Privacy Policy

Privacy Notice

The Catalytic Site · Last updated: June 2026

This notice applies to thecatalyticsite.com and the Career Compass app.

1. Who we are

The Catalytic Site is operated by Cecilia Piergentili, PhD, as a sole trader. We are the data controller for personal data collected through this website and the Career Compass app.

Name: Cecilia Piergentili, PhD — The Catalytic Site

Email: cecilia@thecatalyticsite.com

Website: thecatalyticsite.com

Registered Address: 50 Rosebury Drive, Newcastle upon Tyne, NE12 8RG, UK 

2. What personal data we collect and why

2a. When you visit the website

• Technical data: IP address, browser type, device type, and pages visited. Collected via GoDaddy analytics and Google reCAPTCHA.

• Cookie data: see our Cookie Notice for full details.

Legal basis: Consent (analytics cookies) and Legitimate Interests (site security and operation).

2b. When you use the contact form

• Name, email address, and message content.

• Email address if you opt in to our mailing list and Substack newsletter. Your email will be shared with Substack, Inc. (USA) solely for the purpose of sending you the newsletter. You can unsubscribe at any time via the link in any newsletter email 

Legal basis: Legitimate Interests (to respond to your enquiry) and Consent (mailing list).

The contact form uses Google reCAPTCHA, which may process your IP address and browser data to verify you are human. This is subject to Google's Privacy Policy (policies.google.com/privacy).

2c. When you create a Career Compass account

• Email address, used to create and manage your account.

• Authentication data processed securely by Supabase (our database provider, hosted in the EU or USA).

• Payment data processed entirely by Stripe. We never see or store your card details.

Legal basis: Performance of a Contract (to provide the service you have purchased).

2d. When you use Career Compass tools

When you use the Career Navigator, Activity Translator, or Profile Brief tools, you may enter personal and professional information including your academic background, career history, and CV content. This information is:

• Sent in real time to our AI provider (Anthropic, Inc., USA) to generate your output. Anthropic is the sole AI provider used for any processing involving personal data.
• Not stored by Anthropic and not used to train any AI model, under our data processing agreement with Anthropic.
• Immediately discarded after your output is generated, unless you explicitly choose to save a result to your account.
• If saved: only the generated output is stored in our database — not the original document or raw input.

Legal basis: Performance of a Contract.

We do not use your personal data to train AI models. Your CV and career information is processed only to generate your output and is not retained thereafter. Other AI tools (such as Microsoft Copilot and ChatGPT) are used by us solely for internal tasks — such as research and drafting — that do not involve personal data belonging to identifiable individuals. 

2e. Coaching and consulting sessions

Information you share during sessions, including career goals, CV content, and professional background. Notes taken during sessions to provide continuity of service.

Where we use AI tools to assist in reviewing or optimising your CV or professional documents, your content is processed solely via the Anthropic API (Claude). No other AI platform is used for work involving personal data. This processing is subject to the same terms as Career Compass — Anthropic does not retain your data and does not use it for AI training.

Legal basis: Performance of a Contract.

3. How we share your data

We do not sell your personal data. We share it only with the following service providers who act as data processors on our behalf:

Anthropic, Inc. (AI processing): Processes content entered into Career Compass tools and content shared during coaching sessions to generate outputs. Anthropic is the sole AI provider used for any processing involving personal data. Based in the USA. A Data Processing Agreement including EU Standard Contractual Clauses and a UK GDPR Addendum is in place. Anthropic does not use your data for AI training. Privacy policy: anthropic.com/privacy.

Supabase (database and authentication): Stores your account data and any saved Career Compass results. SOC 2 compliant. Data may be hosted in the EU (Ireland) or USA under Standard Contractual Clauses. Privacy policy: supabase.com/privacy. 

Stripe (payments): Processes all payment transactions. PCI-DSS Level 1 certified. We never access your card details. Privacy policy: stripe.com/privacy.

GoDaddy (website hosting and analytics): Hosts this website and provides basic usage analytics. Privacy policy: godaddy.com/legal/agreements/privacy-policy.

Google (reCAPTCHA): Used on our contact form to prevent spam. Google may process your IP address and browser data. Privacy policy: policies.google.com/privacy.

Substack, Inc. (newsletter): If you opt in to our newsletter, your email address is shared with Substack solely to deliver the newsletter. Based in the USA, covered by Standard Contractual Clauses. You can unsubscribe at any time via any newsletter email. Privacy policy: substack.com/privacy.

Lovable (app development and hosting): Used to build and host the Career Compass application. As the platform hosting the app, Lovable may process personal data submitted by Career Compass users on our behalf. Based in the USA. A Data Processing Agreement is currently being established. Privacy policy: lovable.dev/privacy.

Thinkific (online courses): If you enrol in a course via our website, Thinkific acts as an independent data controller for that transaction. Privacy policy: thinkific.com/privacy-policy.

We may also disclose data to legal or regulatory authorities if required by law.

Note on other AI tools: We may use Microsoft Copilot and ChatGPT for internal purposes such as research, ideation, and drafting generic content. These tools are not used for any task involving personal data belonging to identifiable individuals and are therefore not data processors under this notice.

4. International data transfers

Some of our service providers are based outside the UK and EU, including Anthropic, Supabase, and Stripe (all USA). Where we transfer data internationally, we ensure appropriate safeguards are in place, specifically Standard Contractual Clauses approved by the European Commission and the UK ICO. You can request details by emailing us.

5. How long we keep your data

Account data: Retained for the duration of your account and deleted within 90 days of account closure upon request.

Saved Career Compass results: Retained until you delete them or close your account.

Payment records: Retained for 7 years from the date of transaction in line with HMRC financial record-keeping requirements.

Contact form messages: Retained for up to 2 years from receipt.

Mailing list: Until you unsubscribe. Every email includes an unsubscribe link.

AI-processed inputs (CV and career data): Not retained. Discarded immediately after output generation unless you explicitly save a result.

6. Your rights

Under UK GDPR and EU GDPR, you have the following rights. To exercise any of them, email cecilia@thecatalyticsite.com. We will respond within one month.

• Right of access: request a copy of the personal data we hold about you.

• Right to rectification: ask us to correct inaccurate or incomplete data.

• Right to erasure: ask us to delete your data where there is no legal reason to retain it.

• Right to restriction: ask us to limit how we use your data.

• Right to data portability: receive your data in a structured, machine-readable format.

• Right to object: object to processing based on legitimate interests or for direct marketing.

• Right to withdraw consent: withdraw consent at any time where processing is consent-based, without affecting any prior processing.

• Right not to be subject to solely automated decision-making with significant effects: we do not make such decisions.

If you are unhappy with how we handle your data, you can complain to the relevant supervisory authority:

• UK: Information Commissioner's Office (ICO) — ico.org.uk

• EU: Your national data protection authority — edpb.europa.eu/about-edpb/about-edpb/members

7. Cookies

We use cookies on this website. For full details of which cookies we use, why we use them, and how to manage your preferences, please see our Cookie Notice at thecatalyticsite.com/cookie-notice.

8. Children

Our services are not directed at anyone under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will delete it promptly.

9. Changes to this notice

We may update this notice periodically. The date at the top will always reflect the latest version. For significant changes we will notify registered users by email.

10. Contact us

Email: cecilia@thecatalyticsite.com

Contact form: thecatalyticsite.com/contact