Privacy Policy

Last updated: September 2026

1. Information We Collect

Depending on how you use Catalyst Exam, we may collect:

• name, email address, mobile number, country, language preference, and account details;
• payment and purchase records, coupon usage, and transaction references;
• assessment attempts, answers, scores, competency results, progression, certificates, and verification records;
• account activity such as login, last activity, reminders, and security-related records;
• Trusted Trainer profile information that you choose to submit for public listing;
• technical information reasonably necessary to operate and secure the service.

2. Why We Use Personal Data

• to create and manage candidate accounts;
• to provide purchased or granted access;
• to operate assessments, scoring, competency reports, booklets, and certificates;
• to send transactional emails including verification, results, reminders, purchase confirmations, and certificate-related messages;
• to prevent fraud, protect assessment integrity, and secure the platform;
• to respond to support requests and legal obligations;
• to publish Trusted Trainer information only where the trainer has submitted the information and consented to public listing.

3. Payments

Payments may be processed by third-party payment providers such as Stripe. Catalyst does not need to store full payment-card details on its own website where the payment provider handles them directly. Payment providers process data under their own privacy and security terms.

4. Public Certificate Verification

Certificate verification is intentionally public so employers, HR departments, universities, and other third parties can verify a certificate number. The verification page may display the certificate holder's name, qualification, certificate number, issue date, expiry date, and current validity status.

5. Trusted Trainer Directory

Trainer profile information is published only after the trainer submits the profile, consents to public listing, and Catalyst approves it. Public fields may include professional name, biography, location, specialties, industries, languages, delivery modes, professional links, contact details selected for publication, photo, availability, and verified Catalyst level.

6. Sharing of Data

We do not sell candidate personal data. We may share information with service providers where necessary to operate the platform, including hosting, email, payment, security, and technical providers, and with authorities where disclosure is legally required.

7. Data Retention

We retain information for as long as reasonably necessary for assessment integrity, certification verification, accounting, legal obligations, dispute handling, security, and service administration. Some certification and audit records may need to be retained after an account becomes inactive.

8. Security

Catalyst uses reasonable technical and organizational measures to protect personal information. No internet system can guarantee absolute security, and users are responsible for protecting their own account credentials.

9. Your Privacy Rights

Where applicable under UAE data-protection law, individuals may have rights relating to access, correction, restriction, objection, portability, and deletion, subject to legal exceptions and legitimate record-retention requirements. Requests can be submitted through the Contact & Support page.

10. International Services

Some technology providers may process information outside the UAE. Where cross-border processing occurs, Catalyst will seek to use providers and arrangements appropriate to applicable data-protection requirements.

11. Changes to this Policy

We may update this Policy as the platform, legal requirements, or service providers change. The current version will be published here.