1. Who controls the data
The controller of personal data collected through this website is sole proprietor Denys Yuriiovych Yermolenko, operating under the commercial name CATALYST || COMPANY (“CATALYST”, “we”).
You can contact us about privacy at support@catalyst-ua.com, by phone or WhatsApp at +380 75 696 23 10, or via Telegram at @CATALYST_COMPANY.
2. What data we collect
When you submit an enquiry, we may receive your name; phone number, email address or Telegram username; preferred contact method; selected services; information about your business, goals, budget, desired timing, integrations and existing website; your message; referral/UTM parameters; and an optional PDF, TXT or DOCX attachment.
The server also uses a one-way hash derived from the IP address for abuse prevention. The raw IP is not stored in the lead record. Staff actions may create internal notes, tasks, status history and notification delivery records.
3. Purposes and legal grounds
We process the details you provide to answer the enquiry, clarify requirements, prepare an individual proposal and, if agreed, take steps towards a contract. Processing is based on your consent, steps requested before entering into a contract, compliance with legal obligations, and protection of the website and our legitimate interests where these do not override your rights.
Marketing messages require a separate voluntary opt-in. The current public form does not subscribe you to marketing automatically.
4. Storage and recipients
Enquiries and service records are stored in protected server-side storage. Optional files are stored in a private object store. Access is limited by roles to authorised CATALYST staff who need the data to handle the request.
A service integration may send the enquiry details to an authorised internal Telegram chat so the team can respond. Hosting, storage, email, Telegram, WhatsApp and other communication providers process data under their own terms and may use infrastructure outside Ukraine. We do not sell personal data.
5. Retention
We keep an enquiry only for as long as reasonably necessary to communicate, prepare a proposal, protect against abuse and resolve possible disputes. If no contract is concluded, inactive enquiries are reviewed for deletion or anonymisation, normally no later than 24 months after the last meaningful contact. If a contract is concluded, relevant records may be retained for the period required by accounting, tax, contractual and limitation rules.
The anti-abuse hash is kept only within a ten-minute rate-limit window. You may request deletion earlier unless continued storage is required by law or for a substantiated legal claim.
6. Cookies and browser storage
Your cookie choice is stored for 180 days. Language preferences are stored for up to one year only if you allow preference cookies. Essential session storage keeps enquiry choices for up to 30 minutes and the saved enquiry reference for the current session. When you change the form language, entered text and contact details are transferred within the same tab using a single-use record valid for 60 seconds.
At the date of this version, no third-party advertising or behavioural analytics provider is connected. Interface analytics events are disabled until you consent. They do not contain your name, contact details or enquiry text. You can change or withdraw optional consent at any time using Cookie settings in the footer; the enquiry form remains available.
7. Your rights
Subject to Ukrainian law, you may ask what personal data we process and why, request access, correction, restriction or deletion, object to processing, withdraw consent for future processing, and receive information about recipients. Withdrawal does not invalidate processing that occurred before it.
Send a request from a contact channel that allows us to reasonably verify you. You may also complain to the Ukrainian Parliament Commissioner for Human Rights or apply to a court.
8. Security and your responsibility
We apply access controls, server-side validation, private file storage, rate limiting and activity records. No online system can provide an absolute security guarantee. Do not submit passwords, payment-card data, special-category data or confidential information about third parties unless we have expressly agreed a secure channel and a lawful basis.
9. Updates
We may update this policy when the website, processing activities or law changes. The current date and version are shown at the top. Material changes apply prospectively after publication.
Legal basis and official sources
The document is based on the following Ukrainian legislation and official guidance: