Personal Information We Collect

Information you provide to us. Personal information about you that we collect from you through the Services or otherwise may include:

• Contact data, such as your first and last name, email and mailing addresses, phone number(s), professional title and company name.
• Registration data, such as the information you provide to register for an event we host or other Services that we provide.
• Correspondence, such as information you provide when you contact us with questions, feedback, or otherwise correspond with us.
• Marketing data, such as the email address or contact details that we use to send marketing communications we may send to you, and information about your responses to our marketing communications.
• Other information that is not specifically listed here, which we will use in accordance with this Privacy Policy or as otherwise disclosed at the time of collection.

Data from other sources. We may receive personal information about you from other sources, such as

• publicly-available sources, including social media platforms.
• information services.
• business partners, such as joint marketing partners and event co-sponsors.
• third parties, such as firms we engage to perform background checks, individuals who share your contact details with us, and our clients, which may include your employer.

We may combine the personal information we obtain from other sources with the personal information you provide to us.

Automatic collection. We may automatically log the following information about you, your computer or mobile device, and your activity occurring on or through the Site:

• Device data, such as your computer or mobile device operating system type and version number, manufacturer and model, browser type, screen resolution, IP address, the website you visited before browsing to our website, and general location information such as city, state or geographic area (but not your precise geolocation data).
• Online activity data, such as information about your use of and actions on the Site, including pages or screens you viewed, how long you spent on a page or screen, navigation paths between pages or screens, information about your activity on a page or screen, access times, and length of access.

Cookies and Pixel Tags. We, our service providers and third-party partners may also use cookies, pixel tags and similar technologies to collect information about you from the Site. Cookies are small files stored directly on the computer or device that you are using that can collect the information described above. Pixel tags (also known as web beacons and clear GIFs) are pieces of code that may be embedded in websites and emails, and may be used to, among other things, track the actions of users of the Services (including email recipients), measure the success of our marketing campaigns, and compile statistics about usage of the Services and response rates.

How We Use Your Personal Information

We use your personal information for the following purposes and as otherwise described in this Privacy Policy or at the time of collection:

Service delivery. We use your personal information to:

• provide, operate and improve the Services;
• communicate with you about the Services, including by sending you announcements, updates, security alerts, and support and administrative messages;
• communicate with representatives of our clients and other individuals in connection with providing Client Services; and
• respond to your requests, questions and feedback.

Marketing. We may send you Qatalyst-related announcements or other marketing communications as permitted by law.

To comply with law. We may use and share your personal information as we believe necessary or appropriate to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities.

For compliance, fraud prevention, and safety. We may use your personal information and disclose it to law enforcement, government authorities, and private parties as we believe necessary or appropriate to: (a) protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims); (b) audit our internal processes for compliance with legal and contractual requirements; (c) enforce the terms and conditions that govern the Services; and (d) prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.

With your consent. In some cases we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.

To create anonymous data. We may create aggregated, de-identified or other anonymous data from your personal information and other individuals whose personal information we collect. We make personal information into anonymous data by removing information that makes the data personally identifiable to you. We may use this anonymous data and share it with third parties for our lawful business purposes, including to analyze and improve the Services and promote our business.

How We Share Your Personal Information

We do not share your personal information with third parties without your consent, except in the following circumstances or as described elsewhere in this Privacy Policy:

Affiliates. We may share your personal information with our corporate parent, subsidiaries, and affiliates, for purposes consistent with this Privacy Policy.

Service providers. We may share your personal information with third party companies and individuals that provide services on our behalf or help us operate the Services or our business (such as IT, hosting, human resources services, email delivery, marketing, event management, and database management services).

Professional advisors. We may disclose your personal information to professional advisors, such as lawyers, auditors and insurers, where necessary in the course of the professional services that they render to us.

To comply with law. We may share your personal information to comply with law as described above.

For compliance,fraud prevention and safety. We may share your personal information for the compliance, fraud prevention and safety purposes as described above.

Business transfers. We may sell, transfer or otherwise share some or all of our business or assets, including your personal information, in connection with a business transaction (or potential business transaction) involving Qatalyst, such as a corporate divestiture, merger, consolidation, acquisition, reorganization or sale of assets, or in the event of bankruptcy or dissolution.

Your Choice

Opt-out of marketing communications. You may opt out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us at [email protected]. You may continue to receive service-related and other non-marketing emails.

