Privacy Statement

Privacy Statement (Catapult CX) How do we collect your data? How will we use your data? How do we store your data? Marketing What are your data protection rights? Cookies Privacy policies of other websites Changes to our privacy policy How to contact us

Privacy Statement (Catapult CX)

Who we are

This website and the personal data collected through it are controlled by Catapult CX Limited, registered in England and Wales (company number 11381539), Level 1, One Mayfair Place, London W1J 8AJ. We are registered with the Information Commissioner’s Office under reference ZA916337. For any privacy question, or to exercise your rights, contact us at info@catapult.cx.

What data do we collect?

Catapult, hereby after referred to as CCX, collects the following data:

Personal identification information through voluntarily completed contact forms, including, your Name, email address and phone number.
As CCX does not deal with individual customers, but with company clients, provided data should be in reference to client organisations.

How do we collect your data?

You directly provide CCX with most of the data we collect. We collect data and process data when you:

Voluntarily complete client contact forms.
Use or view our website via your browser’s cookies.

How will we use your data?

CCX collects your data so that we can:

Respond to customer inquiries
Contact you with marketing material, should you opt into receiving marketing materials

With your consent, we use advertising cookies from LinkedIn and Google that share limited data (such as your IP address and the pages you visit) with those providers for campaign measurement and retargeting. These are set only if you accept them, and you can decline or withdraw at any time through the cookie banner. See our Cookies Policy for the full list.

Our lawful basis for processing

We process your personal data under the following UK GDPR lawful bases:

Consent (Article 6(1)(a)): for analytics and advertising cookies, and for sending you marketing communications. You can withdraw consent at any time.
Legitimate interests (Article 6(1)(f)): for responding to enquiries you send us and for the security and proper running of our website.
Legal obligation (Article 6(1)(c)): where we must process your data to comply with the law.

How do we store your data?

CCX securely stores your data and hosts data on Pantheon and HubSpot servers.

CCX will keep your personal data for five years. Once this time period has expired, your data will automatically be purged from CCX’s servers.

International data transfers and the US CLOUD Act

Some of the providers CCX uses to run this website and its marketing are headquartered in the United States, including our hosting provider (Pantheon), our CRM and marketing platform (HubSpot), our website analytics (Google Analytics) and our advertising measurement (LinkedIn). Where your personal data is processed by a US-headquartered provider, it may in principle be subject to a compelled disclosure request under the US Clarifying Lawful Overseas Use of Data (CLOUD) Act.

This exposure follows from the provider being a US entity and is not removed by storing data in the UK or EU. Where available we use providers’ UK or EU processing options and standard contractual safeguards to reduce the risk, but we cannot guarantee that a US authority will never compel disclosure.

You keep all the data protection rights set out above, including the right to object to processing and the right to lodge a complaint with the Information Commissioner’s Office. If you have questions about our use of US-based providers, contact us at info@catapult.cx.

Marketing

CCX would like to send you information about services of ours that we think may be beneficial to your company.

If you have agreed to receive marketing, you may always opt out at a later date. You have the right at any time to stop CCX from contacting you for marketing purposes.

If you no longer wish to be contacted for marketing purposes, you will have the right to unsubscribe via any marketing email that is sent to you.

What are your data protection rights?

CCX would like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

The right to access – You have the right to request CCX for copies of your personal data. We may charge you a small fee for this service.
The right to rectification – You have the right to request that CCX corrects any information you believe is inaccurate. You also have the right to request CCX to complete the information you believe is incomplete.
The right to erasure – You have the right to request that CCX erase your personal data, under certain conditions.
The right to restrict processing – You have the right to request that CCX restrict the processing of your personal data, under certain conditions.
The right to object to processing – You have the right to object to CCX processing of your personal data, under certain conditions.
The right to data portability – You have the right to request that CCX transfer the data that we have collected to another organisation, or directly to you, under certain conditions.
The right to withdraw consent – where we rely on your consent, you can withdraw it at any time, for example through the cookie banner.
The right to lodge a complaint – if you are unhappy with how we handle your personal data, please complain to us first at info@catapult.cx. We will acknowledge your complaint within 30 days and respond without undue delay. If you remain dissatisfied, you can escalate to the Information Commissioner’s Office (org.uk). See our Data Protection Complaints Procedure here.

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us at our email: info@catapult.cx.

We do not use your personal data for automated decision-making or profiling.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behaviour information. When you visit our websites, we may collect information from you automatically through cookies or similar technology

For further information, view our Cookies Policy

Privacy policies of other websites

The CCX website contains links to other websites. Our privacy policy applies only to our website, so if you click on a link to another website, you should read their privacy policy.

Changes to our privacy policy

CCX keeps its privacy policy under regular review and places any updates on this web page. This privacy policy was last updated on 25/09/26.

How to contact us

If you have any questions about CCX’s privacy policy, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: info@catapult.cx Call us: +44 203 773 6323

Data Protection Complaints Procedure

ISO 27001:2022

Legal, statutory, regulatory and contractual requirements (A.5.31)
Privacy and protection of PII (A.5.34)
Privacy Statement (Catapult CX)
AnswerVault Privacy Statement
Data (Use and Access) Act 2025 – Electronic Complaints Procedure: Applicability Assessment
Data Protection Officer
Compliance Policy

Purpose

This procedure sets out how Catapult CX handles complaints about its processing of personal data. It meets the requirement in section 164A of the Data Protection Act 2018, inserted by section 103 of the Data (Use and Access) Act 2025, for controllers to facilitate and respond to data protection complaints.

Scope

This procedure applies to a complaint by any individual about how Catapult CX handles their personal data where Catapult is the controller: for example staff, Associates, and people who contact us or use our websites.

Where Catapult acts as a processor of a client’s or AnswerVault customer’s personal data, we forward the complaint promptly to the relevant controller and cooperate in resolving it, in line with the applicable data processing agreement.

How to make a complaint

You can complain to us by email, which is the quickest route:

Catapult CX: info@catapult.cx
AnswerVault: info@answervault.ai

We also accept complaints by telephone on +44 203 773 6323 and by post to: Catapult CX Limited, Level 1, One Mayfair Place, London W1J 8AJ. You do not have to use any particular form of words; it is enough to tell us that you are unhappy with how we have handled your personal data.

Acknowledgement

We acknowledge every complaint within 30 days of receiving it. Complaints received electronically receive an automated acknowledgement.

Investigation and response

We investigate each complaint without undue delay and aim to resolve it within three months, keeping you informed of progress if it is going to take longer. We may contact you for any further information we need to investigate.

Outcome and escalation to the ICO

We tell you the outcome in plain, accessible language, including what we have done or will do. If you are not satisfied with our response, or we have not responded in time, you have the right to complain to the Information Commissioner’s Office (ico.org.uk). The ICO expects you to raise your complaint with us first, so that we have the opportunity to put things right.

Records and continual improvement

We log data protection complaints and their outcomes in Jira (ISMS project), review them for trends at management review, and use them to improve how we handle personal data.

Roles and responsibilities

The Data Protection Officer and ISMS Manager owns this procedure and handles complaints day to day (see Data Protection Officer). The CEO is the escalation point for any unresolved or contested complaint.

Review

This procedure is reviewed annually, and whenever the law or our processing changes.