Privacy Policy
Last revised: July 1, 2018
The previous version of this Privacy Policy is available here.
At Catalant, your privacy important to us. This Privacy Policy explains the information we collect and how we use it to provide our services and give users a better experience. It applies to any users of gocatalant.com and any web pages, mobile applications and mobile websites operated by Catalant (collectively, the “Site”), and related software and services provided by Catalant (collectively, the “Catalant Platform Services”). This Privacy Policy is intended to help you understand:
- What information we collect
- How we use information
- How we share information
- How we secure information
- How to access and control your information
- How we transfer information internationally
- Other important privacy information
The capitalized terms that are not expressly defined in this Privacy Policy have the same meanings as set forth in the Catalant Terms of Service, accessible at catalant.com.
For the purposes of the General Data Protection Regulation (the “GDPR”), Catalant is the data controller. Catalant is a Delaware corporation established in the United States headquartered at 25 Thomson Place, Boston, MA 02210.
By using the Site and/or Catalant Platform Services, you acknowledge that you have read and understood our Privacy Policy.
1. WHAT INFORMATION WE COLLECT
Information you provide
Account and Profile Information: When you create an account on the Catalant Platform Services, we will collect information that you provide to us, including your first name, last name and email address. We also collect any information that you provide to us in your profile. This may include, among other information, your location, your employment history, your educational history, your certifications or licenses, your pay rates, a profile photo, and any other information you choose to include in your profile.
Content you provide through the Catalant Platform Services: We collect content that you post, send, receive and share via the Catalant Platform Services. This may include any information about you that you choose to include in a Project posting, pitch or proposal, including, but not limited to, the files and links you upload to the Catalant Platform Services. We also collect content that you submit to our Site or via our social media accounts. For example, you provide content to us when you participate in any surveys, contests, promotions, sweepstakes, activities or events.
Payment Information: We collect certain payment and billing information when you provide it to us including when setting up your profile or transacting via the Catalant Platform Services. For example, you may provide payment information, such as credit card or bank account details, which we collect via secure payment processing services.
Communications with Catalant: When you communicate with Catalant via telephone, email, our Site, or the Catalant Platform Services more broadly, we collect information about your communication and any information you choose to provide. These communications may include feedback you provide to us or requests for assistance. For example, if you engage with a member of our support team, you may be asked to provide your contact information so that keep you informed on the status of any issues.
Information provided by others
Other users of the Catalant Platform Services: Other users may provide information about you when they submit content through the Catalant Platform Services. For example, we may receive your email address from other Catalant Platform Service users when they invite you to collaborate on a Project. Similarly, another user may provide your contact information when they designate you as the billing contact for your organization’s use of the Catalant Platform Services.
Other services you link to your account: We receive information about you when you or your administrator integrate or link a third-party service with the Catalant Platform Services. You or your administrator may also integrate the Catalant Platform Services with other services you use, such as to allow you to access, store, share and edit certain content from a third-party through the Catalant Platform. The information we receive when you link or integrate the Catalant Platform Services with a third-party service depends on the settings, permissions and privacy policy controlled by that third-party service. You should always check the privacy settings and notices in these third-party services to understand what information may be disclosed to us or shared with our Services.
Background Check Providers: Catalant has agreed with certain Customers to conduct background checks (including criminal history, education verification, employment verification, credit checks, or drug screenings) with respect to certain other users. Catalant conduct such checks via a third-party provider. You will be notified if a Customer has requested that Catalant conduct a background check with respect to you, and any such check shall be conducted in accordance with applicable law.
Other Sources: To the extent permitted by applicable law, we may receive additional information about you from other sources such as partners, researchers or marketers. We may combine information that we collect from you with information about you from such other sources and use it in accordance with this Privacy Policy.
Information we collect automatically
Your use of the Catalant Platform Services: We keep track of certain information about you when you visit and interact with the Catalant Platform Services. This information may include the features you use; the links you click on; the searches you run; the type, size and filenames of attachments you upload; and how you interact with others on the Catalant Platform Services.
Device and Connection Information: When you visit the Site or use the Catalant Platform Services, Catalant’s servers automatically record information that your browser sends whenever you visit a website (“Log Data”). This Log Data may include information such as your computer’s Internet Protocol (“IP”) address, browser type, browser software version or the webpage you were visiting before you came to our Site, pages of our Site that you visit, the time spent on those pages, information you search for on our Site, access times and dates, and other statistics. We may correlate this information with other information we have about you.
