Privacy Policy

Last updated: May 2026

1. Who we are

This website is operated by Cavefish Ltd (company no. 15127122), trading as EchoDepth Fintec, registered in England and Wales. Our registered address is Cardiff, Wales, UK. You can contact us at hello@cavefish.ai.

2. What data we collect

We collect the following categories of personal data:

3. How we use your data

We use your data to respond to enquiries, improve our website, and understand how visitors use our services. We do not sell your data to third parties. We do not use your data for advertising.

4. Legal basis

We process contact form data on the basis of legitimate interest (responding to your enquiry). We process analytics data on the basis of consent, which you provide via our cookie banner.

5. Cookies and analytics

We use Google Analytics (GA4) to understand site usage. This is loaded only after you accept cookies via our consent banner. You can withdraw consent at any time by clearing your browser local storage or clicking "Necessary only" on a fresh visit.

6. Data retention

Contact form enquiries are retained for up to 24 months. Analytics data is retained in Google Analytics for 14 months per our GA4 settings.

7. Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict, or port your personal data. You also have the right to object to processing and to withdraw consent. To exercise any of these rights, email us at hello@cavefish.ai. You may also lodge a complaint with the ICO at ico.org.uk.

8. Third parties

We use Google Analytics (Google LLC, USA) as a data processor. Data transfers to the US are governed by Google's Standard Contractual Clauses. We use Formspree for contact form processing. No other third parties receive your personal data.

9. Changes

We may update this policy. Material changes will be reflected in the "last updated" date above. Continued use of this site constitutes acceptance of the current policy.