Privacy Policy

Last Updated

16 December 2025

1. Who We Are

Katalis Health is a trading name of Behavioural Health Pty Ltd (together, “Katalis”, “we”, “us”, or “our”), which is the entity responsible for the processing of personal information described in this Privacy Policy. Katalis operates and maintains a website located at https://www.katalis.health (the “Site”).

Katalis may also provide digital wellbeing education and training resources, including self-guided learning content, workshops, and AI-enabled informational support experiences (together with the Site, the “Services”).

This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you:

• Visit or interact with our Site
• Contact us or subscribe to communications
• Use any Katalis AI-enabled features (if available)
• Use optional wellness trackers (if available)
• Interact with us on social media

In this Privacy Policy, “personal information” means information that identifies you or could reasonably identify you, and includes sensitive information/special category data where applicable.

2. Scope and Important Notes

2.1 Not medical or emergency services

Katalis Services are informational and educational in nature and are not emergency services. If you need urgent help, contact local emergency services.

2.2 Third-party sites

Our Services may link to third-party websites or services. Their privacy practices are governed by their own policies.

2.3 Employer-sponsored access (if applicable)

If you access Katalis Services through an employer, insurer, university, or other sponsoring organisation, some information may be processed on behalf of that organisation (for example, eligibility verification). Where we process personal information as a service provider/processor for a sponsoring organisation, we do so under our agreements with that organisation.

3. Personal Information We Collect

3.1 Information you provide to us

We may collect personal information you choose to provide, including:

• Contact information (e.g., name, email address, phone number, organisation)
• Enquiry and support information (e.g., messages you send us)
• Marketing preferences (e.g., whether you opt in/out of communications)
• AI feature inputs (if available) (e.g., text you submit to an AI chat experience)

3.2 Optional wellness trackers (opt-in)

If we offer optional wellness trackers and you choose to use them, we may collect information you submit into those trackers. Depending on what you choose to record, this may include health-related or wellbeing information.

Where required by law, we collect and process health-related information only with your consent.

3.3 Information collected automatically

When you use the Site, we may automatically collect:

• Device and technical data (e.g., IP address, browser type, device identifiers, operating system)
• Usage data (e.g., pages viewed, time spent, referring URLs)
• Cookie and similar technology data (see Section 10)

3.4 Information from other sources

We may receive personal information from:

• Social media platforms when you interact with our pages (subject to the platform’s policies)
• Service providers supporting analytics, security, or communications

4. How We Use Personal Information

We use personal information for the following purposes:

• To provide the Services (operate the Site, respond to requests, deliver content)
• To communicate with you (support, administrative messages, updates)
• To improve, monitor, personalise, and protect the Services (troubleshooting, security, fraud prevention)
• To support optional wellness trackers (store and display your tracker inputs; help you monitor progress)
• For research and development (including creating aggregated or de-identified insights)
• For marketing (where permitted by law and consistent with your preferences)
• For compliance and protection (legal obligations, enforcing rights, responding to lawful requests)

5. Legal Bases for Processing (Where Applicable)

Depending on your location and the nature of your interactions with us, we process personal information on one or more of the following bases:

• Consent (e.g., optional cookies; wellness tracker health-related information; certain marketing)
• Contract (e.g., providing Services you request)
• Legitimate interests (e.g., securing and improving the Services, responding to enquiries)
• Legal obligation (e.g., compliance with applicable laws)

6. How We Disclose Personal Information

We may disclose personal information to:

• Service providers that help us operate the Services (hosting, IT, analytics, communications, customer support)
• Professional advisors (lawyers, auditors, insurers) where necessary
• Authorities and others where we believe in good faith disclosure is necessary to comply with law or protect rights, safety, and security
• Business transferees in connection with a merger, acquisition, restructuring, or sale of assets

We do not sell personal information.

6.1 Aggregated and de-identified information

We may create and use aggregated or de-identified information for analytics, improvement, and reporting. We take steps designed to reduce the risk of re-identification.

7. AI and Automated Features (If Available)

If Katalis offers AI-enabled features (for example, an informational chatbot), we may process the content you submit to provide the feature, improve safety, and maintain quality.

We use third-party providers to support these features and require them to use your information only to provide services to us and to apply appropriate safeguards.

Katalis AI features are intended for general information and education and are not a substitute for professional advice.

8. Your Privacy Rights

Depending on your location, you may have rights to:

• Request access to personal information we hold about you
• Request correction of inaccurate information
• Request deletion (subject to legal and operational limits)
• Withdraw consent where processing is based on consent
• Request restriction or object to certain processing (where applicable)
• Request portability (where applicable)

To exercise your rights, contact us using the details in Section 13. We may need to verify your identity.

9. Retention

We retain personal information only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

10. Cookies, Analytics, and Advertising Technologies

We use cookies and similar technologies to operate the Site and, where enabled, to understand usage, measure marketing effectiveness, and improve performance.

10.1 Technologies we use

We may use:

Google Analytics to understand how visitors use our Site (e.g., pages viewed, time on page, referrers).

Meta Pixel to measure the effectiveness of advertising and understand actions taken on our Site after viewing or interacting with ads.

These tools may set cookies or use similar technologies and may collect or receive information such as your IP address, device identifiers, browser information, and events/actions on the Site.

10.2 What we track (typical events)

Depending on how the Site is configured, we may collect or receive information about:

• Page and content engagement (e.g., page views, scroll depth, time on page, outbound link clicks)
• Traffic source and campaign data (e.g., referrer URLs, UTM parameters)
• Form interactions (e.g., newsletter sign-ups, contact form submissions)
• Conversions (e.g., course or workshop enquiry, registration, or purchase events, where applicable)
• Basic technical context (e.g., browser type, device type, approximate location derived from IP address)

We use this information to understand what content is useful, improve the Site experience, and measure the effectiveness of marketing.

10.3 Cookie categories

• Essential cookies: required for basic functionality
• Functional cookies: remember preferences
• Analytics cookies: help us understand Site performance (including Google Analytics)
• Advertising cookies: used for interest-based advertising and measurement (including Meta Pixel)

10.4 Your choices

Where required by law, we will set non-essential cookies (including analytics and advertising cookies) only with your consent. You can change your preferences at any time via our cookie banner or consent tool (if available).

You can also control cookies through your browser settings. If you block cookies, some parts of the Site may not function properly.

11. International Transfers

Katalis is based in Australia and may store and process personal information in Australia and other countries where our service providers operate.

Where personal information is transferred internationally, we implement safeguards designed to protect it, which may include:

• Contractual protections with service providers (including standard contractual clauses or equivalent mechanisms where applicable)
• Encryption in transit and at rest
• 2 Factor Authentication and Password protection.
• Access controls and security monitoring

12. Security

We use reasonable organisational, technical, and administrative measures designed to protect personal information. However, no system can be guaranteed to be 100% secure.

13. How to Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us via the contact details published on https://www.katalis.health.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Site and update the “Last Updated” date above.