Cookies and Other Tracking Technologies. We use cookies to collect information about your activities over time and across different aspects of the Site and the Catalant Platform Services. Catalant and our third-party partners, such as our advertising and analytics partners, use cookies and other tracking technologies (e.g., web beacons, device identifiers and pixels) to customize your experience on the Site, validate your account, remember actions from your browsing session, provide relevant advertising, and improve the quality of the Catalant Platform Services. You can find more information about cookies and how to manage them at https://www.allaboutcookies.org/.
Cookies may be either “persistent” cookies or “session” cookies. A persistent cookie consists of a text file sent by a web server to a web browser, which will be stored by the browser and will remain valid until its set expiry date (unless deleted by the user before the expiry date). A session cookie, on the other hand, will expire at the end of the user session, when the web browser is closed. The types of cookies used include:
- Strictly Necessary Cookies.These are cookies that are required for the operation of a website. They include, for example, cookies that enable users to log into secure areas of the Catalant Platform Services.
- Analytical/performance Cookies.They allow website providers to recognize and count the number of visitors and to see how visitors move around a website when they are using it. This helps website providers to improve the way the website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality Cookies.These are used to recognize users when users return to the website. This enables website providers to personalize our content for you and remember a user’s preferences.
- Targeting Cookies.These cookies record a user’s visit to a website, the pages a user has visited and the links a user has followed. Website providers will use this information to build profiles of user interests for targeted marketing on other websites. We use retargeting vendors to advertise in ways that are relevant and personalized to you. You allow us to use any information you have provided to us to serve a relevant ad to you. If you consented by submitting Catalant forms, we may use that information for personalization and retargeting. To opt out of this personalized experience, you can update your cookie settings in your browser settings.
In addition, we use Google Analytics, which is a web analytics tool that helps us understand how users engage with the Catalant Platform Services. Like many services, Google Analytics uses first-party cookies to track user interactions, as in our case, where they are used to collect information about how users use our site. This information is used to compile reports and to help us improve the Site and the Catalant Platform Services. The reports disclose website trends without identifying individual visitors. You can opt out of Google Analytics without affecting how you visit our Site – for more information on opting out of being tracked by Google Analytics across all websites you use, visit this Google page: https://tools.google.com/dlpage/gaoptout.
2. HOW WE USE INFORMATION WE COLLECT
As it is in our legitimate interests to provide effective services and useful content to you, we will use your information to:
To provide and improve the Catalant Platform Service and personalize your experience: We use information about you to provide the Catalant Platform Services to you, including to authenticate you when you log in, process transactions with you, and provide customer support to you. The Catalant Platform Services also include features that personalize your experience and allow you to communicate with other users on the Catalant Platform, including those users in your organization. For example, we use your information and analyze your activities on the Catalant Platform to provide relevant search results, recommendations, activity feeds and notifications. We also use information about you to connect you with other members of your organization with whom you may want to collaborate.
To communicate with you about the Catalant Platform Services: We use your contact information to send transactional communications via email and within the Catalant Platform Services, including responding to your comments, questions and requests, providing customer support, and sending you technical notices, updates, security alerts, and administrative messages.
To market, promote and drive engagement with the Catalant Platform Services: We use your contact information and information about how you use the Catalant Platform Services to send you promotional messages, marketing, advertising, and other information that may be of interest to you based on your preferences (including information about Catalant or partner campaigns and services) and social media advertising through social media platforms (such as Facebook or Google). These communications are aimed at driving engagement and maximizing what you get out of the Catalant Platform Services, including information about new features, survey requests, newsletters, and events we think may be of interest to you. We also communicate with you about new product offers, promotions and contests.
Where we have a legal obligation or where we believe it is necessary to protect our legal rights, interests and the interests of others, we use information about you in connection with legal claims, compliance, regulatory, and audit functions, and disclosures in connection with the acquisition, merger or sale of a business.
We may also use information about you where you have given us consent to do so for a specific purpose. For example, we may publish testimonials or feature expert user profiles to promote the Catalant Platform Services, with your permission.
