Privacy Notice

Privacy and Cookies Notice

Here at Catalyst Business Finance Ltd ("Catalyst") every care is taken in the processing of personal data. This privacy notice is applicable to the following: clients of Catalyst, the prospective clients of Catalyst (prospective clients being individuals with whom Catalyst is interacting and engaging with in the intention that they may become clients of Catalyst), introducers, suppliers and other contacts of Catalyst.

Processing personal data requires Catalyst to comply with the General Data Protection Regulation 2016 (GDPR) and other associated data laws.

The personal data we collect pertains to any information which can identify you or is about you. This includes and is not limited to your name, email address, postal address, date of birth and location.

As a data controller all the personal data information we collect means we process, collate, sort, amend, transfer and delete that data. As such we are therefore required to comply with all data laws to ensure that the information you supply is protected and in all cases used appropriately.

The below provides information about how we process your data, why we process it and how we manage your personal data.

Our responsibilities

As a data controller of the personal data you provide to Catalyst we are responsible for ensuring your data is processed, stored and deleted as appropriate. In order to do so the business has appointed a privacy officer. Caroline McDonald will be responsible in ensuring the business complies with the data protection laws and she will be responsible for dealing with requests made by individuals who may wish to exercise their rights under said data protection laws.

How we collect and process your information and who we share it with

The personal data we collect and process will depend upon the relationship you have with Catalyst.

If you are entering into a contract with us we may need personal data from you including your name, phone number, email address, also information about your business including and not limited to your business’s activities, name, financial information, names of your directors, business partners and persons of significance to the business which will include personal data such as names, date of births, phone numbers, email addresses and residential addresses.

Where we are required to collect personal information for our purposes we will do so on the following basis as listed within GDPR.

  • Entering in a contract and on-going management: to enter into a contract and to become a client we are legally required undertaking certain processes to ensure your identification and undertake credit checks.
  • Legitimate Interests: We may use your personal information on the basis of our ‘legitimate interests’ to inform and promote our products, services and business and also to evaluate our performance as a lender. This may include business marketing communications and information on events we may hold in the future, which you can opt-out of at any time. Opting out can be done so by emailing
  • Legal Obligations: Where there are legal obligations for us to process your personal data we will do so. This is as long as it is possible to do so without breaching any other duty we have in respect of such legal obligation. We will advise you of any intention to do so.
  • Consent: You may provide consent for us to inform you about developments and additional products and services we may offer in the future. An example of this is the Catalyst newsletter or invitations to events we may hold. Again you can opt-out of marketing communications from Catalyst at anytime.

If none of the above is applicable we will obtain consent from you separately to process your personal data. You can at any point withdraw your consent without affecting the lawfulness of data we would have processed before withdrawing your consent.

Who we share information with

The personal data we collect from you will only be transferred and used for the purposes we need to. We may share your data with the following:

  • Legal and financial advisors in relation to the management of contracts we hold with you
  • Professionals who provide services relating to the provision of our services including and not limited to surveyors and valuation specialists
  • Credit Reference agencies will be provided with your personal data in order to conduct credit references, identification and anti money laundering checks.
  • Third party email distribution networks – only where consent or it is of legitimate interest.

We do not share or transfer your data out of the EEA.

How long your information will be kept

Your information will be kept while you have an account with us and we are still providing products and services to you. Once you have ceased to use our products and services we will hold your information for 7 years. This is in case any of any queries, complaints or issues which you may have. All information will be kept securely during this time. After the period has passed we will destroy and delete all files and personal data we hold about you.

If you have opted-in to marketing communications this information will be kept until consent is withdrawn.

Your rights

GDPR provides you with a number of rights in relation to your personal information: This is summarised below but further information can be obtained from Information Commissioner’s Office website It is worth noting that these rights are applicable for the period in which we process your information.

The right to request access to the personal information we hold about you.

This will be done free of charge unless the information you are requesting is excessive or unfounded. In these cases we are entitled to charge a fee of a reasonable amount. We will ask for proof of identification when a request to access data is submitted.

The information will be provided with one month of receipt of the request.

The right to update or correct your information

You can request an update or correction to any out-of-date or incorrect personal information we hold about you. We will update your information within one month of receiving the request. If we feel the request isn’t appropriate will we contact you to advise why we believe that is the case. If more time is needed for us to rectify the request we will also advise you of this.

The right to be forgotten

There are some circumstances where you have the right to request the deletion of personal data we hold. The right to be forgotten is available if:

  • there is no further requirement for us to hold the data for the purpose in which it was collected
  • you have withdrawn your consent
  • you object to the processing of the data and we don't have any legitimate interests to continue to process it
  • we have failed to comply with GDPR and have unlawfully processed your personal data
  • there is a legal obligation to do so

The right to restrict processing

There are some circumstances which entitles you to suppress the processing of the personal data you have provided us. This right means we will cease to process your personal data. It does not mean that we have to delete the data.

You can exercise your right to restrict processing if:

  • You think the personal information we hold isn’t accurate. Processing of the data will cease until it can be verified
  • You object to us processing your personal data. Again processing of the data will cease until we have determined whether our legitimate interest supersedes your objection.
  • The processing is deemed unlawful
  • Or the data is no longer required by us but you have requested us to keep it in order to help with a legal claim.

Portability of your data

This right allows you to request us to provide your personal data in a structured, commonly-used and machine-readable format. You can request us to pass this information to other organisations. This right is only applicable to the data you provide to us.

  • Your request will be responded to within one month of receipt, if more time is needed we will contact you.
  • The right to request that we delete any personal information concerning you where you don’t think there is any justification for us holding it.

Right to object

You can object to us processing your personal data. To object you must have grounds for doing so. The processing of data will cease until you can demonstrate compelling legitimate grounds.


To exercise any of the rights listed above you can contact us by emailing

Your right to make a complaint

If you think we have unfairly or unlawfully processed your personal data or you feel we haven’t complied within GDPR rulings you can report your concerns to the Information Commissioner’s Office (ICO). They can be contacted by calling 0303 123 1113 or you can visit their website to find alternative methods of contact.


Changes to this privacy policy

To keep this policy up to date changes may be made. It is prudent to review this information regularly. This notice was last updated 12/06/2018


Still have questions?

Then please contact us by emailing


Visitors to our website and use of cookies

When someone visits we may collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various sections of the site, or in particular the different companies (as referred to above) within Catalyst. We may make use of Google Analytics to collect this information in a way which does not identify anyone. 
To opt out of being tracked by Google Analytics across all websites visit


We may make use of cookies to gather valuable information about how users move around the site. This enables us to understand how the site is used, to make improvements. You can find out more about this from our Cookies Policy. See below.

Cookies – what are they?

A “cookie" is a small text file that's stored on your computer, tablet or phone when you visit a website.
Some cookies are deleted when you close down your browser. These are known as session cookies. Others remain on your device until they expire or you delete them from your cache. These are known as persistent cookies and enable us to remember things about you as a returning visitor.
Cookies enable us:

  • To estimate our audience size and usage pattern.
  • To store information about your preferences, and so allow us to customise our site according to your individual interests.
  • To speed up your searches.
  • To recognise you when you return to our site.

By using our website you agree that we can place these types of cookies on your device, however you can block these cookies using your browser settings. To find out more about cookies, including how to see what cookies have been set and how to manage and delete them, visit

Links to other websites

This Privacy and Cookies Notice does not cover the links within this site linking to other websites. We encourage you to read the privacy statements on the other websites you visit.