Legal
Privacy Policy
Catalyst Digital Operations (Pty) Ltd, Last updated: July 2026
1. Who We Are
Catalyst Digital Operations (Pty) Ltd ("Catalyst", "we", "our", "us") is a private company registered in the Republic of South Africa. We provide digital operations consulting, Power Platform development, AI capability integration, and IT infrastructure services to clients across South Africa and internationally.
This Privacy Policy explains how we collect, use, store, and protect personal information when you interact with our website at catalystdigitaloperations.com and when you engage with us as a prospective or existing client.
2. Our Commitment Under POPIA
We are committed to complying with the Protection of Personal Information Act 4 of 2013 (POPIA). We process personal information only in ways that are lawful, proportionate, and aligned with the purpose for which the information was collected. We do not sell, rent, or trade personal information to third parties for marketing purposes.
3. What Personal Information We Collect
We may collect the following categories of personal information:
- Contact details: Name, email address, phone number, and company or organisation name submitted through our contact form.
- Enquiry content: The content of messages sent to us through our website contact form, including descriptions of business challenges or service requirements.
- Communication records: Records of correspondence between you and Catalyst, including email exchanges.
- Technical information: Basic website interaction data such as browser type, referring pages, and approximate geographic location via IP address. This is collected through standard web hosting logs and is used only for website performance and security purposes.
We do not use tracking cookies, advertising cookies, or third-party analytics platforms on this website. We do not collect sensitive personal information (as defined under POPIA) through this website.
4. Why We Collect Personal Information
We collect and process personal information for the following purposes:
- To respond to enquiries submitted through our contact form;
- To assess whether an engagement is a suitable fit for our services;
- To communicate with prospective and existing clients about services, proposals, and engagements;
- To fulfil contractual obligations to clients;
- To comply with legal and regulatory requirements;
- To maintain records of business communications in accordance with our document retention obligations.
We process personal information only to the extent necessary for the purposes stated above.
5. Who We Share Personal Information With
We do not sell, rent, or share your personal information with third parties for commercial or marketing purposes. We may share personal information in the following limited circumstances:
- Service providers: We use Formspree (formspree.io) to process contact form submissions. Formspree processes form data on our behalf and is bound by appropriate data processing terms. Messages submitted through our contact form are routed through Formspree's servers and delivered to our email address.
- Legal compliance: We may disclose personal information where required to do so by law, court order, or governmental authority, or where we believe disclosure is necessary to protect our rights, the rights of others, or to prevent harm.
- Business transfers: In the event of a merger, acquisition, or sale of substantially all of our assets, personal information may be transferred as part of that transaction, subject to the same protections described in this policy.
6. How Long We Retain Your Information
We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory requirements. Specifically:
- Enquiries that do not lead to an engagement are retained for up to 12 months from the date of last contact.
- Information relating to client engagements is retained for a minimum of five years following the end of the engagement, in accordance with standard business record-keeping requirements.
- Where you exercise your right to erasure (see section 7), we will delete your personal information subject to any overriding legal obligations to retain it.
7. Your Rights Under POPIA
As a data subject under POPIA, you have the following rights in relation to your personal information held by Catalyst Digital Operations:
- Right of access: You may request confirmation of whether we hold personal information about you and, if so, request a copy of that information.
- Right to correction: You may request that we correct or update personal information that is inaccurate, incomplete, or out of date.
- Right to erasure: You may request that we delete your personal information, subject to any legal obligations that require us to retain it.
- Right to object: You may object to the processing of your personal information in certain circumstances, including where processing is based on legitimate interests.
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, please contact us using the details in section 10 below. We will respond to your request within 30 days. We may require proof of identity before processing certain requests.
8. The Information Regulator
If you are not satisfied with our handling of a complaint or believe that we have processed your personal information in a manner that is inconsistent with POPIA, you have the right to lodge a complaint with the Information Regulator of South Africa:
9. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational circumstances. Material changes will be indicated by an updated "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website or services following any update constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a privacy concern, please contact us:
We take all privacy enquiries seriously and commit to responding within 30 days of receipt.