Services Privacy Notice
Last revised: March 9, 2020
At Catalant Technologies, Inc. (“Catalant”), your privacy is important to us. This Services Privacy Notice (“Privacy Notice”) explains the information we collect through app.gocatalant.com and the related software and services provided by Catalant (collectively, the “Catalant Platform Services”). By using the Catalant Platform Services, you acknowledge that you have read and understood our Privacy Notice.
For a prior version of our Privacy Notice, click here.
This Privacy Notice is intended to help you understand:
- What Information We Collect
- How We Use Information We Collect
- How We Share Information We Collect
- How We Secure Information
- Data Retention
- Your Rights to Your Personal Information
- How We Transfer Information Internationally
- Other Important Privacy Information
1. What Information We Collect
Information you provide
Account and Profile Information: When you or someone acting on your behalf create an account on the Catalant Platform Services, we will collect information that you or they provide to us, including but not limited to your first name, last name, email address and location. We also collect any information that you or they provide to us in your profile. This may include, among other information, your location, your employment history, your educational history, your certifications or licenses, a profile photo, and any other information included in your profile, as applicable.
Content you provide through the Catalant Platform Services: We collect content that you post, send, receive and share via the Catalant Platform Services. This may include any information about you that you choose to include in a project posting, pitch or proposal, including, but not limited to, the files and links you upload to the Catalant Platform Services, as well as any feedback or reviews you provide through the Catalant Platform Services.
Communications with Catalant: When you communicate with Catalant including via telephone, email, or the Catalant Platform Services, we collect information about your communication and any information you choose to provide. These communications may include feedback you provide to us or requests for assistance. For example, if you engage with a member of our support team, you may be asked to provide your contact information so that we can keep you informed on the status of any issues.
Information provided by others
Other users of the Catalant Platform Services: Other users may provide information about you when they submit content through the Catalant Platform Services. For example, we may receive your email address from other Catalant Platform Service users when they invite you to collaborate on a project. Similarly, another user may provide your contact information when they designate you as the billing contact for your organization’s use of the Catalant Platform Services. Other users may also provide feedback or reviews about you based on projects completed through the Catalant Platform Services.
Other services you link to your account: We receive information about you when you or your organization integrates or links a third-party service with the Catalant Platform Services. You or your organization may also integrate the Catalant Platform Services with other services you use to allow you to access, store, share and edit certain content from a third party through the Catalant Platform Services. The information we receive when you link or integrate the Catalant Platform Services with a third-party service depends on the settings, permissions and privacy policy of that third party service. You should always check the privacy settings and notices in these third-party services to understand what information may be disclosed to us or shared with the Catalant Platform Services.
Compliance Providers: Catalant has agreed with certain customers to conduct background checks (including but not limited to criminal history, SSN trace, education verification, employment verification, and/or drug screenings) and/or worker classification evaluations for users engaging in projects with such customers. Catalant conducts such background checks and worker classification evaluations via third-party providers. You will be notified if a customer has requested that Catalant conduct a background check and/or worker classification evaluation with respect to you, and any such check or evaluation shall be conducted in accordance with applicable law.
Other Sources: To the extent permitted by applicable law, we may receive additional information about you from other sources such as partners, researchers, or marketing service providers, such as contact information to the extent not already provided to us. We may combine information that we collect from you with information about you from such sources and use it in accordance with this Privacy Notice.
Information we collect
Your use of the Catalant Platform Services: We keep track of certain information about you when you visit and interact with the Catalant Platform Services. This information may include the features you use, the links you click on, the searches you run, the type, size and filenames of attachments you upload, and how you interact with others on the Catalant Platform Services.
Device and Connection Information: When you use the Catalant Platform Services, Catalant’s servers automatically record information that your browser sends (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser software version, the webpage you were visiting before you used the Catalant Platform Services, parts of the Catalant Platform Services that you visit, the time spent, information you search for on the Catalant Platform Services, access times and dates, and other statistics. We may correlate this information with other information we have about you.
Cookies and other tracking technologies: We use cookies to collect information about your activities over time and across different aspects of the Catalant Platform Services. Catalant and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to customize your experience when using the Catalant Platform Services, validate your account, remember actions from your browsing session, provide relevant advertising, and improve the quality of the Catalant Platform Services. For detailed information about the use of cookies in the Catalant Platform Services, please read and review our Services Cookie Policy.
