Privacy Notice

Catalivo Limited (“the Company”, “we”, “us” and “our”) is registered in England and Wales under company number 17021029. Our registered office is at Basil Manor, St. Clether, Launceston, PL158QJ, UK.

We are committed to protecting and respecting your privacy. This Privacy Notice explains how we collect, use, store, share, transfer, and protect your personal data when you visit our website, contact us or otherwise interact with us.

For the purposes of the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018 and other applicable data protection legislation, we are the data controller of your personal data.

 

Website Use, Analytics and Cookies

You may browse our website without actively submitting personal data to us. However, when you use our website, we may automatically collect certain technical and usage information, including:

• IP address
• browser type and version
• device identifiers
• operating system
• referral source
• pages viewed
• website navigation paths
• date and time of access
• session and interaction information

We use cookies, pixels and similar tracking technologies to:

• operate, maintain and secure the website
• analyse website traffic, performance and usage patterns
• improve website functionality and user experience
• personalise website content where applicable
• measure advertising and marketing effectiveness
• maintain system security and prevent misuse

Where required by applicable law, non-essential cookies and tracking technologies are only placed on your device with your consent through our cookie banner and preference management platform.

You may withdraw or amend your cookie preferences at any time through the cookie settings available on our website.

Where analytics or advertising technologies involve the processing of personal data, we process such information:

• based on your consent where legally required, and/or
• where necessary for our legitimate interests in analysing, improving, securing and developing our website and services, provided such interests are not overridden by your rights and freedoms

We may use third-party providers for website hosting, analytics, communications, customer relationship management, marketing and security services. Depending on the services used by the Company from time to time, these providers may include organisations such as Microsoft, Google, LinkedIn, Meta, Stripe, HubSpot, Mailchimp and cloud hosting providers.

Further information about the cookies and tracking technologies we use is available in our Cookie Policy.

 

The Personal Data We Collect

We may collect and process the following categories of personal data:

• identity data, including your name, title and company details
• contact data, including your email address, telephone number and postal address
• communications data, including correspondence, enquiries and other communications you send to us
• technical data, including IP address, browser information, device information and website usage data
• marketing and preferences data
• business and transactional information provided during the course of our relationship with you

We aim to minimise the personal data we collect and process to that which is reasonably necessary for legitimate business and legal purposes.

Unless specifically requested or required for a legitimate business purpose, please do not provide special category personal data through our website or general communications channels.

Where you voluntarily provide special category personal data, including information relating to health, ethnicity, religious beliefs, sexual orientation, trade union membership or criminal convictions, we will only process such information where permitted by applicable law and where a valid condition under Article 9 UK GDPR applies.

 

How We Collect Personal Data

We collect personal data:

• directly from you when you contact us by telephone, email, social media, website forms or other communications
• during the course of our business relationship with you
• automatically through your use of our website and systems
• from publicly available sources
• from third parties who are legally entitled to share your information with us

Where we receive your personal data from a third party, we expect that third party to have provided you with appropriate privacy information and lawful grounds for sharing your information with us.

 

Why We Process Your Personal Data

We process personal data for the following purposes and lawful bases.

To respond to enquiries and provide services

We process your personal data where necessary:

• to take steps at your request before entering into a contract
• to perform a contract with you
• for our legitimate interests in operating, managing, developing and protecting our business, maintaining client relationships, responding to enquiries and delivering our services efficiently

 

To manage and administer our business

We process personal data for our legitimate interests, including:

• internal administration and record keeping
• staff training and quality assurance
• IT and system management
• maintaining the security of our systems, website and infrastructure
• business continuity and operational management
• protecting and enforcing our legal rights
• obtaining professional advice
• preventing fraud, misuse of services, cybersecurity threats or unlawful activity

 

To comply with legal and regulatory obligations

We may process your personal data where necessary to:

• comply with legal and regulatory obligations
• respond to lawful requests from regulators, courts, governmental authorities or law enforcement agencies
• establish, exercise or defend legal claims
• comply with anti-money laundering, fraud prevention and compliance requirements

 

Marketing Communications

Where permitted by applicable law, we may send you information about our products, services or updates:

• where you have provided your consent
• where we are permitted to do so under PECR in relation to existing customers or business contacts
• where we have a legitimate interest in promoting relevant services to business contacts in a proportionate and privacy-conscious manner

You may opt out of marketing communications at any time by:

• using the unsubscribe link included in marketing emails
• adjusting your communication preferences where available
• contacting us using the details below

We retain suppression records where necessary to ensure that individuals who opt out of marketing communications continue to have their preferences respected.