3. HOW WE SHARE INFORMATION WE COLLECT
With other users with accounts: To facilitate engagements and other interactions between users with accounts on the Catalant Platform Services, we may share information included in your profile or Project posting with other users with accounts. For example, when you as a Contractor bid on a Project, certain information about you is shared with the user posting the Project, including your first name, your location, your engagement history on the Catalant Platform Services, and other profile information. Ultimately, you choose how much detail you want to include in either your Project posting or your profile. We may also share on your profile or Project posting any reviews you have posted on the Catalant Platform Services, and any connections you have with other users in your organization, including the nature of those connections. We don’t share your billing or payment information with other users.
With Service Providers: Catalant uses a variety of third party service providers to help us provide services related to the Catalant Platform Services. Catalant may employ third-party companies and individuals to perform aspects of the Catalant Platform Services on our behalf, specifically with respect to system infrastructure, data storage, customer database management, email marketing, marketing analytics, platform activity monitoring, online chat, and payment processing. These providers have limited access to your information to provide services on our behalf, and are contractually bound to protect and to use it only for the purposes for which it was disclosed and consistent with this Privacy Policy.
With Prospective users: We may display parts of the Catalant Platform Services in promotional and marketing activities. If your profile is visible on the Catalant Platform Services, parts of your public profile page, such as your first name, your biographic description, and geographic location, may be shared with prospective users in our marketing materials. You may opt-out of this feature by changing your profile visibility in your account settings.
In the context of managed accounts: If you register or access the Catalant Platform Services using an email address with a domain that is owned by your employer or organization, and such organization wishes to establish an account or site, certain information about you including your profile information, profile picture, content, and use of your account may become accessible to that organization’s administrator and other Catalant Platform Services users sharing the same domain.
In Compliance with Law, Responding to Legal Requests, Preventing Harm and Protection of our Rights: Catalant may disclose your information, including personal information, to courts, law enforcement or governmental authorities, or authorized third parties, if and to the extent we are required or permitted to do so by law or if such disclosure is reasonably necessary: (i) comply with our legal obligations, (ii) to comply with legal process and to respond to claims asserted against Catalant, (iii) to respond to verified requests relating to a criminal investigation or alleged or suspected illegal activity or any other activity that may expose us, you, or any other of our users to legal liability, (iv) to enforce and administer our Terms of Service, or (v) to protect the rights, property or personal safety of Catalant, its employees, its users, or members of the public. Where appropriate, we may notify users about legal requests unless: (i) providing notice is prohibited by the legal process itself, by court order we receive, or by applicable law, or (ii) we believe that providing notice would be futile, ineffective, create a risk of injury or bodily harm to an individual or group, or create or increase a risk of fraud upon Catalant’s property, its users and the Catalant Platform Services.
With Your Consent: Where you have provided consent, we share your information, including personal information, as described at the time of consent.
4. HOW WE SECURE INFORMATION
We are continuously implementing and updating administrative, technical, and physical security measures to help protect your information against unauthorized access, loss, destruction, or alteration. Although we take appropriate measures to safeguard against unauthorized disclosures of information, we cannot guarantee that information that we collect will never be disclosed in a manner that is inconsistent with this Privacy Policy. When you use the Catalant Platform to share information, that information will be made available to the users with whom you agree to share such information. These users, and not Catalant, will be responsible for the privacy and security of your information in accordance with the terms of any arrangement, including, without limitation, any non-disclosure agreement entered into with these other users.
5. YOUR RIGHTS TO YOUR PERSONAL INFORMATION
Accessing, updating and correcting your information: You may access and update some of your information through your settings on the Catalant Platform. You may review, update, correct or delete the information in your profile by making edits via the Catalant Platform Services. You have the right to ask correct inaccurate or incomplete personal information concerning you (and which you cannot update yourself within your Catalant account) by emailing privacy@gocatalant.com. You may also email privacy@gocatalant.com to receive a copy of all your personal information controlled by Catalant.
Deleting your information: We retain your personal information for as long as your Catalant Platform Services account is in existence, or for other essential purposes such as complying with our legal obligations, resolving disputes, and enforcing our policies. If you no longer want us to use your information to provide the Catalant Platform to you, you can request that we erase your personal information by emailing privacy@gocatalant.com. Please note that if you request the erasure of your personal information:
- We may retain some of your personal information as necessary for our legitimate business interests, such as fraud detection and prevention and enhancing safety.
- We may retain and use your personal information to the extent necessary to comply with our legal obligations.