2. How We Use Information We Collect
How we will use your information:
To provide and improve the Catalant Platform Service and personalize your experience: We use information about you to provide the Catalant Platform Services to you, including to authenticate your identity when you log in, process transactions with you, and provide customer support to you. The Catalant Platform Services also include features that personalize your experience and allow you to communicate with other users on the Catalant Platform Services, including those users in your organization. For example, we use your information and analyze your activities on the Catalant Platform Services to provide relevant search results, recommendations, activity feeds and notifications. We also use information about you to connect you with other members of your organization with whom you may want to collaborate.
To communicate with you about the Catalant Platform Services: We use your contact information to send transactional communications via email and within the Catalant Platform Services, including responding to your comments, questions and requests, providing customer support, and sending you technical notices, updates, security alerts, and administrative messages.
To market, promote and drive engagement with the Catalant Platform Services: We use the information we have collected from you via the Catalant Platform Services and from third parties to send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences (including information about Catalant or partner campaigns and services) and social media advertising through social media platforms (such as Google and LinkedIn). These communications are aimed at driving engagement and informing you of new product features and offerings or events we think may be of interest to you.
To fulfill legal and regulatory requirements:
Where we have a legal obligation or where we believe it is necessary to protect our legal rights or interests or the interests of others, we may use information about you in connection with legal claims or compliance, regulatory, and audit functions.
We may also use information about you where you have given us consent to do so for a specific purpose. For example, we may publish testimonials or feature expert user profiles to promote the Catalant Platform Services with your permission.
If you are a user from the European Economic Area (“EEA”), or the United Kingdom (“UK“), our legal basis for collecting and using the personal information described above will depend on the personal information concerned and the specific context in which we collect it.
We will collect personal information from you only (i) where we need the personal information to perform a contract with you, (ii) where the processing is in our legitimate interests and not overridden by your rights, or (iii) where we have your consent to do so. In some cases, we may also have a legal obligation to collect personal information from you or may otherwise need the personal information to protect your vital interests or those of another person. If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory (as well as of the possible consequences if you do not provide your personal information). If we collect and use your personal information in reliance on our legitimate interests (or those of any third party), these interests will normally be to operate our platform and communicate with you as necessary to provide our services to you and for our legitimate commercial interest, for instance, when responding to your queries, improving our platform, undertaking marketing, or for the purposes of detecting or preventing illegal activities. We may have other legitimate interests and if appropriate we will disclose such interests at the relevant time.
3. How We Share Information We Collect
With other users with accounts: To facilitate interactions between users with accounts on the Catalant Platform Services, we may share information included in your profile or project posting with other users. Ultimately, you choose how much detail you want to include in your profile or any project posting. We may also display on your profile or project posting any reviews you have posted on the Catalant Platform Services, and any connections you have with other users in your organization, including the nature of those connections. We never share your billing or payment information with other users.
With service providers: Catalant uses a variety of third-party service providers to help us provide services related to the Catalant Platform Services. Catalant may employ third-party companies and individuals to perform aspects of the Catalant Platform Services on our behalf, specifically with respect to system infrastructure, data storage, customer database management, email marketing, marketing analytics, platform activity monitoring, online chat, and payment processing. These providers have limited access to your information, and are contractually bound to protect and to use it only for the purposes for which it was disclosed, consistent with this Privacy Notice.
With prospective users: We may display parts of the Catalant Platform Services in promotional and marketing activities. If your profile is visible or you have submitted services postings on the Catalant Platform Services, parts of your public profile page, such as your first name, profile picture, service offerings, professional experiences, and geographic location, may be shared with prospective users in our marketing materials. You may opt-out of this feature by changing your profile visibility in your account settings or in each services posting submission.
In the context of managed accounts: If you register or access the Catalant Platform Services using an email address with a domain that is owned by your organization, certain information about you including your profile information, profile picture, content, and use of your account may become accessible to your organization and other Catalant Platform Services users sharing the same domain.
In compliance with law, responding to legal requests, preventing harm and protection of our rights: Catalant may disclose your personal information to courts, law enforcement or governmental authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary: (i) to comply with our legal obligations, (ii) to comply with legal process and to respond to claims asserted against Catalant, (iii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability, (iv) to enforce and administer our terms and conditions, or (v) to protect the rights, property or personal safety of Catalant, its employees, its users, or members of the public.
With your consent: Where you have provided consent, we share your personal informations, as described at the time of consent.
Corporate reorganisations: Where we are negotiating with a potential buyer in connection with any proposed merger or sale of any part of our business, we may provide your personal information to the proposed buyer (and its agents and advisers) provided that we inform the buyer that it must use your personal information only for the purposes disclosed in this Privacy Notice. We may also disclose the information on the conclusion of such a merger or sale.