Do Not Track.Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” or similar signals sent to our Site. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Declining to provide information. We need to collect personal information to provide certain Services. If you do not provide the information requested, we may not be able to provide those Services.

Other Sites and Services

The Site may contain links to other websites and online services operated by third parties. These links are not an endorsement of, or representation that we are affiliated with, any third party. In addition, our content may be included on web pages or other online services that are not associated with us. We do not control third party websites or online services, and we are not responsible for their actions.

Security

The security of your personal information is important to us. We employ organizational, technical and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal information.

International Data Transfers

We maintain offices and facilities in the United States, and your personal information may be transferred to the United States or other locations outside of your state, province, or country where privacy laws may not be as protective as those in your state, province, or country.

Changes to this Privacy Policy

We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Site. If required by law, we will also provide notification of changes in another way that we believe is reasonably likely to reach you, such as via e-mail or another manner through the Services.

Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your continued use of the Services after the posting of any modified Privacy Policy indicates your acceptance of the terms of the modified Privacy Policy.

How to Contact Us

Please direct any questions or comments about this Policy or privacy practices to [email protected]. You may also write to us via postal mail at:

Qatalyst Partners LP

One Maritime Plaza, 24th Floor

San Francisco, CA 94111

Notice to California Residents

We are required by the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”) to provide to California residents an explanation of how we collect, use, retain and disclose their Personal Information, and of the rights and choices we offer to California residents with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the CCPA.

Your California privacy rights. As a California resident, you have the rights listed below. However, these rights are not absolute, and in certain cases we may decline your request as permitted by law.

• Information. You can request the following information about how we have collected and used your Personal Information:

  a. The categories of Personal Information that we have collected.

  b. The categories of sources from which we collected Personal Information.

  c. The business or commercial purpose for collecting Personal Information.

  d. Whether we have disclosed your Personal Information for a business purpose, and if so, the categories of Personal Information that we disclosed and the categories of third parties to whom we disclosed such Personal Information.

• Access. You can request a copy of the Personal Information that we have collected about you.
• Deletion. You can ask us to delete the Personal Information that we have collected from you.
• Correction. You can ask us to correct inaccuracies in your Personal Information.
• Nondiscrimination. ou are entitled to exercise the rights described above free from discrimination. This means that we will not penalize you for exercising your rights by taking actions such as denying you services; increasing the price/rate of services; decreasing service quality; or suggesting that we may penalize you as described above for exercising your rights.

How to exercise your rights. You may exercise your California privacy rights described above as follows:

• Right to information, access, deletion and correction.  You can request to exercise your information, access, deletion and correction rights by:

  a. visiting https://pp.qatalyst.com/

  b. calling us toll free at 1-877-642-7890

  c. emailing [email protected]

We will need to confirm your identity to process your requests to exercise your information, access or deletion rights. As a part of this process, government identification may be required. If an agent would like to make a request on your behalf as permitted under applicable law, the agent may use the submission methods noted in this section. We will process the agent’s request consistent with applicable law. As part of our verification process, we may request that the agent provide, as applicable, proof concerning their status as an authorized agent. In addition, we may require that you verify your identity as described in this section or confirm that you provided the agent permission to submit the request. We also reserve the right to confirm your current California residency. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

Please also understand that we are not obligated to provide you with a copy of Personal Information more than twice in a 12-month period.

Personal information that we collect, use and disclose

The chart below summarizes how we collect, use and disclose Personal Information by reference to the statutory categories specified in the CCPA, and describes our practices during the 12 months preceding the effective date of this Privacy Policy.

We do not “sell” or “share” your Personal Information, including your Sensitive Personal Information, as defined under the CCPA. We have not engaged in such activities in the 12 months preceding the date this Privacy Policy was last updated. Without limiting the foregoing, we do not “sell” or “share” Personal Information, including Sensitive Personal Information, of minors under 16 years of age.

The Personal Information we collect and the sources from which we collect it are described in more detail in the section above entitled Personal Information We Collect. Each category of Personal Information we collect may be used for the business/commercial purposes described in the section above entitled How We Use Your Personal Information, and each category may be disclosed as described in the section above entitled How We Share Your Personal Information.

