Privacy Policy

Effective date: 19 October 2026 | Review: 19 October 2027

1. Who we are

Catalyst Education & Impact Consulting (‘Catalyst’, ‘we’, ‘us’) provides education, curriculum and programme-development, organisational advisory and evaluation consultancy services. This notice explains how we handle personal information about website visitors, prospective and existing clients, business contacts and other individuals who contact us.

Data controller: Frankie Frangeskou, sole trader trading as Catalyst Education & Impact Consulting. Contact: frankie@catalysteducation-impact.co.uk. Website: www.catalysteducation-impact.co.uk. Postal contact address: 19 Caversham Place, Sutton Coldfield, West Midlands, B73 6HW

2. Information we may collect

We may collect personal information when you contact Catalyst Education & Impact Consulting by email, telephone or through other professional communications.

This information may include your name, contact details, organisation, professional role and information relating to your enquiry or potential consultancy requirements.

Our website does not currently contain contact forms. Technical information, including IP addresses and browser information, may be processed by our website hosting provider, Cloudflare, for website delivery, performance and security purposes.

We do not ask website visitors to provide sensitive personal information or identifiable learner records. If a project requires special category information, children's information or safeguarding records, we will agree specific safeguards and provide additional information where appropriate.

3. How and why we use information

We use contact and enquiry information to respond to messages, discuss potential work and maintain professional relationships (normally legitimate interests or steps requested before entering a contract). We use client information to provide agreed services and manage contracts (contractual necessity or legitimate interests, depending on the individual and activity). We use invoicing and accounting information to administer payments and meet legal obligations.

We may send relevant business-to-business communications where permitted by law and will honour objections and unsubscribe requests. Where consent is legally required, including for certain marketing or non-essential cookies, we will seek it first. We will not sell your personal data.

4. Website Hosting, Security and Analytics

Our website is hosted through Cloudflare Pages, which provides website hosting, security and infrastructure services. Cloudflare may process technical information, including IP addresses and browser information, to deliver and protect our website. We do not currently use Cloudflare Web Analytics. Our website has not been configured to use advertising or visitor-tracking cookies.

We will review our use of cookies and similar technologies if additional website features or analytics services are introduced.

5. Sharing your information

We share personal data only when necessary with authorised service providers supporting our operations, which may include IONOS for business email/hosting, HubSpot for contact management, and approved video-conferencing, document or accounting providers. The actual providers used will depend on our configuration and the service involved.

We may also share information with professional advisers, regulators or authorities where required or permitted by law, and with project partners only where justified and appropriately safeguarded. Providers processing data for us are subject to appropriate contractual and security arrangements where required.

6. International working and transfers

Catalyst may work with organisations outside the UK. Where personal data is transferred to a country without applicable UK adequacy regulations, we will use an appropriate lawful transfer mechanism and safeguards where required. International collaboration does not automatically mean that personal data will be shared overseas.

7. How long we keep information

Catalyst Education & Impact Consulting retains personal information only for as long as reasonably necessary for the purposes for which it was collected, including meeting legal, accounting and contractual obligations. Our standard retention periods are:

• General enquiries: 12 months after the last communication where no business relationship develops.
• Unsuccessful consultancy proposals: 2 years after the proposal is declined or expires.
• Client contracts and project records: normally 6 years after the end of the contractual relationship.
• Financial and accounting records: for the period required by applicable UK tax and accounting legislation.
• Business contacts held in our CRM: reviewed annually and deleted when no longer required for legitimate business purposes.

We may retain information for longer where necessary to comply with legal obligations, resolve disputes or establish, exercise or defend legal claims. When personal information is no longer required, it will be securely deleted or anonymised.

8. Keeping information secure

We use proportionate safeguards, including access controls, strong authentication where available, device and account security, and secure sharing and disposal practices. No online transmission or storage method is completely risk-free.

9. Your data protection rights

Depending on the circumstances and applicable exemptions, you may have rights to access, correct or erase personal information; restrict or object to processing; receive certain information in a portable format; and withdraw consent where processing relies on it. You may object at any time to direct marketing.

To exercise your rights, email frankie@catalysteducation-impact.co.uk. We normally respond within one calendar month, subject to lawful extensions. You may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We would welcome the opportunity to address concerns first.

10. Children and educational projects

Our website is intended primarily for organisations and professional contacts, not for children to submit personal information. Where a consultancy project involves learner or child data, responsibilities, lawful bases, safeguarding measures and any data-processing agreement will be established separately with the relevant organisation before processing begins.

11. External links and changes to this notice

Our website may link to third-party websites. Their privacy practices are governed by their own notices. We may update this policy as our services, website technology or legal obligations change. The latest version should be made available on our website with its effective date.