Privacy Policy
Last updated July 2026
This policy explains what personal information CatAce Consulting collects through this website and the client area, why we collect it, and what you can ask us to do with it.
Information we collect
We keep this to what we actually need.
- When you contact us. Your name, email address, and whatever you write in the message.
- When you have a client area account. Your name, email address, and the name of your organisation.
- When you are billed. Records of invoices, subscriptions, and payment outcomes. Card details are handled entirely by our payment provider and never reach our systems.
- Technical information. Limited data such as your IP address and browser type, recorded for security and for keeping the service running.
We do not use advertising trackers, and we do not sell personal information.
Why we use it
- To reply to enquiries and provide consulting services.
- To operate the client area, including sending sign in links.
- To issue invoices, manage subscriptions, and send billing notices.
- To keep the service secure and to prevent misuse.
- To meet legal and accounting obligations.
Our legal bases are the performance of a contract, our legitimate interest in running and protecting the service, and compliance with legal obligations.
Who we share it with
We share personal information only with the providers needed to run the service. That currently means our hosting provider, our database provider, our email delivery provider, and our payment provider. Each processes information on our instructions. We may also disclose information where the law requires it.
International transfers
Our providers may process information in countries other than your own. Where that happens, we rely on the safeguards those providers have in place.
How long we keep it
Enquiries are kept while there is a reasonable prospect of a working relationship, and for a limited period afterwards. Client and billing records are kept for as long as the relationship lasts and then for the period required for accounting and legal purposes. Sign in links expire within minutes, and sessions expire automatically.
Cookies
The site uses a single essential cookie to keep you signed in to the client area. It is not used for advertising or analytics, and there is no third party tracking on this site.
Your rights
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, ask us to delete it, object to certain processing, or receive a copy in a portable format.
You can make a request through our data request form. We handle these manually and will respond within the time frame the law allows. You also have the right to complain to your local data protection authority.
Security
Access is protected by expiring sign in links and server side sessions. Sign in tokens and session tokens are stored only as hashes, so our records cannot be used to impersonate you. No system is perfectly secure, but we take this seriously.
Children
This service is intended for businesses and is not directed at children.
Changes
If this policy changes, the date at the top will be updated.
Contact
Privacy questions can be sent through the contact page or the data request form.