Privacy Policy
Last updated: 29 May 2026
1. Introduction
Catalyst Core Operations Limited ("Catalyst Core", "we", "us", or "our") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information across all of our brands, divisions, websites, applications, and products. Catalyst Core Operations Limited operates the following brands and divisions:
Connected Assistants -CPD-accredited training, courses, mentoring, events, community, and resources for administrative professionals, hosted at connectedassistants.com.
Catalyst Core -Technology and operations division providing bespoke cloud-based business applications to clients, hosted at catalystcore.co.
Living at the Edges of You -A published book available through catalystcore.co and third-party retailers including Amazon. We may introduce additional brands, products, or services in the future. Unless a separate privacy policy is published for a new brand, this policy applies to all operations, products, and services offered by Catalyst Core Operations Limited.
This policy applies to all visitors, registered users, clients, customers, course participants, community members, and anyone who interacts with our brands.
2. Data Controller
The data controller responsible for your personal data across all brands and divisions is:
Catalyst Core Operations Limited
Company number: 12942026
Registered address: 1st Floor, The Syms Building, Bumpers Way, Bumpers Farm, Chippenham, SN14 6LH, United Kingdom
Email: info@catalystcore.co
3. What Data We Collect
3.1 Website Visitors (All Brands)
When you visit any of our websites (including connectedassistants.com and catalystcore.co), we may collect: technical data such as your IP address, browser type, operating system, and referring URL; usage data including pages visited, time spent on pages, and navigation paths; and cookie data as described in our Cookie Policy section below.
3.2 Connected Assistants Users
When you interact with Connected Assistants, we may collect: your name and email address when you sign up for courses, events, the newsletter, or community groups; assessment responses and results (such as the Connected Leader Assessment or The Irreplaceable Audit); course enrolment, progress, and completion data; mentoring session records; event registrations and attendance; payment and billing information processed through our third-party payment providers; and communications you send us via contact forms or email.
3.3 Catalyst Core App Users (Registered Accounts)
When you create an account and use one of our cloud-based client applications, we collect: your full name and email address provided during registration; your password, stored in hashed form by our authentication provider; pipeline and business data you enter into the App, including client names, site descriptions, locations, contract values, deal stages, and notes; and activity data such as login timestamps and actions performed within the App.
3.4 Book Purchasers
When you purchase "Living at the Edges of You" directly through our website, we collect: your name, email address, and delivery address. Payment details are processed by our third-party payment provider and are not stored by us. Purchases made through third-party retailers (such as Amazon) are governed by those retailers' own privacy policies.
3.5 Data We Do Not Collect
We do not collect payment card details directly (these are handled by third-party processors), government-issued identification numbers, health data, or any special category data as defined under UK GDPR.
4. How We Use Your Data
We use your personal data for the following purposes:
Service delivery: To provide and maintain the services you have requested, whether that is access to a cloud application, a training course, a mentoring session, a community membership, or a product purchase.
Account management: To manage your account, authenticate your identity, and enable features such as real-time data synchronisation (for App users) or course progress tracking (for Connected Assistants users).
Communications: To communicate with you regarding service updates, security alerts, event reminders, course materials, newsletters, or support queries. You can unsubscribe from marketing communications at any time.
Improvement: To improve our websites, applications, courses, and services by analysing usage patterns and identifying technical issues.
Legal compliance: To comply with legal obligations, including responding to lawful requests from authorities and maintaining records required by law.
5. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:
Contract: Processing is necessary to deliver a service you have requested, such as providing App access, delivering a course, fulfilling a book order, or managing your community membership.
Legitimate interests: Processing is necessary for our legitimate business interests, such as improving our services, understanding how our websites and products are used, and ensuring security, provided these interests do not override your rights.
Legal obligation: Processing is necessary to comply with a legal obligation to which we are subject.
Consent: Where we rely on consent (for example, for marketing emails or analytics cookies), you may withdraw your consent at any time by contacting us or using the unsubscribe link provided.
6. Data Storage and Security
Your data is stored securely using the following infrastructure:
Client Application Data (Catalyst Core Apps): Stored in a PostgreSQL database hosted by Supabase on Amazon Web Services (AWS) infrastructure in the EU West (London) region. All data is encrypted at rest using AES-256 encryption and encrypted in transit using TLS 1.2 or higher. Row Level Security (RLS) policies are enforced at the database level, ensuring that each client organisation's data is isolated from all others.
