Privacy notice

This notice explains how Catchment Limited collects and uses personal information when you visit picsy.uk, use the PICSy application, contact us, or use a service that connects to PICSy.

Who we are

Catchment Limited is the controller of the personal information described in this notice. We are registered in England and Wales under company number 17033012. Our registered office is Unit 1 Gate Farm High Street, Sutton Benger, Chippenham, Wiltshire, United Kingdom, SN15 4RE.

You can contact us through the Catchment contact form or by writing to our registered office.

Information we collect

Depending on how you use PICSy, we may collect:

• Your name, email address, employer, job title and organisation membership.
• Account, sign-in and subscription information.
• Messages, enquiries, support requests and email sign-ups you send to us.
• Information you save, upload or create in PICSy, such as sites, portfolios, reports, documents and analysis settings.
• Technical and usage information, including IP address, browser, device, pages viewed, request times, security logs and cookie or advertising identifiers.
• Information supplied by your employer or organisation administrator when they invite you to or manage your access to PICSy.

Stripe processes payment card details when you buy a subscription. Catchment does not receive or store your full card number.

How we use your information

We use personal information to:

• Provide, administer and secure PICSy and its connected services.
• Manage accounts, organisation access, subscriptions and billing.
• Respond to enquiries, support requests and expressions of interest.
• Monitor reliability, investigate misuse and improve the service.
• Meet our legal, regulatory, tax and accounting obligations.
• Measure advertising and, where permitted, send information about our services.

Our lawful bases

We process personal information under one or more of these lawful bases:

• Contract. We need the information to provide PICSy or to take steps before entering into a contract with you.
• Legitimate interests. We need the information to operate, secure and improve our business and services, respond to enquiries, and communicate with business customers. We consider the effect on your rights before relying on this basis.
• Legal obligation. We need the information to comply with a law that applies to us.
• Consent. We rely on consent where the law requires it, including for non-essential advertising technologies. You may withdraw consent at any time.

Cookies and similar technologies

PICSy uses essential technologies for functions such as sign-in, security and account sessions. The marketing site also uses Google Ads technology to measure advertising. Google may place or read cookies and receive information about your device and use of the site. Where consent is required, we rely on consent for these non-essential technologies.

Who we share information with

We share personal information only where needed with:

• Amazon Web Services for hosting, storage and email delivery.
• WorkOS for identity, authentication and organisation management.
• Stripe for subscription billing and payment processing.
• Google and Mapbox for mapping, fonts and advertising services.
• Microsoft and other integration providers when you choose to connect PICSy to their products.
• OpenAI, Browserbase and other AI or document-processing providers when a PICSy feature you use requires those services.
• Professional advisers, auditors, insurers, regulators and law-enforcement bodies where necessary.
• A buyer or successor if Catchment or its business is reorganised, sold or transferred.

Service providers may use personal information only to provide services to us and must protect it under their contracts and applicable law.

International transfers

Some service providers process information outside the United Kingdom. Where the destination is not covered by UK adequacy regulations, we use an approved safeguard such as the UK International Data Transfer Agreement or the UK Addendum to the EU standard contractual clauses, unless another lawful exception applies.

How long we keep information

We keep personal information only for as long as needed for the purpose for which we collected it. We consider the duration of your account or contract, the time needed to answer an enquiry, security and audit needs, legal limitation periods, and tax, accounting or regulatory requirements. We delete or anonymise information when it is no longer needed, unless the law requires us to keep it.

Security

We use technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction. No internet service can guarantee absolute security.

Your rights

Depending on the circumstances, you may have the right to:

• Ask for a copy of your personal information.
• Ask us to correct inaccurate or incomplete information.
• Ask us to delete or restrict the use of your information.
• Object to processing based on legitimate interests or for direct marketing.
• Receive certain information in a portable format.
• Withdraw consent without affecting processing that took place before withdrawal.

These rights are not absolute. To exercise one, contact us using the details above. We may ask for information to confirm your identity.

Automated decisions

We do not use personal information to make decisions about you based solely on automated processing that have legal or similarly significant effects.

Children

PICSy is a business service and is not intended for children. Please contact us if you believe a child has provided personal information to us.

Complaints

Please contact us first if you have a concern about our use of your information. You also have the right to complain to the Information Commissioner's Office, the United Kingdom's data protection regulator.

Changes to this notice

We may update this notice when our services or legal obligations change. We will publish the current version here and change the date at the top of the page.