Privacy Policy

1. Introduction

Your privacy protection is important to NovaCore Solutions Ltd and its affiliates, trading as CatRouting (hereinafter, "CatRouting", "we" or respectively "us" / "our").

This Data Privacy Notice ("Privacy Notice") applies where CatRouting acts as a data controller, i.e. determines the purpose and means of processing of personal data of the visitors of our website catrouting.com. This Privacy Notice explains how we use your personal and personally identifiable information — such as your name, telephone number, address, e-mail address and/or your IP address ("Personal Data") — that we collect when you visit and browse the CatRouting website.

We will respect and protect your privacy as set out in this Privacy Notice.

This Privacy Notice may be amended from time to time to reflect changes in our information handling practices. It is recommended to review the CatRouting Privacy Notice on a regular basis and whenever you intend to provide personal data to us.

This Privacy Notice does not apply to services we provide or procure under separate contractual agreements with our business partners. As a B2B platform, CatRouting processes end-user message data solely as a data processor on behalf of our business clients, who remain the data controller with respect to their end users.

2. What Personal Data Do We Collect?

When you visit and use our website or platform, CatRouting may collect and process the following types of Personal Data:

• Your personal identification information (name, phone number and email);
• Company name, job title, and business contact details;
• Your consent (to process Personal Data / use cookies / receive newsletters, etc.);
• Your IP address, browser type, device information, operating system, and other technical data;
• Billing and payment information when you purchase credits or services;
• API usage data, including request logs, delivery reports, and platform activity;
• Other information you voluntarily provide to CatRouting in any enquiry you submit to us.

We do not intentionally collect Personal Data from individuals under 18 years of age. Our Services are designed for business use only.

3. How Do We Use Your Personal Data?

CatRouting collects, processes, uses, stores, discloses, transfers or otherwise makes available ("Processing", "Process" or "Processed") your Personal Data as legally permitted under the EU General Data Protection Regulation (EU) 2016/679 ("GDPR"), the UK Data Protection Act 2018, and other applicable data privacy laws.

Any Personal Data, whether sensitive or not, is Processed confidentially and under the terms stipulated below.

4. Purposes of Processing

There is always a legal ground or a permitted legitimate reason why we Process your Personal Data, such as:

• To enable you to access and use our website, API, and messaging services;
• To process transactions, send invoices, and manage your account;
• To evaluate and improve the performance and design of this website and CatRouting services;
• To send business communications including service updates, platform maintenance notifications, and security alerts;
• To tailor marketing activities to your needs as a visitor (with your consent where required);
• To track marketing campaign results and responses;
• To establish, exercise or defend legal claims, and/or to protect and assert our and your legal rights;
• To verify visitor's compliance with this Privacy Notice and our Terms of Service;
• To enhance security, prevent fraud, abuse, spam, and other inappropriate conduct;
• To comply with applicable laws, regulations, and lawful requests from public authorities.

In all cases above CatRouting will limit the Processing of Personal Data to the extent required to fulfil the specific purpose. Your respective Personal Data will be held in our secure database or stored on the servers of our hosting service providers and will be kept for no longer than necessary and/or required by applicable laws.

5. Legal Basis of Processing

With your use of this website we may Process your Personal Data based on the following legal grounds:

• Your consent — when you subscribe to the CatRouting newsletter, manage your cookie preference, create an account, or in every other case where you provide us with your clear and specific consent;
• Performance of a contract — when Processing is necessary for the performance of a contract to which you are party, such as providing our messaging services;
• Our legal obligation — when we are legally required to Process Personal Data (e.g., for tax, anti-money-laundering, or regulatory compliance);
• Our legitimate interest — when you visit our website (in order to tailor it to the visitors' needs and preferences), prevent fraud, ensure network security, and improve our services.

6. Data Retention

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account data — retained for the duration of your active account, plus 12 months after account closure;
• Contact form submissions — retained for up to 24 months unless you request earlier deletion;
• Transaction and billing records — retained for 7 years to comply with tax and financial regulations;
• API logs and delivery reports — retained for 90 days for troubleshooting and analytics, then anonymised or deleted;
• Cookie and analytics data — retained for up to 13 months from the date of collection;
• Marketing communications data — retained until you withdraw consent or unsubscribe.

After the applicable retention period expires, Personal Data is securely deleted or irreversibly anonymised.