Authentication (Catalyst Core Apps): User authentication is managed by Supabase Auth. Passwords are hashed using bcrypt and are never stored in plain text. Session tokens are managed securely and expire automatically.
Website Hosting: Both connectedassistants.com and catalystcore.co are hosted by Wix.com Ltd. Wix's privacy practices are governed by their own privacy policy.
Connected Assistants Platform Data: Course data, assessment results, community interactions, and event registrations are managed through Wix's built-in tools and integrations. Payment processing is handled by third-party providers; we do not store card details.
7. Data Sharing and Third Parties
We do not sell, rent, or trade your personal data. We share data only with the following thirdparty processors who assist in delivering our services:
Supabase Inc. -Database hosting and authentication for Catalyst Core client applications. Servers in EU West (London). Acts as a data processor under a Data Processing Agreement.
Wix.com Ltd. -Website hosting, course delivery, event management, and e-commerce for both connectedassistants.com and catalystcore.co. Acts as a data processor.
Amazon Web Services (AWS) -Underlying cloud infrastructure provider for Supabase, located in the EU West (London) region.
Payment Processors -Third-party payment providers used to process transactions for courses, mentoring, events, and book purchases. These providers handle payment card data directly and are PCI-DSS compliant.
Email Marketing Providers -Where used, email marketing platforms process your name and email address to deliver newsletters, course updates, and event notifications on our behalf.
We may also disclose your data if required by law, regulation, legal process, or governmental request. If we engage additional processors in the future, this policy will be updated accordingly
8. International Data Transfers
Your data is primarily stored in the United Kingdom and European Economic Area. Some of our third-party service providers (including Supabase and Wix) are based in the United States. Where personal data is transferred outside the UK, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the UK Information Commissioner's Office (ICO), or reliance on an adequacy decision where applicable.
9. Data Retention
Catalyst Core App users: We retain your personal data for as long as your account is active or as needed to provide the service. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes. Pipeline and business data entered by users is retained for the duration of the client's service agreement. Upon termination, data will be securely deleted within 90 days unless the client requests an export.
Connected Assistants users: We retain your account data, course progress, and assessment results for as long as your account is active. If you unsubscribe from communications, we will remove your email from our mailing list promptly but may retain a record of the unsubscribe request. If you request full account deletion, we will process this within 30 days.
Book purchasers: We retain order records for a minimum of six years to comply with tax and accounting obligations under UK law.
10. Your Rights
Under UK GDPR, you have the following rights in relation to your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request that we correct any inaccurate or incomplete data.
Right to erasure: You may request that we delete your personal data, subject to legal retention requirements.
Right to restrict processing: You may request that we limit how we use your data.
Right to data portability: You may request your data in a structured, machine-readable format. Catalyst Core App users can use the built-in CSV export feature. Connected Assistants users can request an export by contacting us.
Right to object: You may object to processing based on legitimate interests or to direct marketing at any time.
To exercise any of these rights, contact us at info@catalystcore.co. We will respond within one calendar month.
11. Cookies
Our websites use cookies to ensure basic functionality and, where consent is given, to collect analytics data. Both connectedassistants.com and catalystcore.co use cookies managed by Wix, which may include essential session cookies, analytics cookies, and marketing cookies. You can manage your cookie preferences through the cookie banner displayed when you first visit each website. The Catalyst Core client applications use browser session storage for authentication tokens only; no tracking cookies are placed by the Apps.
12. Children's Privacy
Our websites, applications, courses, and products are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from a child, we will take steps to delete it promptly.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our brands, services, or legal requirements. Any changes will be posted on this page with an updated "Last updated" date. Where changes are significant, we will notify registered users and subscribers by email. We encourage you to review this policy periodically.
14. Complaints
If you are unhappy with how we have handled your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
Information Commissioner's Office
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Telephone: 0303 123 1113
Website: ico.org.uk
15. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:
Email: info@catalystcore.co
Post: Catalyst Core Operations Limited, 1st Floor, The Syms Building, Bumpers Way, Bumpers Farm, Chippenham, SN14 6LH
Website: catalystcore.co