 

Sharing Your Personal Data

We may share your personal data with:

• professional advisers, including legal, compliance, audit and regulatory advisers
• IT service providers, cloud hosting providers, software providers and cybersecurity providers
• payment processors, administrative support providers and business support providers
• market research and analytics providers
• regulators, courts, governmental authorities and law enforcement agencies where required by law
• professional consultants and contractors providing operational, technical or business support services

We require all third-party processors and service providers to:

• process personal data only on our documented instructions
• keep personal data confidential
• implement appropriate technical and organisational security measures
• comply with applicable data protection laws
• restrict access to authorised personnel only

We do not sell personal data to third parties.

We may anonymise or aggregate information so that it no longer identifies any individual and use such anonymised information for lawful business and commercial purposes.

 

International Transfers

Some of our third-party service providers may process personal data outside the United Kingdom.

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are implemented in accordance with UK data protection laws. These safeguards may include:

• UK adequacy regulations
• the International Data Transfer Agreement (IDTA)
• the UK Addendum to the European Commission’s Standard Contractual Clauses
• additional technical, organisational or contractual safeguards where appropriate

You may contact us for further information regarding the safeguards used for international transfers.

 

Data Security

We implement appropriate technical and organisational security measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

These measures may include:

• access controls and authentication procedures
• encryption technologies where appropriate
• secure hosting environments
• cybersecurity monitoring
• internal confidentiality obligations
• restricted access to personal data
• incident management and security response procedures
• backup and disaster recovery processes

While we take appropriate security measures, no transmission of information over the internet or electronic storage system can be guaranteed to be completely secure.

 

How Long We Retain Personal Data

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including satisfying legal, regulatory, tax, accounting, reporting and operational requirements.

Retention periods may vary depending on the nature of the information and the purpose for which it is processed. Typical retention periods may include:

• general enquiries and correspondence: up to 24 months
• contractual and client relationship records: up to 6 years after the end of the relationship
• financial and transactional records: up to 6 years or longer where required by law
• technical and website usage information: as set out in our Cookie Policy
• marketing suppression records: retained as necessary to ensure marketing preferences are respected and to comply with legal obligations

We may retain personal data for longer periods where necessary to establish, exercise or defend legal claims, comply with legal obligations or resolve disputes.

 

Your Rights

Under UK data protection law, you may have the following rights:

• the right to access your personal data
• the right to request correction of inaccurate personal data
• the right to request erasure of personal data
• the right to restrict processing
• the right to object to processing
• the right to data portability
• the right to withdraw consent where processing is based on consent
• the right to object to direct marketing

Certain rights are subject to legal exemptions, limitations and conditions under applicable law.

Requests to exercise your rights are generally free of charge. However, we reserve the right to charge a reasonable fee or refuse a request where permitted by applicable law, including where requests are manifestly unfounded, excessive or repetitive.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (“ICO”) if you believe your personal data has been processed unlawfully.

We would appreciate the opportunity to address your concerns before you contact the ICO.

Further information is available from the ICO:

Information Commissioner’s Office

 

Monitoring Communications

Subject to applicable law, we may monitor and record communications, including telephone calls, emails and electronic communications, for:

• compliance purposes
• quality assurance and staff training
• fraud prevention and detection
• security monitoring
• protection of our business, systems, staff and users

 

Third-Party Websites

Our website may contain links to third-party websites, plugins or applications. We are not responsible for the privacy practices, security or content of third-party websites or services. You should review their privacy notices separately before providing any personal data.

 

Automated Decision-Making

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals.

 

Children’s Privacy

Our website and services are not directed at children under the age of 13, and we do not knowingly collect personal data relating to children.

 

Failure to Provide Personal Data

Where we are required by law or under the terms of a contract to collect personal data, and you fail to provide requested information, we may be unable to enter into or perform a contract with you or provide certain services.

 

Changes to This Privacy Notice

We may update this Privacy Notice from time to time to reflect changes in legal, regulatory, technical or operational requirements.

Where appropriate, we may notify you of material changes by email, website notification or other appropriate communication methods.

Any updated version of this Privacy Notice will be published on this page.

Last updated: 10 May 2026

 

Contact Us

If you have any questions about this Privacy Notice, how we process your personal data or if you believe your personal data or privacy rights have been compromised, please contact:

Tim Mutton
Catalivo Limited
Basil Manor, St. Clether,

Launceston

PL158QJ, United Kingdom

Email: enquiries@catalivo.com