Privacy notice
Last updated: 1 September 2026
Who we are
Global Talent Review is operated under the trading name The Catalysx from London, United Kingdom. The Catalysx is responsible for deciding how personal information is used for this service. Privacy questions and data requests can be sent to info@thecatalysx.co.uk.
Information we process
We process your name, account email, sign in information, payment and pass status, support correspondence, uploaded application documents and generated review results. If you create an email account, we also process a securely hashed form of your password and your active sign in sessions. Application documents may contain personal and employment information relating to you, referees and other people named in the documents.
Why we use information
We process account, application and review information because it is necessary to provide the service you purchase or request. We use essential security, service operation and fraud prevention information where this is necessary for our legitimate interests in protecting users and operating the service safely. We retain limited payment and transaction information where needed to comply with accounting, tax, dispute and other legal obligations. We do not sell personal information.
Confidential application documents
Uploaded documents are treated as confidential and stored in private object storage linked to your authenticated account. Server-side ownership checks protect access. You should upload only material needed for the review and remove unnecessary passport details, financial information, health information, criminal records, biometric information and other unrelated sensitive information. You must have permission to provide personal information about referees or other people.
Account security
Email account passwords are transformed using a unique salt and a strong password hashing process. Readable passwords are not stored. A secure session cookie keeps you signed in and is not available to page scripts. ChatGPT sign in and email sign in are separate account methods, even if the same email address is used.
AI review processing
Documents submitted for review are temporarily sent to OpenAI to generate the assessment you request. Temporary provider files are configured to expire after two hours, and the application also requests deletion after a review completes. Review requests are configured so the generated response is not stored with the model provider. The Catalysx does not use applicant documents to train a shared model.
Service providers and international transfers
We use service providers for hosting, private file storage, authentication, AI processing, support and payment processing. Stripe processes card payments, and we do not receive or store complete card details. Some providers may process information outside the United Kingdom. Where a restricted international transfer occurs, we rely on an applicable UK adequacy regulation, approved contractual safeguards or another lawful transfer mechanism.
Retention and deletion
Unless you delete them sooner, application files and saved reviews are retained during the pass and for up to 30 days after access expires, then deleted through our retention process. Basic inactive account records are retained for up to 12 months after the later of your last activity or pass expiry. Support correspondence is normally retained for 12 months after an issue closes. Essential security and operational logs are normally retained for up to 90 days, unless they are needed for an active security, abuse or legal investigation. Minimal payment and transaction records may be retained for up to six years where required for accounting, tax, chargeback, fraud prevention or legal obligations.
You can delete individual files or permanently delete your workspace profile, uploaded documents, saved reviews and email login credentials from the Account section at any time. Account deletion does not remove information that Stripe or another provider must independently retain under its own legal obligations.
Your data rights
Depending on the circumstances, you may have the right to ask for access to your personal information, correction, deletion, restriction, objection or data portability. You can make a request by emailing info@thecatalysx.co.uk. We may need to verify your identity before responding. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.
Cookies and changes
The service uses essential session and authentication cookies needed to sign you in and protect your workspace. We do not currently use advertising cookies. If the service or its providers change materially, this notice will be updated and the date above will be revised.