This Privacy Notice for KATALYSTR LTD ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our website at https://katalystr.com, or any website of ours that links to this Privacy Notice
• Use KATALYSTR, a modern and comprehensive digital platform designed to empower both individuals and businesses by providing a wide range of tools and solutions for creating and managing their online presence. The platform serves as a one-stop shop for technological and software needs, enabling users to build and manage websites and landing pages, handle secure electronic payments, launch and manage online stores with inventory and orders, run automation workflows, execute email marketing, and manage customer relationships via integrated CRM — all in one unified experience.
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

SUMMARY OF KEY POINTS

This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by using the table of contents.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect any information from third parties? We may collect information from public databases, marketing partners, social media platforms, and other outside sources.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties.

How do we keep your information safe? We maintain organizational and technical measures to protect your personal information, but no method is 100% secure.

What are your rights? Depending on your location, you may have certain rights regarding your personal information.

How do you exercise your rights? The easiest way is by submitting a data subject access request or by contacting us. We will act in accordance with applicable laws.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• names
• phone numbers
• email addresses
• mailing addresses
• job titles
• usernames
• passwords
• contact preferences
• contact or authentication data
• billing addresses
• debit/credit card numbers
• social media profiles
• company information
• tax identification numbers
• bank account details
• preferred communication channels
• referral information
• shipping preferences
• marketing preferences
• government-issued ids
• upload files or documents
• custom fields

Sensitive Information. We do not process sensitive information.

Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number and the security code associated with your payment instrument. All payment data is handled and stored by Stripe and PayPal. You may find their privacy notices here: stripe.com/privacy and paypal.com/.../privacy-full.

Social Media Login Data. We may provide you with the option to register with us using your existing social media account details. If you choose to register in this way, we will collect certain profile information from the social media provider, as described in Section 7.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information — such as your IP address and/or browser and device characteristics — is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information may include device and usage information (e.g., IP address, browser/device characteristics, OS, language preferences, referring URLs, device name, country, location, usage timestamps, pages/files viewed, searches, and actions taken), device event information (system activity, error reports, hardware settings). This information is primarily needed to maintain security and operation of our Services, and for analytics and reporting.

Like many businesses, we also collect information through cookies and similar technologies. You can find out more in our Cookie Notice: https://katalystr.com/cookie-policy.

• Log and Usage Data. Service-related, diagnostic, usage, and performance information recorded in log files.
• Device Data. Information about the device used to access the Services (e.g., IP/proxy, IDs, location, browser type, model, ISP/carrier, OS, config).
• Location Data. Approximate or precise location (e.g., via IP or GPS if enabled). You can disable location permissions, but some features may not work.
• Behavioral/Engagement Data. Navigation paths, click patterns, browsing habits, email open rates, ad clicks, CTAs interactions, etc.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Information collected from other sources

In Short: We may collect limited data from public databases, marketing partners, social media platforms, and other outside sources.

We may obtain information about you from other sources to enhance our ability to provide relevant marketing, offers, and services, and to update records (e.g., public databases, joint marketing partners, affiliate programs, data providers, social platforms). This may include mailing addresses, job titles, emails, phone numbers, intent data, IP addresses, social profiles/URLs, and custom profiles.

If you interact with us using a social account, we may receive information such as your name and email from that platform, subject to your privacy settings there.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, including:

• Account creation and authentication. To create/log you in and maintain your account.
• Protect vital interests. When necessary to prevent harm or protect an individual’s vital interests.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when necessary and we have a valid legal reason to do so under applicable law.

EU/UK (GDPR/UK GDPR). Legal bases may include: consent (you can withdraw at any time), legal obligations, and vital interests.

Canada. We may rely on express or implied consent, with certain lawful exceptions as permitted under applicable law.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share information in specific situations described in this section and/or with the following third parties.

• Business Transfers. In connection with a merger, acquisition, financing, or sale of assets.
• Business Partners. To offer certain products, services, or promotions.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We may use cookies and other tracking technologies to collect and store your information.