4. How We Secure Information
We take appropriate technical and organizational measures to protect your personal information from and against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and access.
5. Data Retention
We retain personal information about you where we have an ongoing legitimate business need to do so (for example, as needed to comply with our legal obligations, resolve disputes and enforce our agreements).
When we have no ongoing legitimate business need to process your personal information, we securely delete the information or anonymize it or, if this is not possible, securely store your personal information and isolate it from any further processing until deletion is possible.
If you have elected to receive marketing communications from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our content, products, or services, such as when you last opened an email from us or ceased using your Catalant account. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created.
The data our customers collect by using the Catalant Platform Services is retained according to the relevant agreements with our customers.
The data our customers collect by using the Service is retained according to the relevant agreements with our customers.
6. Your Rights to Your Personal Information
If Catalant is processing your personal information in the context of a customer’s use of the Catalant platform to manage its projects, then the customer is the controller and Catalant is a processor for the purposes of the General Data Protection Regulation (“GDPR”) (or UK equivalent). In those circumstances you should contact the customer about any queries relating to how your personal information is used on the Catalant Platform Services, including any requests to exercise your data protection rights.
For all other users of the Catalant Platform Services located in the EEA or the UK, Catalant shall serve as the data controller for your personal information and you have the following rights:
Accessing, updating and correcting your information: You have the right to ask Catalant to correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your Catalant account) by emailing privacy@gocatalant.com. You may also email privacy@gocatalant.com to receive a copy of your personal information controlled by Catalant.
Deleting your information: If you no longer want us to process your personal information, you may request that we delete your personal information by emailing privacy@gocatalant.com.
Objecting to processing/requesting that we stop using your information: If you object to our processing of your personal information, or wish to request a restriction on processing, please contact us at privacy@gocatalant.com.
Withdrawing your consent: If we process your personal information with your consent, then you may withdraw your consent at any time by emailing us at privacy@gocatalant.com. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to such withdrawal, nor will it affect processing of your personal information conducted in reliance on lawful processing grounds other than consent.
Moving your information: If you wish to exercise your right to data portability, please contact us at privacy@gocatalant.com and we will fulfill your request in accordance with applicable data protection laws.
Opting out of communications: If you decide at any time that you no longer wish to receive marketing communications from us, you may opt-out by emailing us at privacy@gocatalant.com or by clicking on the unsubscribe link included at the bottom of Catalant emails.
Sending “Do Not Track” Signals: Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, the Catalant Platform Services do not currently respond to browser DNT signals. You can use the range of other tools we provide to control such data collection and use.
7. How We Transfer Information Internationally
We store all information in the United States.
When we receive or share information of individuals in the EEA, UK or Switzerland, we put in place appropriate safeguards, such as the European Commission-approved standard contractual data protection clauses or by transferring the data to countries which have been approved by the European Commission as having adequate data protection laws.
8. Other Important Privacy Information
Complaints: In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at privacy@gocatalant.com and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the country in which you live or work.
Links to Other Sites: The Catalant Platform Services may contain links to third-party websites and services. However, we are not responsible for the privacy practices employed by those websites or services, nor are we responsible for the information or content they contain.
Payment Information: As a specific instance of third-party services, our payment partners will collect certain payment and billing information when you transact via the Catalant Platform Services. They will be responsible for their own privacy practices and the privacy policy of such third-party websites or services will govern your use of those services.
No PHI: While Catalant takes security and privacy very seriously, Catalant is not a HIPAA Business Associate and the Catalant Platform Services are not HIPAA-compliant and should not be used to store any protected health information (“PHI”). You agree that you will not upload or store any documents containing PHI on the Catalant Platform Services.
Children: The Catalant Platform Services are not directed to persons under 18 and Catalant does not knowingly collect personally identifiable information from children under 18. If you are a parent or guardian and believe your child has provided Catalant with personal information without your consent, please contact us at privacy@gocatalant.com and we will use commercially reasonable efforts to delete such information.
Changes to this Privacy Notice: Catalant reserves the right to change this Privacy Notice at any time. We will notify you of material changes to this Privacy Notice via a notice on the Catalant Platform Services or by sending you an email to the address you have registered with us. Non-material changes or clarifications will take effect immediately upon posting of the updated Privacy Notice. You should periodically check this page for updates. Your use of the Catalant Platform Services after such time will constitute acceptance by you of such changes.
Contact Us:
If you have any questions about this Privacy Notice please contact us by email at privacy@gocatalant.com or at:
Legal Department
Catalant Technologies, Inc.
25 Thomson Place, 3rd Floor
Boston, MA 02210