- Some of your information and the content you have provided will remain in order to allow other users to make full use of the Catalant Platform Services. For example, we continue to display messages you sent to the users that received them and continue to display content you provided.
- Because we maintain the Catalant Platform to protect from accidental or malicious loss and destruction, residual copies of your personal information may not be removed from our backup systems for a limited period of time.
Objecting to processing/requesting that we stop using your information: Where you have provided your consent to the processing of your personal information by Catalant, you may withdraw your consent at any time by emailing privacy@gocatalant.com specifying which consent you are withdrawing. In addition, you can object to our processing of your personal information based on our legitimate interests and we will no longer process your personal data unless we can demonstrate an overriding legitimate ground, where there are overriding public interest reasons, or where we are required by law to retain your personal information.
Opting out of communications: When you register for Catalant Platform Services, you agree to receive Catalant emails, newsletters, marketing and/or promotional materials. If you decide at any time that you no longer wish to receive such communications from us, you can opt-out by emailing us at privacy@gocatalant.com or by clicking on the unsubscribe link included at the bottom of Catalant emails.
Sending “Do Not Track” Signals: Some browsers have incorporated “Do Not Track” (DNT) features that can send a signal to the websites you visit indicating you do not wish to be tracked. Because there is not yet a common understanding of how to interpret the DNT signal, the Catalant Platform Services do not currently respond to browser DNT signals. You can use the range of other tools we provide to control data collection and use.
6. HOW WE TRANSFER INFORMATION INTERNATIONALLY
We collect information globally and store that information in the United States. Whenever we transfer your information outside of your country of residence, we take steps to protect it. Specifically, some of the third parties described in this privacy policy, which provide services to us under contract, are based in other countries that may not have equivalent privacy and data protection laws to the country in which you reside. When we share information of customers in the European Economic Area or Switzerland, we make use of European Commission-approved standard contractual data protection clauses.
7. OTHER IMPORTANT PRIVACY INFORMATION
Complaints: In the event that you wish to make a complaint about how we process your personal data, please contact us in the first instance at privacy@gocatalant.com and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to launch a claim with the data protection supervisory authority in the EU country in which you live or work where you think we have infringed data protection laws.
Links to Other Sites: The Site and Services may contain links to third-party websites and services. However, we are not responsible for the privacy practices employed by those web sites or services, nor are we responsible for the information or content they contain. This Privacy Policy applies solely to information collected by us through the Site and Services; thus when you use a link to go from the Site or Services to a third-party web site or service, this policy is no longer in effect and the privacy policy of such third-party site or service will govern.
No PHI: While Catalant takes security and privacy very seriously, Catalant is not a HIPAA Business Associate and the Catalant Platform Services are not HIPAA-compliant and should not be used to store any protected health information (“PHI”). You agree that you will not upload or store any documents containing PHI on the Catalant Platform Services. To do so would be a violation of our Terms of Service including this Privacy Policy.
Children: The Catalant Platform Services are not directed to persons under 18 and Catalant does not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian who becomes aware that your child has provided Catalant with Personal Information without your consent, please contact us at privacy@gocatalant.com. If Catalant becomes aware that a child under 13 has provided Catalant with Personal Information, Catalant will use commercially reasonable efforts to delete such information from our files.
California Privacy Rights: California law permits users who are California residents to request and obtain from us once a year, free of charge, a list of the third parties to whom we have disclosed their personal information (if any) for their direct marketing purposes in the prior calendar year, as well as the type of personal information disclosed to those third parties. See the “Contact Us” section for where to send such requests. Catalant does not share personal information with third parties for their own direct marketing purposes without your prior consent. Accordingly, you can prevent disclosure of your personal information to third parties for their direct marketing purposes by withholding consent
Changes to this Privacy Policy: Catalant reserves the right to change this Privacy Policy at any time. We will notify you about and provide you with choice about material changes to this Privacy Policy via a notice on gocatalant.com or by sending you an email to the address you have registered with us. Non-material changes or clarifications will take effect immediately upon posting of the updated policy on our Site. You should periodically check this page for updates. Your use of the Site or the Services after such effective date will constitute acceptance by you of such changes.
Contact Us: If you have any questions about this Privacy Policy, please contact us by email at privacy@gocatalant.com or at:
Legal Department
Catalant Technologies, Inc.
25 Thomson Place, 3rd Floor
Boston, MA 02210