We may use cookies, pixels, and similar technologies for security, preferences, functionality, analytics, and advertising (including abandoned cart reminders when applicable). To the extent such tracking is deemed a “sale”/“sharing” under US state laws, you can opt out as described in Section 13.

See our Cookie Notice: https://katalystr.com/cookie-policy.

Google Analytics

We may use Google Analytics. Opt-out: tools.google.com/dlpage/gaoptout. Ad settings and additional opt-outs: optout.networkadvertising.org, networkadvertising.org/mobile-choice. See Google’s privacy at policies.google.com.

6. DO WE OFFER ARTIFICIAL INTELLIGENCE-BASED PRODUCTS?

In Short: We offer products, features, or tools powered by AI/ML or similar technologies.

We may provide AI features via third-party providers (e.g., OpenAI) to deliver automation and AI bots. Your inputs/outputs may be processed by those providers per this Notice and their terms. Do not use AI features in ways that violate any provider’s policies.

7. HOW DO WE HANDLE YOUR SOCIAL LOGINS?

In Short: If you choose to register or log in using a social media account, we may have access to certain information about you.

Information received varies by provider and your settings, and may include name, email, friends list, and profile picture. We use it as described in this Notice. Review the third-party provider’s privacy notice to manage your preferences.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information as long as necessary for purposes outlined here unless otherwise required by law.

No purpose requires retention longer than twelve (12) months after account termination, unless law permits/obliges otherwise. Where deletion is not immediately possible (e.g., backups), we isolate and secure the data until deletion.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use organizational and technical measures, but no method is 100% secure.

Transmission of personal information to and from our Services is at your own risk. Access within secure environments only.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18.

If we learn we collected data from under-18 users, we will deactivate the account and delete data promptly. Contact: [email protected].

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your region (e.g., EEA/UK/Switzerland/Canada/US states), you may exercise rights to access, rectify, erase, restrict, port, or object.

To exercise rights, contact us using details in Section 16. We will act per applicable law. You may also withdraw consent where applicable, and opt out of marketing via links in emails or by contacting us.

Account Information

• Log in to update settings.
• Contact us using the details provided.
• Submit a request via our Help Center form (if available).

We may retain limited information to prevent fraud, troubleshoot, or comply with legal requirements.

Cookies: see our Cookie Notice: https://katalystr.com/cookie-policy.

Questions: [email protected].

12. CONTROLS FOR DO-NOT-TRACK FEATURES

We currently do not respond to DNT signals due to lack of an established standard. If a standard emerges that we must follow, we will update this Notice.

13. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Certain state laws grant rights to access, correct, delete, opt out, etc.

Categories of Personal Information We Collect (past 12 months)

We have not disclosed, sold, or shared personal information to third parties for business/commercial purposes in the previous twelve (12) months. We will not sell or share PI of visitors/users/consumers.

Your Rights

Rights may include: know, access, correct, delete, copy, non-discrimination, and opt-out of targeted advertising/sale/profiling. Some states provide additional rights (e.g., lists of categories/specific third parties, limit sensitive data use, opt-out of voice/facial recognition data collection). To exercise, submit a request or email [email protected]. We honor Global Privacy Control (GPC) signals where applicable.

Authorized Agents & Verification

We will verify requests and may require additional information or authorizations as permitted by law. Appeals: email [email protected].

California “Shine the Light”

California residents may request, once per year and free of charge, information about categories of PI disclosed to third parties for direct marketing in the prior year using the contact details in Section 16.

14. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: You may have additional rights based on the country you reside in.

Australia and New Zealand

We collect/process PI under the Privacy Act 1988 (AU) and Privacy Act 2020 (NZ). You may request access/correction and lodge complaints with the respective regulators.

Republic of South Africa

You may request access/correction at any time. Regulator contacts: [email protected]; [email protected]; [email protected].

15. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Notice from time to time. The updated version will be indicated by an updated “Revised” date at the top. If material changes occur, we may notify you via a prominent notice or direct communication. Please review frequently.

16. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may email us at [email protected] or contact us by post at:

KATALYSTR LTD
128 City Road, London, United Kingdom

17. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, delete your personal information, or withdraw consent. To submit a request, please contact [email protected] or use our data subject access request channel (if available).