1. Overview

Evolve Catalyst, a company registered in England and Wales (Company Number 16007722), operates the website www.catalystbridge.co.uk (the “Service”). This Privacy Policy explains how we collect, use, and disclose personal data when you use our Service and outlines your choices regarding that data.

CatalystBridge is operated by Evolve Catalyst, which is responsible for managing and safeguarding user data as described in this Privacy Policy. By accessing or using our Service, you agree to the collection and use of your information under this Privacy Policy.

Unless otherwise defined here, terms used in this Privacy Policy carry the same meanings as those in our Terms and Conditions, which are accessible on our website.

We are committed to safeguarding your privacy and ensuring the security of your personal information. Please review this Privacy Policy carefully to understand our data practices and how we protect your information.

2. Definitions

To ensure clarity throughout this Privacy Policy, the following key terms are defined:

• Service: The www.catalystbridge.co.uk website is operated by Evolve Catalyst.
• Personal Data: Any information that relates to an identified or identifiable individual.
• Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
• Cookies: Small pieces of data stored on your device.
• Data Controller: The entity that determines the purposes and means of processing personal data.
• Data Processor (or Service Provider): Any entity that processes personal data on behalf of the Data Controller.
• Data Subject (or User): The individual who is the subject of Personal Data.

3. Information We Collect

We collect various types of information to provide and improve our services, including:

• Personal Information: Such as your name, email address, organisation name, phone number, and address, which you may provide when interacting with our website or services.
• Usage Data: Information about how you interact with our website, including browsing history, pages visited, time and date of visits, and other diagnostic data.
• Cookies: We use cookies and similar tracking technologies to enhance your experience and collect information about your activities on our website.

4. How We Use Your Information

We use the information we collect to:

• Improve Services: Understanding user interactions helps us identify areas for improvement.
• Personalise User Experience: Tailor our offerings based on your preferences and behaviour.
• Communication: Respond to inquiries, provide updates on our services and share content.

We handle your information with care and follow strict security measures to safeguard it from unauthorised access or misuse.

5. Legal Basis for Processing Personal Data Under (GDPR)

Evolve Catalyst processes Personal Data based on:

• Contractual Necessity: Required to perform a contract with the individual.
• Consent: Explicit consent provided by the individual.
• Legitimate Interests: Where processing is necessary for legitimate interests not overridden by individual rights.

Under GDPR, you have the right to access, rectify, delete, restrict, or object to the processing of your data. Contact us at contact@evolvecatalyst.org to exercise these rights.

6. Data Retention

We believe in responsible data management and follow strict guidelines regarding the retention of personal data. Here’s what you need to know about how long we retain your information and the reasons behind it:

Duration of Retention:

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy. After this period, your data will be securely deleted or anonymised unless further retention is required by law.

Legal Obligations:

In some cases, we may be required by law to retain certain personal data for a specified period, even after the original purpose for collecting it has been fulfilled. This could include compliance with legal obligations, regulatory requirements, or obligations arising from contractual agreements with our users.

Reasons for Data Retention:

The retention of personal data serves several purposes, including:

• Compliance: Ensuring compliance with applicable laws, regulations, or legal processes that require the retention of certain information for specified periods.
• Dispute Resolution: Retaining data may be necessary to address any disputes, claims, or legal proceedings that may arise in the future.
• Security and Fraud Prevention: Keeping records of user interactions and transactions helps us maintain the security of our website or services and prevent fraudulent activities.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience, analyse website usage, and personalise content and advertisements. Here’s what you need to know about how we use these technologies:

What are Cookies:

Cookies are small pieces of data stored on your device (computer, tablet, or mobile phone) when you visit our website. They serve various purposes, including remembering your preferences, improving website performance, and providing personalised content.

Types of Cookies:

We use different types of cookies on our website:

• Essential Cookies: These cookies are necessary for the functioning of our website and enable core functionality such as page navigation and access to secure areas.
• Analytical Cookies: These cookies allow us to analyse how users interact with our website, which helps us improve its performance and usability.
• Advertising Cookies: These cookies are used to deliver advertisements that are relevant to your interests. They may also be used to track the effectiveness of advertising campaigns.

