaware) are set out in Section 10. Where a specific provision applies only to a particular jurisdiction, that is stated in the relevant section.
1. Data controller
The Data controller is:
Saturn Dynamics Inc.
Business Address: 2261 Market St, San Francisco, CA 94114, United States
Email: legal@saturndynamics.com
For any request regarding the processing of your personal data, you can contact us at the email address above.
2. Data we collect
2.1 Browsing data
When you visit the Site, some data is automatically collected, including via cookies and similar technologies (see Section 7), such as:
IP address
Browser and device type
Pages visited, date and time of access, time spent on the Site
Referring website and interactions with content
We also collect, use and share Aggregated Information such as statistical or demographic data for any purpose. Aggregated Information could be derived from your personal information but is not considered personal information in law as this data will not directly or indirectly reveal your identity.
For example, we may aggregate your technical and usage Information to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal information so that it can directly or indirectly identify you, we treat the combined data as personal information which will be used in accordance with this privacy notice.
2.2 Data you provide voluntarily
We collect personal data when you voluntarily fill out one of the following forms on the Site:
Contact form: first name, last name, email address, and the content of the message sent.
Newsletter sign-up: email address (and optionally, name).
Job applications (careers page): first name, last name, email, phone number, CV, cover letter, and any other information voluntarily included in the application (work experience, education, links to professional profiles).
3. How your information is used
Data Protection Laws require us to have a legal basis for everything that we do with your personal information falling under one of the following categories:
Performance of a contract with you: Where we need to perform a contract we are about to enter into or have entered into with you.
Legitimate interests: We may use your personal information where it is necessary to conduct our business and pursue our legitimate interests, for example to prevent fraud and/or enable us to give you the best user experience. We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal information for our legitimate interests. We do not use your personal information for activities where our interests are overridden by the impact on you (unless you have our consent or are otherwise required or permitted to by law).
Legal obligation: We may use your personal information where it is necessary for compliance with a legal obligation that we are subject to.
Consent: We rely on consent only where we have obtained your active agreement to use your personal information for a specified purpose, in relation to receiving marketing emails from us.
Vital Interests: We may process your personal information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.
We use your personal information in a number of different ways and for different reasons. The purposes and legal bases are set out below:
Purposes and Legal Basis for Processing
Responding to requests submitted via the contact form: Performance of pre-contractual measures / legitimate interest (Art. 6.1.b/f).
Sending the newsletter and marketing communications: Consent of the data subject (Art. 6.1.a).
Managing job applications: Performance of pre-contractual measures (Art. 6.1.b).
Statistical analysis of Site traffic (Analytics): Consent of the data subject (Art. 6.1.a), via cookie banner.
Site security and fraud/abuse prevention: Legitimate interest of the Controller (Art. 6.1.f).
Compliance with legal obligations: Legal obligation (Art. 6.1.c).
4. Managing your marketing preferences
As an individual subscriber (i.e. acting in your individual capacity) when you fill in an online form on our website or platform, you will be asked to indicate your preferences for receiving direct marketing communications from us. This will be via the ticking of a box which will be clearly marked as confirming your consent or relying on the soft opt-in where the relevant conditions are met.
You can also contact us at legal@saturndynamics.com.
We will always get your express consent before we share your personal information with any third party for their own direct marketing purposes.
Please note that if you opt out of receiving marketing communications, you will still receive service-related communications that are essential for administrative or customer service purposes, for example, updates to our Terms, checking that your contact details are correct etc.
5. Third-party services – who we share your personal information with
To operate the Site, we rely on third-party providers who may process data on our behalf, including, for example:
Framer - website hosting and management platform (infrastructure based on Amazon Web Services). Framer acts as our data processor for data collected through the Site.
Google Analytics (or an equivalent analytics service) - statistical and behavioral traffic analysis.
HubSpot - managing newsletter delivery and email communications, and/or contact (CRM) management.
Google Workspace — managing communications and data submitted through the Site, including contact forms, inquiries, and related records.
ATS/recruiting platform - managing job applications.
Advertising and remarketing providers (for example Google and LinkedIn advertising) - serving and measuring our ads, subject to your cookie consent.
Third parties in case of a legal requirement. We also disclose your personal information if disclosure is required by law or in the context of an investigation, regulatory requirement, judicial proceeding, court order or legal process (including to law enforcement or competent authorities like the police/tax authorities, such as HMRC in the UK).
Third parties in case of a corporate transaction. In addition, information about our customers and users, including personal information, may be disclosed as part of any merger, sale, transfer of our assets, investment, acquisition, bankruptcy, or similar event, including while engaging with our actual or potential investors.
We may provide anonymous information to analytics and search engine providers to help us improve and optimise our services. We will only share this information in a form that does not directly identify you.
These providers act as Data Processors under Art. 28 GDPR, or process data as independent Data Controllers under their own privacy policies, which we encourage you to review.
6. International data transfers
Some of the providers listed above (e.g., Google, HubSpot) are based in, or process data in, the United States. Our hosting provider, Framer, also relies on Amazon Web Services (AWS) infrastructure, which may involve data transfers outside the EU. In these cases, the transfer relies on:
Standard Contractual Clauses (SCCs) approved by the European Commission; and/or
Applicable adequacy decisions (e.g., the EU-U.S. Data Privacy Framework, where the provider adheres to it).
For users in the United Kingdom, equivalent mechanisms recognized by the ICO apply (the International Data Transfer Agreement / UK Addendum to the SCCs).
For more information about these safeguards, please contact us at legal@saturndynamics.com.
7. Cookies
The Site uses technical cookies necessary for its operation, and, subject to your consent, analytics and/or profiling cookies from third parties.
On your first visit, you are shown a banner that lets you accept, reject, or customize your preferences regarding non-essential cookies. You can change your choices at any time via the “Manage cookie preferences” link/button.