Collection, use and disclosure of Sensitive Personal Information

We collect, use and disclose Sensitive Personal Information for purposes of: providing services as requested; ensuring safety, security, and integrity; countering wrongful or unlawful actions; performing services for our business, including maintaining and servicing clients, providing customer service, processing or fulfilling transactions, verifying client information, processing payments, providing services on behalf of our business; and other collection and processing that is not for the purpose of inferring characteristics about an individual. We do not use Sensitive Personal Information beyond these purposes.

Retention period

We retain each category of Personal Information, including Sensitive Personal Information, for as long as needed or permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include:

• Whether there is a legal obligation to which we are subject, for example, to comply with applicable regulatory, legal, tax, accounting, or other compliance requirements;

• The length of time we have an ongoing relationship with you and provide services to you, for example, for as long as you continue using our services, and the length of time thereafter during which we may have an ongoing legitimate business need to reference your Personal Information to address issues that may arise, for example, issues related to fraud prevention; and

• Whether retention is advisable in light of our legal position, such as in regard to applicable statutes of limitations, litigation, or regulatory investigations.

Information for Residents of Europe

The information in this section applies only to individuals in the European Union, the European Economic Area, the United Kingdom and other locations subject to the data protection laws of the European Union (collectively, “Europe”).

Personal information. Except as otherwise specified, references to “personal information” in this Privacy Policy are equivalent to “personal data” governed by European data protection legislation.

Controller. The controller of your personal information covered by this Privacy Policy for purposes of European data protection legislation will depend on the nature of your relationship with Qatalyst. In most cases, the controller is Qatalyst Partners Limited, 12 Golden Square, 1st Floor, London, W1F 9JE, United Kingdom. In other cases, the controller may be Qatalyst Partners LP or Qatalyst Partners LLC.

Legal bases for processing. The legal bases of our processing of your personal information as described in this Privacy Policy will depend on the type of personal information and the specific context in which we process it. However, the legal bases we typically rely on are set out in the table below. We rely on our legitimate interests as our legal basis only where those interests are not overridden by the impact on you (unless we have your consent or our processing is otherwise required or permitted by law). If you have questions about the legal basis of how we process your personal information, contact us at [email protected].

Sensitive personal information. Unless we specifically request it, we ask that you not provide us with any sensitive personal information (e.g., information related to racial or ethnic origin, political opinions, religion or other beliefs, health, biometrics or genetic characteristics, criminal background or trade union membership) on or through the Services, or otherwise to us.

Retention. We retain personal information for as long as needed or permitted in light of the purpose(s) for which it was obtained and consistent with applicable law. The criteria used to determine our retention periods include:

• The length of time we have an ongoing relationship with you and provide the Services to you (for example, for as long as you have an account with us or keep using the Services);
• Whether there is a legal obligation to which we are subject (for example, certain tax, accounting, or other laws, compliance or regulatory requirements require us to keep records of your transactions for a certain period of time before we can delete them); or
• Whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).

Your rights. f you would like to request to access, correct, update, suppress, restrict, or delete personal information, object to or opt out of the processing of personal information, or if you would like to request to receive a copy of your personal information for purposes of transmitting it to another company (to the extent these rights are provided to you by applicable law), you may submit these requests by email to [email protected] or our postal address provided above.  We may request specific information from you to help us confirm your identity and process your request. We will respond to your request consistent with applicable law. 

If you would like to submit a complaint about our use of your personal information or our response to your requests regarding your personal information, you may contact us at [email protected]. You may also lodge a complaint with a European data protection authority for your country or region where you have your habitual residence or place of work or where an alleged infringement of applicable data protection law occurs. A list of EEA data protection authorities is available here. Information regarding the UK data protection authority is available here. Information regarding the Swiss data protection authority is available here.

Cross-border data transfer.  Your personal information may be stored and processed in any country where we have facilities or in which we engage service providers, and by using the Services you understand that your information will be transferred to countries outside of your country of residence, including the United States, which may have data protection rules that are different from those of your country.

Some countries outside of the EEA are recognized by the European Commission as providing an adequate level of data protection according to EEA standards (the full list of these “specified countries” is available here). The UK and Switzerland recognize the EEA and the specified countries as providing an adequate level of data protection according to UK and Swiss standards. For transfers from the EEA, the UK or Switzerland to countries not considered adequate by the European Commission, the Swiss government, or the UK government (as applicable), we have put in place adequate measures where necessary, such as standard contractual clauses adopted by the relevant authority, to protect your personal information. Please contact us at [email protected] for further information about any such transfers or the specific safeguards applied.