Privacy Policy

This Privacy Policy explains how Catalys AI Ltd (“Catalys”, “we”, “us”, or “our”) collects and uses personal data when you visit the catalys.ai website. It is written to align with the UK General Data Protection Regulation (UK GDPR) and the Privacy and Electronic Communications Regulations (PECR). By using this website, you agree to the practices described in this policy. If you do not agree, please do not use the site.

Scope: This policy covers the catalys.ai marketing website only. Our Keel application is covered by a separate policy at keel.catalys.ai/privacy.

Who we are

Catalys AI Ltd is the data controller for personal data collected through this website. We are registered in England & Wales.

Address: 307 Jubilee Heights, 1 Shoot Up Hill, London NW2 3UQ, United Kingdom
Privacy contact: privacy@catalys.ai (Attention: Privacy Officer)

What data we collect

Information you give us

When you submit a form on our site, for example to download a brochure, subscribe to updates, book a discovery call, or take the readiness assessment, we collect the details you provide, such as your name, work email address and company.

Information collected automatically

When you visit the site, and where you have given consent, we and our analytics providers collect information about your device and how you use the site, including pages viewed, referring source, approximate location, browser and device type, and interactions with the page. Some of this is collected through session-recording technology that captures on-page activity such as mouse movement, clicks and scrolling. We configure these tools to avoid capturing the contents of sensitive fields such as passwords and payment details. Our web server also keeps standard access logs (including IP address and timestamp) to operate and secure the site.

Cookies and tracking

We use cookies and similar technologies. Strictly necessary items make the site work and remember your cookie choice. Analytics and session-recording technologies are only loaded after you give consent via our cookie banner. The main providers we use are:

• Google (Google Analytics and Search Console, via Google Site Kit): website analytics and search performance.
• Gist (ConvertFox Global Inc.): visitor analytics, contact management and marketing automation.
• TruConversion: heatmaps, session recordings and conversion funnels.

You can change or withdraw your consent at any time using the “Cookie settings” link in the site footer. Withdrawing consent stops further collection by these tools. You can also adjust your browser settings to refuse cookies, though parts of the site may then not work as intended.

How we use your data

• To respond to your enquiries and provide the resources, assessments or services you request.
• To send you updates and marketing where you have asked to receive them, until you unsubscribe.
• To understand how the site is used and to improve its content and performance.

Even if you opt out of marketing, we may still contact you about service-related matters, such as responding to an enquiry you sent or notifying you of changes to this policy.

Legal bases

We rely on your consent for analytics, session recording and marketing emails; on the performance of a contract or steps prior to a contract when you ask us about our services; and on our legitimate interests in operating, securing and improving our business, balanced against your rights.

Where your data is stored

This website is hosted by SiteGround on Google Cloud Platform infrastructure located in the Netherlands (EU), so the site and its server logs remain within the European Economic Area.

Some personal data is processed outside the UK/EEA by our providers, in particular Google, Gist (ConvertFox Global Inc.) and TruConversion, which process data in the United States. Where data is transferred outside the UK/EEA, we rely on appropriate safeguards such as the UK/EU Standard Contractual Clauses together with a data processing agreement. We do not sell your personal data.

Who we share data with

We share personal data only as needed to run our business, including with: the service providers named above who process it on our behalf; our hosting and content-delivery providers; our professional advisers, auditors and contractors under a duty of confidentiality; and public authorities or regulators where we are required to disclose it by law. If our business is involved in a reorganization, merger or sale, we may transfer personal data to the relevant party, and will notify you where required.

How long we keep it

We keep personal data only as long as necessary for the purposes described above. Enquiry and lead data is retained for up to 24 months after your last interaction with us, unless you ask us to delete it sooner or you remain an active contact. Server access logs are kept for a short period for security and troubleshooting. Where the law requires it, certain records (for example transaction and tax records) are retained for the statutory period, currently 6 years from the end of the financial year they relate to.

Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and access controls with our service providers. No method of transmission or storage is completely secure, but we work to protect your information and to address any incident promptly.

Your rights

You have the right to access, correct, delete or restrict our use of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact privacy@catalys.ai. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk.

Children

This website is not directed at children under 18, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. The “last updated” date shown above reflects the most recent revision.