Privacy
Policy

Desiand® Ltd, trading as Catalogist™ ("we", "our", "us"), operates the website thecatalogist.com (the "Service"). This page informs you of our policies regarding the collection, use and disclosure of personal information when you use the Service.

We act as the data controller for the personal information described here, under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We collect several types of information for various purposes, in order to provide and improve the Service.

Personal data

When you submit the enquiry form or email us, we may collect:

• Your name and company name.
• Your email address.
• Details you choose to share about your products, range size and project requirements.

Usage data

We may collect information on how the Service is accessed and used, including IP address, browser type and version, the pages you visit, and the time and date of your visit.

• To respond to your enquiry and prepare a proposal.
• To provide and maintain the Service.
• To notify you about changes to the Service.
• To provide client support during an engagement.
• To monitor usage of the Service.
• To detect, prevent and address technical issues.

Our lawful bases for processing are: your consent, the performance of a contract with you, and our legitimate interest in operating and improving the Service.

We use Google Analytics (GA4) to understand aggregate usage of the Website — such as which pages are viewed and which links are clicked — but only after you accept the cookie banner shown on your first visit. Declining means Google Analytics is never loaded. We do not use it for advertising, and it is never sent the name, email address or other details you submit through the enquiry form.

You can instruct your browser to refuse all cookies, or decline on the banner itself; either way this does not prevent you from browsing the Website or viewing catalogs. See our Cookie Policy for full details of what we currently use.

Where paid services are provided, we use third-party payment processors. We do not store or collect your payment card details. That information is provided directly to the processor, whose use of your personal information is governed by their own privacy policy.

Our payment processors adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council. Where Stripe is used, their privacy policy can be viewed at stripe.com/privacy.

The Service is delivered using the following providers, each of which may process limited technical data such as your IP address in order to serve the site:

The Service may contain links to websites not operated by us. If you click a third-party link you will be directed to that party's site. We strongly advise you to review the privacy policy of every site you visit.

We have no control over, and assume no responsibility for, the content, privacy policies or practices of any third-party sites or services.

We retain your personal data only for as long as is necessary for the purposes set out in this policy, or for as long as required to meet legal, accounting or reporting obligations.

Enquiries that do not lead to an engagement are ordinarily deleted within 24 months.

Your information, including personal data, may be transferred to — and maintained on — computers located outside your state, province, country or other governmental jurisdiction, where data protection laws may differ.

Where personal data leaves the UK, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses.

We may disclose personal information that we collect, or that you provide:

• To comply with a legal obligation.
• To protect and defend the rights or property of Desiand® Ltd.
• To prevent or investigate possible wrongdoing in connection with the Service.
• To protect the personal safety of users of the Service or the public.
• To protect against legal liability.

Under UK data protection law you have the right to:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data where there is no continuing reason for us to hold it.
• Object to or request restriction of processing.
• Request transfer of your data to another controller.
• Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact work@thecatalogist.com. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

The security of your data matters to us, but no method of transmission over the internet or method of electronic storage is 100% secure. While we use commercially acceptable means to protect your personal data, we cannot guarantee absolute security.

The Service is intended for business use and is not directed to anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the date shown above.

If you have any questions about this Privacy Policy, contact us at work@thecatalogist.com.