Privacy Notice
Katalyzon Services Private Limited · Bengaluru, India · Last updated August 2026 · Version 2026-08
1. Who we are and how to reach us
Katalyzon Services Private Limited, Bengaluru, Karnataka, India, is the data fiduciary for the personal data described here. Privacy questions and data-subject requests go through the Data Request form on this site, which is monitored by the desk rather than an automated queue. [LAW: registered office address and the named Data Protection Officer / grievance officer required under the DPDP Act must be inserted before publication.]
2. What we collect, and where it comes from
Three separate categories, kept distinct. (1) Details you give us: name, work email, phone, company, and the content of a requirement or enquiry you submit. (2) Business records we research from licensed data providers, official registries such as GSTN and DGFT, customs and trade filings, and publicly published company information — these concern organisations, and the personal element is limited to a role-holder's business contact details. (3) Technical data from your visit: pages requested, approximate origin, and a one-way hash of your IP address recorded against a consent event. We do not store your raw IP address against consent records, and we do not use tracking cookies for advertising.
3. Why we process it, and on what basis
To answer an enquiry you initiated; to assess whether a supplier or buyer is a genuine fit; to deliver a contracted engagement; to keep the verification and evidence trail that our tiers depend on; and, only where you have separately opted in, to send category updates. Our basis is your consent for marketing contact, and the necessity of performing or preparing a contract for everything else. Consent to marketing is recorded with the version of this notice in force at the time, and can be withdrawn without affecting the service you have contracted. [LAW: confirm the basis mapping and any legitimate-interest assessment for research-sourced business contacts.]
4. Who else sees it
Processors under written contract that host, send email for, or back up this platform. A supplier or buyer you are matched with sees only what the platform is designed to disclose: a supplier never receives your identity or contact details from a posted requirement until you accept their quote, and an unclaimed supplier's name stays masked from buyers until that supplier claims their storefront. We do not sell personal data, and we do not pass your details to suppliers as a list. [LAW: list of sub-processors and any cross-border transfer safeguards to be appended.]
5. How long we keep it
Enquiries and requirements are retained for the life of the engagement and a defined period afterwards for audit and tax purposes. Consent records are retained for as long as we rely on that consent, plus the period needed to demonstrate it. Verification evidence is retained as the record behind a published tier — it is the substantiation for a public claim, so deleting it would leave an unevidenced badge. [LAW/CA: statutory minimum retention for financial and tax records to be confirmed and stated as a specific period.]
6. Your rights, and how to use them
You may ask for access to your personal data, correction of anything inaccurate, erasure, a portable copy, or withdrawal of consent. Use the Data Request form; we verify identity before acting, because acting on an unverified request is itself a breach. We aim to respond within thirty days and will tell you if a lawful exemption prevents us from fulfilling part of a request. You may also complain to the Data Protection Board of India. [LAW: confirm statutory response window and the exemptions that apply.]
7. Changes
Material changes are published here with a new version identifier, and consent given under an earlier version is recorded against that version rather than silently carried forward.