How we handle your data

Catalyst Performance (UEN 202522204H, 8 Cross Street, #05-03 Manulife Tower, Singapore 048424, Singapore) operates catalystperformance.sg and related booking, assessment, coaching, and messaging tools. This policy explains what personal data we collect, why, and how we protect it, in line with Singapore’s Personal Data Protection Act 2012 (PDPA).

Questions about this policy or your data go to support@catalystperformance.sg.

Depending on how you use the site, we collect:

• Contact and enquiry details you give us directly: name, email, phone number, and any message content, when you book a consultation, take the Healthspan Audit, submit a contact or corporate enquiry form, or email us.
• Assessment and training data collected as part of the Catalyst Healthspan Assessment or ongoing coaching, used to build your programme and track progress.
• Booking data when you schedule a consultation through our booking calendar (NeetoCal), including your name, email, and the appointment time.
• Payment data for online coaching and digital products, handled directly by our payment processors; we do not store full card numbers on our own servers.
• Messages you send us on WhatsApp, Instagram, or through any other channel you use to reach us, including the message content and the account name or number you send it from, so we can answer you and keep a record of the conversation.
• Reviews, testimonials, and photos you choose to give us, which we may publish in our marketing as described in our Terms of Service.
• Information from other sources, such as our advertising and analytics platforms, referral partners, corporate clients who enrol their staff, and publicly available business sources, which we may combine with what we already hold about you.
• Information we infer from all of the above, such as which services are likely to suit you and how engaged you are with our emails and site, used to make what we send you more relevant.
• Usage and device data collected automatically through cookies and similar technologies while you browse the site, described in Cookies and analytics below.

We use personal data to:

• Respond to enquiries and book consultations and assessments.
• Deliver and personalise coaching, programming, and the Healthspan Assessment.
• Process payments for online coaching and digital products.
• Send transactional email (booking confirmations, assessment results, programme updates) and, where you have not opted out, occasional email about our services.
• Measure and improve the site, our services, and our content, including through analytics, heatmaps, session recordings, and testing.
• Run, target, and measure our advertising. This includes sharing hashed contact details with advertising platforms so they can match, suppress, or build similar audiences, and measure which campaigns lead to enquiries.
• Produce aggregated and de-identified statistics and research about healthspan and fitness in Singapore, which we may publish or share. Nobody is identifiable in that output.
• Develop new services, tools, and content, and train and improve the automated systems we use to answer enquiries and support coaching.
• Detect and prevent fraud, abuse, and misuse of our services.
• Meet our legal, tax, accounting, and regulatory obligations.

We rely on the consent you give when you send us your details, and on the deemed consent and legitimate interests provisions of the PDPA, which allow us to use personal data for purposes a reasonable person would expect and that do not cause you adverse effect. Giving us your details in order to enquire, book, or buy is taken as consent to be contacted about that enquiry, booking, or purchase, and about closely related services.

Marketing email carries an unsubscribe link in every message, and you can stop marketing at any time by using it or by emailing support@catalystperformance.sg. Withdrawing consent does not stop the transactional messages we need to send to run a booking, a payment, or your programme, and it does not affect anything we did before you withdrew it.

catalystperformance.sg uses a small number of tracking technologies to understand how the site is used and to measure advertising:

• Google Analytics (GA4) and Google Tag Manager, for site traffic and conversion measurement.
• Meta (Facebook/Instagram) Pixel and Conversions API, to measure the effectiveness of our advertising. Where possible this is done with hashed, not raw, contact data.
• Microsoft Clarity, for anonymised heatmaps and session recordings that help us improve page layout and usability.
• Vercel Web Analytics, a cookieless, first-party page-view count.

Under Singapore’s PDPA, we rely on deemed consent for standard analytics and advertising cookies, and give you a way to decline non-essential cookies via the consent notice shown on your first visit. You can also control cookies through your browser settings at any time.

We share personal data only where necessary, with:

• Service providers who help us run the business: our booking platform (NeetoCal), email delivery (Resend), payment processing, website hosting (Vercel) and content management (Sanity), and the AI provider that drafts our automated WhatsApp replies (DeepSeek, through the Vercel AI Gateway).
• Advertising platforms (Google, Meta) for measuring and improving our advertising, using hashed contact data where technically possible.
• Regulators or authorities, where required by law.

We do not sell personal data.

Under the PDPA, you can ask us to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Withdraw consent to our collection, use, or disclosure of your personal data, subject to legal or contractual restrictions.
• Delete your personal data, subject to our legal retention obligations.

To exercise any of these, email support@catalystperformance.sg. We will respond within a reasonable time.

We keep personal data for as long as we need it for the purposes described above, including for the life of your relationship with us and afterwards for our legitimate business, legal, tax, and accounting purposes, then delete or anonymise it. Aggregated and de-identified data, which cannot be traced back to you, may be kept and used indefinitely. We use industry-standard technical and organisational measures, including encrypted connections and access controls with our service providers, to protect personal data against unauthorised access, loss, or misuse.

Catalyst Healthspan Lexicon is a free Chrome extension that explains healthspan vocabulary in a side panel. It is a glossary, not a medical tool, and it collects no personal data at all.

• No page reading. The extension requests no host permissions and injects no scripts into the pages you visit. It cannot see your browsing history, your tabs, or the content of any site.
• Selected text stays on your device. When you highlight a word and choose “Define with Catalyst Lexicon”, Chrome passes that selection to the side panel, which looks it up in a glossary file bundled with the extension. Nothing is sent to us or to any third party.
• Local storage only. Saved terms and your two preferences live in Chrome’s local extension storage on your own machine. There is no account, no sign-in, and no analytics SDK inside the extension.
• Links out. Following a link from the extension opens catalystperformance.sg in a normal tab, where this policy’s Cookies and analytics section applies as it would for any other visit. The links carry a campaign tag so we can see how many visits came from the extension, which identifies the extension, not you.
• No data sold or shared. Because the extension collects nothing, there is nothing to sell, share, or transfer.

Questions about the extension go to support@catalystperformance.sg.

If you message our studio WhatsApp number, we handle that conversation in our own system as well as in the WhatsApp Business app our team uses. You may receive an automated first reply. A member of the team can take over the conversation at any point, and always does for anything clinical or sensitive.

• What we hold. Your WhatsApp number, the display name WhatsApp shows us, the messages exchanged, delivery status, timestamps, and a category we assign to the enquiry so we can route it. We also keep notes and tags our team adds to the conversation.
• How long. Message content is cleared after 12 months. The conversation record itself, meaning who contacted us and when, is kept so we can recognise you if you write again and understand how our enquiries flow.
• Automated replies. To draft an automated reply we send the message to our AI provider, DeepSeek, through the Vercel AI Gateway. The model answers only from a fixed set of information about Catalyst. It is not given your records, and it never gives medical advice.
• Meta processes the message too. WhatsApp is operated by Meta and your messages pass through the WhatsApp Business Platform, under Meta’s own privacy terms, before they reach us.
• Where the conversation came from. If you reached WhatsApp by tapping a link on our site or in an advertisement, we may connect that click to your conversation and to any consultation you go on to book, and report that booking back to the advertising platform as described in Cookies and analytics.
• Stopping the automated replies. Reply STOP at any time and the automated replies end. A person can still answer you. To ask us to delete what we hold, use the Your rights section.

We may update this policy from time to time. The date at the top of this page shows when it was last revised. Material changes will be reflected here.