Cookie Management:

You have the option to manage cookies through your browser settings. You can choose to accept or decline cookies and delete existing cookies stored on your device. However, please note that disabling certain cookies may impact the functionality of our website and affect your user experience.

Third-Party Tracking:

In addition to cookies, we may also use third-party tracking technologies, such as web beacons and pixels, to collect information about your browsing activities across different websites. This information is used for analytics and advertising purposes to provide you with relevant content and advertisements.

Opting Out:

You can opt out of targeted advertising by adjusting your preferences through the Ad Choices website (https://www.youradchoices.com/) or by using the opt-out tools provided by third-party advertisers and ad networks.

Upon visiting our website, a cookie consent banner will appear. By clicking ‘Accept,’ you consent to the use of cookies and tracking technologies as outlined in this policy. You can manage your cookie preferences at any time through your browser settings

8. Data Transfer

We may transfer your data to third-party service providers or partners located outside of your country or region for various purposes outlined in this Privacy Policy. These transfers may occur in the following circumstances:

Service Providers:

We may engage third-party service providers (such as hosting services, payment processors, or analytics providers) to help us provide our services. These service providers are only permitted to process your personal data as necessary to perform their functions on our behalf.

Legal Compliance:

We may also disclose your data if required to do so by law or legal process, or if we believe that such action is necessary to comply with applicable laws, regulations, or governmental requests.

Data Security Measures:

We implement strong security measures, including encryption protocols and multi-factor authentication, to protect your data. In the event of a data breach, we will notify you promptly and take the necessary steps to mitigate the impact.

Consent:

By using our services or submitting your data to us, you consent to the transfer of your data to third parties as described in this Privacy Policy. Please note that the data protection laws of these countries or regions may differ from those in your country.

While we take steps to safeguard your data during transfer, it’s important to recognise that no method of transmission over the internet or electronic storage is completely secure. Therefore, we cannot guarantee the absolute security of your data during transfer.

9. Data Disclosure

We take your privacy seriously and are committed to protecting your data. However, there may be circumstances under which we need to disclose your data to third parties. These instances include:

Legal Obligations:

We may disclose your data if required to do so by law, regulation, or legal process. This may include responding to subpoenas, court orders, or other lawful requests from public authorities.

Protection of Rights:

We may also disclose your data if we believe that such action is necessary to protect and defend our rights, property, or safety, or those of our users or the public. This includes enforcing our Terms of Service, investigating potential violations, or addressing fraudulent activity or security threats.

Business Transactions:

In the event of a merger, acquisition, reorganisation, or sale of assets, your data may be transferred as part of the transaction. We will take reasonable steps to ensure the confidentiality and security of your data during any such transfer.

With Your Consent:

We may disclose your data to third parties with your consent or at your direction. For example, if you choose to participate in a promotional campaign or marketing initiative that involves sharing your information with a third-party partner, we will only do so with your explicit consent.

While we strive to minimise the disclosure of your data, there may be situations where it is necessary or unavoidable. Rest assured that we will always take appropriate measures to protect your privacy and ensure that any disclosure is lawful and under applicable regulations.

10. Data Security

At Evolve Catalyst, safeguarding your data is a top priority. We employ robust security measures to protect your information from unauthorised access, disclosure, alteration, or destruction. Some of the key security measures we have in place include:

Encryption:

We use industry-standard encryption protocols to encrypt data transmitted between your device and our servers. This ensures that your information remains secure during transmission over the internet.

Access Control:

Access to your data is restricted to authorised personnel who require access for legitimate business purposes. We implement role-based access controls and regularly review access permissions to minimise the risk of unauthorised access.

Firewalls and Intrusion Detection Systems:

Our network infrastructure is protected by firewalls and intrusion detection systems that monitor and block suspicious activity. This helps prevent unauthorised access to our systems and data.

Regular Security Audits:

We conduct regular security audits and assessments to identify and address potential vulnerabilities in our systems and processes. This proactive approach allows us to stay ahead of emerging threats and ensure the ongoing security of your data.