7. Your Data Protection Rights

Under the GDPR and applicable data protection laws, you have the following rights with respect to your Personal Data:

• Right to access — you may ask us to provide you with a copy of your Personal Data held by us, in general free of charge, in an electronic format;
• Right to rectification — you may ask us to correct, update and/or otherwise amend your inaccurate or incomplete Personal Data held by us;
• Right to object — you may object to the Processing of your Personal Data, in particular where we rely on legitimate interest;
• Right to restrict Processing — you may restrict the Processing of your Personal Data;
• Right to erasure ("Right to be Forgotten") — you may ask us to delete all your Personal Data we hold, subject to applicable legal obligations;
• Right to data portability — you may ask us to transfer your Personal Data to you or to a third party designated by you, in a structured, commonly used, machine-readable format;
• Right to withdraw your consent — you may withdraw your consent to Processing of your Personal Data at any time, whenever the Processing is undertaken based on such consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal;
• Right not to be subject to automated decision-making — you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you;
• Right to file a complaint — you may file a complaint to a competent supervisory authority regarding the Processing of your Personal Data.

We will respond to all data subject requests within 30 days. In order to exercise any of the said rights in relation to your Personal Data, please address your respective request to [email protected]. We may request proof of identity before processing your request.

8. Business Communications

As a B2B platform, we may send you communications that are essential to the operation of your account and our services, including:

• Service-related notifications (platform updates, API changes, maintenance windows);
• Security alerts and account-related communications;
• Billing notifications and payment confirmations;
• Compliance and regulatory updates relevant to your use of our services.

These operational communications are sent based on the contractual necessity of providing our services and are not considered marketing communications. You cannot opt out of essential service communications while maintaining an active account.

Marketing and promotional communications are only sent with your explicit consent and always include an unsubscribe mechanism.

9. Personal Data Sharing with Third Parties

To the extent reasonably necessary, we may disclose your Personal Data with:

• Our affiliates/employees who support this website or otherwise are required to Process your Personal Data for the purpose of CatRouting business operations;
• Third-party service providers who provide hosting, payment processing, analytics, and/or additional support services, under appropriate data processing agreements;
• Telecom carriers and operators to the extent necessary to deliver SMS messages you send through our platform;
• Law enforcement bodies, state agencies, courts or similar if required to be disclosed for compliance with a legal obligation to which we are subject, to protect your or third party's vital interests, or to exercise or defend our legal claims;
• Other third parties, upon your prior written consent/instruction or on the basis of our legitimate interest.

We do not sell your Personal Data to third parties. All third-party service providers are bound by contractual obligations to protect your data in accordance with applicable data protection laws.

10. International Transfer of Personal Data

Your Personal Data may be transferred to and processed in countries outside of your jurisdiction, including the European Union, the United States, and the Republic of Seychelles, where our company is registered and our servers and service providers are located. To that regard, appropriate safeguards such as Standard Contractual Clauses (SCCs) or other approved transfer mechanisms will be put in place to ensure an adequate level of data protection in accordance with Article 46 of the GDPR.

11. Cookies and Tracking Technologies

CatRouting uses cookies and similar tracking technologies to enhance your browsing experience, analyse site traffic, and understand where our visitors come from. When you first visit our website, we display a cookie consent banner allowing you to accept or decline non-essential cookies.

Essential cookies are always active and are necessary for the website to function properly (e.g., session management, security). These do not require your consent.

Analytics cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. These are only activated with your consent.

Marketing cookies may be used to deliver personalised advertisements and measure campaign performance. These are only activated with your consent.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting our website. You can also manage cookie settings through your browser settings. Declining non-essential cookies will not affect the core functionality of our website.

12. Marketing

If you subscribe to the CatRouting newsletter, CatRouting collects and stores Personal Data shared by you in the online request form according to this Privacy Notice.

If you no longer wish to receive newsletters, please click the "Unsubscribe" button in the newsletter you have received from CatRouting, and your Personal Data will be automatically deleted from our mailing list.

We will not send marketing communications to contacts obtained through our messaging API — such contacts are governed by your own privacy policies as the data controller.

13. Contact Form Data

When you submit a contact form or request a demo through our website, we collect the following information:

• Your full name;
• Work email address;
• Phone number (if provided);
• Company name (if provided);
• Use case and message content.

This data is used solely to respond to your inquiry, provide requested information about our Services, and follow up on potential business opportunities. We retain contact form submissions for up to 24 months unless you request earlier deletion.

By submitting the contact form, you consent to the processing of your Personal Data as described in this Privacy Notice and agree to our Terms of Service.

14. Data Security

We implement appropriate technical and organisational measures to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/SSL), access controls, regular security assessments, and secure data storage practices.

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee its absolute security.

15. Privacy Policies of Other Websites

The CatRouting website may contain links to other websites. Our Privacy Notice applies only to our website, so if you click on a link to another website, you should read their privacy policy.

16. How to Contact Us

If you have any questions or concerns regarding our Privacy Notice, wish to exercise your data protection rights, or have any feedback or suggestions, please do not hesitate to contact us:

NovaCore Solutions Ltd
IBC No. 250168
Suite 9, Ansuya Estate, Royal Street,
Victoria, Mahe, Seychelles
Email: [email protected]

We aim to respond to all privacy-related inquiries within 30 days of receipt.