For more details on the types, duration, and purposes of the individual cookies used, please see our Cookie Policy.
8. Data retention
We will only retain your personal information for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal information for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you. For further information about specific retention periods, please contact us at legal@saturndynamics.com.
Examples of the retention periods we currently apply include:
Contact data: up to 24 months from the last interaction, unless earlier deletion is requested.
Newsletter sign-up: until consent is withdrawn (unsubscription).
Job applications: up to 12 months from receipt, unless you consent to longer retention for future opportunities.
Browsing/analytics data: according to the provider’s retention settings (e.g., 14–26 months for Google Analytics).
9. Your rights (UK & EU users) (UK GDPR / EU GDPR)
You have a number of rights under data protection laws in relation to your personal information.
You have the right to:
Request access to your personal information (commonly known as a subject access request). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
Request correction of the personal information that we hold about you. This enables you to have incomplete or inaccurate data corrected, though we may need to verify the accuracy of the new data you provide.
Request erasure of your personal information in certain circumstances. You may ask us to delete it where there is no good reason for us to continue processing it. You may also ask us to delete it after successfully exercising your right to object, where we may have processed it unlawfully, or where we are required to erase it by local law. We may not always be able to comply for specific legal reasons, which we will notify you about if applicable.
Object to processing of your personal information where we rely on a legitimate interest (or that of a third party), including profiling based on our legitimate interests. In some cases, we may demonstrate compelling legitimate grounds to process your information that override your right to object.
You also have the absolute right to object at any time to processing of your personal information for direct marketing purposes.
Request transfer of your personal information to you or a third party. We will provide it in a structured, commonly used, machine-readable format. This right applies only to automated information that you initially provided consent for us to use or that we used to perform a contract.
Withdraw consent at any time where we rely on consent. This does not affect the lawfulness of processing carried out before withdrawal. If you withdraw consent, we may be unable to provide certain products or services and will advise you if so.
Request restriction of processing of your personal information. This enables you to ask us to suspend processing where you want us to establish the data’s accuracy; our use of the data is unlawful but you do not want it erased; you need it to establish, exercise or defend legal claims; or you have objected to our use and we need to verify whether overriding legitimate grounds apply.
To exercise these rights, write to: legal@saturndynamics.com.
You will not have to pay a fee to access your personal information or exercise other rights. However, we may charge a reasonable fee or refuse a request that is clearly unfounded, repetitive or excessive.
What we may need from you
We may request specific information to help confirm your identity and ensure your right to access personal information or exercise other rights. We may also contact you for further information about your request to speed up our response.
Time limit to respond
We try to respond to all legitimate requests within one month. Occasionally, a particularly complex request or multiple requests may take longer. In that case, we will notify you and keep you updated.
9.1 How we handle access requests
When we receive a data access request, we check what we actually hold on that person in our systems (e.g., HubSpot) and respond within 30 days with an accurate summary of the data found.
Regarding browsing data collected via Google Analytics: your IP address is not retained by our analytics tool. It is used only momentarily to estimate your general geographic location and is then discarded. As a result, we have no way to isolate your individual browsing activity based solely on your IP address. If you have the Analytics cookie identifier assigned to your browser, you may provide it to help us carry out a more targeted search.
Please note that IP addresses may still be temporarily retained in technical server/hosting logs (e.g., by Framer, our hosting provider) for security and debugging purposes, separately from our analytics tool.
9.2 Questions and complaints
You have the right to make a complaint at any time to the relevant data protection regulator. In the UK this is the Information Commissioner’s Office (ICO) (www.ico.org.uk). We would, however, appreciate the chance to deal with your concerns before you approach any regulator, so in the first instance please contact us at legal@saturndynamics.com.
10. Rights of United States residents (California and other US states)
If you are a California resident, you have the right to:
Know what categories of personal data we collect and the purposes for which they are used;
Request access to, correction of, or deletion of your personal data;
Obtain a copy of your personal data (portability);
Opt out of the sale or sharing of your personal data for cross-context behavioural advertising. Saturn Dynamics does not sell personal data for money, but where we use third-party advertising cookies this may constitute sharing, which you can control via our cookie banner, and we honour opt-out preference signals such as the Global Privacy Control (GPC);
Limit the use and disclosure of any sensitive personal information;
Not be discriminated against for exercising these rights.
To exercise these rights, contact us at legal@saturndynamics.com.
The same technical limitations described in Section 9.1 also apply to requests from California residents: your IP address is not retained by our analytics tool, so we are unable to isolate your individual browsing activity based solely on your IP address.
10.1 Residents of other US states (including Delaware)
Depending on your state of residence, you may have similar rights under other comprehensive US state privacy laws, including the Delaware Personal Data Privacy Act. Where such a law applies to us, you may have the right to access, correct, delete and obtain a copy of your personal data, and to opt out of targeted advertising, the sale of personal data, and certain profiling. To exercise any of these rights, contact us at legal@saturndynamics.com.
11. Data security
We adopt appropriate technical and organizational measures (encryption in transit, access controls, backups) to protect personal data from unauthorized access, loss, or disclosure, in line with the principles of security by design and by default.
12. Children
The Site is not directed at children under 18, and we do not knowingly collect personal data from children. If we become aware that we have collected a child’s data without verifiable parental or guardian consent, we will promptly delete it.
13. Third-party links
Our website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
14. Changes to this privacy policy
We reserve the right to update this Privacy Policy to reflect regulatory changes or changes to our data processing practices. The “Last updated” date at the top of this document indicates the most recent revision. We encourage you to review this page periodically.
15. Contact us
For any questions regarding this Privacy Policy or the processing of your personal data:
legal@saturndynamics.com
2261 Market St, San Francisco, CA 94114, United States