Despite our best efforts, it’s important to acknowledge that no security measure is completely guaranteed. While we take every reasonable precaution to protect your data, we cannot guarantee that our security measures will be immune to all potential threats or breaches.

We encourage you to take proactive steps to protect your data, such as using strong, unique passwords, keeping your login credentials confidential, and being cautious when sharing personal information online.

11. Your Data Protection Rights

Under data protection laws, you have certain rights regarding your data. We are committed to respecting and facilitating these rights to ensure that you have control over your information. Your rights include:

• Access: You have the right to request access to the personal data we hold about you. This enables you to receive a copy of the information we have and to verify its accuracy and legitimacy.
• Rectification: If you believe that the personal data, we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it.
• Deletion: In certain circumstances, you have the right to request to remove your data. This right is not absolute and may be subject to legal or contractual obligations that require us to retain your data.
• Restriction of Processing: You have the right to request that we restrict the processing of your data under certain conditions. This means that we will temporarily suspend processing your data while we assess your request.
• Data Portability: You have the right to request a copy of your data in a structured, commonly used, and machine-readable format. You may also request that we transmit this data to another data controller where technically possible.
• Objection to Processing: You have the right to object to the processing of your data in certain circumstances, such as where we are relying on legitimate interests as the legal basis for processing.
• Withdrawal of Consent: If we rely on your consent to process your data, you have the right to withdraw that consent at any time. However, withdrawal of consent does not affect the legitimacy of processing based on consent before its withdrawal.

To exercise any of these rights, or if you have any questions about how we handle your data, please contact us using the contact information provided in the “Contact Us” section of this Privacy Policy.

Please note that we may require you to verify your identity before responding to your request to ensure the security of your data.

12. Service Providers

We may engage third-party companies and individuals (“Service Providers”) to facilitate our services, provide the services on our behalf, perform service-related functions, or assist us in analysing how our services are used.

These third parties may have access to your data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

Analytics:

We may use third-party analytics services to monitor and analyse the use of our services. These analytics providers may use cookies, web beacons, or other tracking technologies to collect information about your interactions with our services and to provide us with reports and insights based on that information.

Hosting:

Our services may be hosted by third-party hosting providers. These providers may process your data on our behalf to ensure the availability and performance of our services.

Customer Support:

We may use third-party customer support platforms or services to assist us in responding to your inquiries, troubleshooting issues, and providing you with support services.

Payment Processing:

If you make a payment through our services, your payment may be processed by a third-party payment processor. We do not store or have access to your payment card details, as this information is handled securely by the payment processor.

Please note that while we carefully select and assess our service providers, we are not responsible for the privacy practices or content of these third parties. We recommend that you review the privacy policies of these service providers to understand how they collect, use, and disclose your information.

13. Do Not Track Signals

We currently do not support “Do Not Track” (“DNT”) signals. DNT is a web browser setting that allows users to request that websites refrain from tracking their browsing activity.

While some web browsers offer the option to enable DNT signals, there is no universally accepted standard for how websites should respond to these signals. As a result, our services do not recognise or respond to DNT signals at this time.

If you would like to exercise more control over the tracking of your browsing activity, you can adjust your browser settings to enable or disable DNT. Instructions for enabling or disabling DNT can be found in your browser’s settings or preferences menu.

Please note that enabling DNT may not completely prevent tracking by websites or third parties, as it relies on websites’ compliance with the DNT signal and may not be honoured by all websites or tracking mechanisms.

14. Links to Other Sites

Our Service may contain links to third-party websites that are not operated by us. If you click on a third-party link, you will be directed to that third-party’s site. We strongly advise you to review the Privacy Policy of every site you visit.

We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

15. Children’s Privacy

Our services are not intended for children under the age of 18. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will take immediate steps to delete such information.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page. If the changes are significant, we will notify you via email.

You are advised to review this Privacy Policy occasionally for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

By continuing to use our Service after revisions become effective, you agree to be bound by the revised terms. If you do not agree to the new terms, please discontinue using the Service.

17. Contact Us

If you have any questions about this Privacy Policy, please contact us at contact@evolvecatalyst.org.