Catalyst Change Consultants Ltd (“CCC”) understands the importance of privacy and how personal data is stored and used. We only collect and use personal data in the ways described in this policy and in a way that is consistent with our obligations and the personal rights of individuals under the law.
1. Information About Us
Catalyst Change Consultants Ltd.
Limited Company registered in England under company number 3802253
VAT number: 718 1739 23
Registered address: 3 Redman Court, Bell Street, Princes Risborough, Bucks HP27 0AA, England
2. What This Policy Covers
3. What Is Personal Data?
Personal data is defined under the General Personal Data Protection Regulation (EU Regulation 2016/679) (“GDPR”) as ‘any information relating to an identifiable person who can be directly or indirectly identified in particular by reference to an identifier’.
In simpler terms, personal data is any information about an individual that allows them to be identified. This includes obvious information such as a name and contact details, but also less obvious data such as identification numbers, electronic location data and other online identifiers. The personal data we may hold on an individual may include:
- Date of birth
- Email addresses
- Telephone numbers
- Business name
- Job Title
- Payment information
- Information about your preferences and interests
- Previous employers
- Notes of meetings or coaching sessions
- Results of psychometric tests.
4. How We Might Use Personal Data
Under the GDPR, CCC must always have a lawful basis for using personal data. This may be because data is required for the performance of a contract, because it is in our legitimate business interests to use it, or because it needs to be recorded for the purposes of continued professional development.
We do not use personal data for marketing purposes, although we retain the right to do so. This may be to contact individuals by email or post with information about our services. We will always work to fully protect individuals’ rights and to comply with GDPR obligations.
5. Individuals’ Rights
Under the GDPR, individuals have the following rights, which we will work to uphold:
- Telephone 01494 449922
- Email: firstname.lastname@example.org
- The right to access personal data we hold about an individual
- The right to have personal data rectified if any part of the data held on an individual is incorrect
- The right to be forgotten i.e. the right an individual holds to ask us to delete or otherwise dispose of any personal data we hold
- The right to restrict (i.e. prevent) the processing of personal data
- The right to object to us using personal data for a particular purpose or purposes
- The right to data portability. This means that, if an individual has provided personal data to us directly we are using it with that individual’s consent for the performance of a contract or service, and that if data is being processed using automated means, an individuals can request a copy of that personal data to re-use with another service or business
- Rights relating to automated decision-making and profiling. CCC does not use personal data in this way and will not do so in future without consent.
6. How Long Is Personal Data Kept?
We will not keep personal data for any longer than is necessary in the light of the reason(s) for which it was originally collected.
7. Where is Personal Data Stored?
CCC stores data within the European Economic Area. As such, it is fully protected under the GDPR.
8. Sharing Personal Data
CCC does not share any personal data with any third parties for any purposes without the express consent of the individual to whom that data pertains. The only exception to this is if CCC is required to do so under law.
9. Accessing Personal Data
An individual can request from CCC details of the personal data held on them, and for a copy of it, should any data be held. This is known as a ‘subject data request’. Any such request should be made in writing to the address given in Section 1 of this Policy. No charge is made for a subject data request, but if a request is ‘manifestly unfounded or excessive’, for example if repetitive requests are made, an administrative fee, determined by CCC, will be levied. Requests will be responded to within one month.