Privacy policy

CatalogSmith collects only what it needs to answer your enquiry and clean your catalog: the contact details you submit, standard server logs, and (if enabled) cookieless analytics. We never sell data. Catalog files you send for a sample or a job are used solely for that job and deleted after delivery, and are never used to train any model.

Last updated: 21 June 2026

Who we are (the data controller)

CatalogSmith is the data controller for the personal data described in this policy. CatalogSmith is a solo, done-for-you product-catalog data cleanup and pre-PIM data-readiness service. For any privacy question, request, or complaint, contact us at support@catalogsmith.com. This is the only address we use for privacy correspondence; we will respond from it directly.

What we collect, why, and our legal basis

We keep collection deliberately narrow. There are three categories of data, and nothing is gathered that does not serve one of the purposes below.

Contact-form details you give us

When you request a free 50-SKU sample, an audit, or a project, the lead form posts the fields you complete — typically your name, work email, company, and a short description of your catalog and goal. We use this to reply to you, scope the work, and deliver the result. The legal basis is taking steps at your request before entering a contract, and our legitimate interest in responding to genuine business enquiries.

The catalog file you send for a sample or a job

To produce a sample clean or a full cleanup we process the product data export you provide — usually an Excel or CSV file of SKUs, descriptions, attributes, and identifiers. If that file contains personal data (for example a buyer or supplier contact in a column), we process it only to perform the cleanup you asked for. The legal basis is performance of our contract with you. We act as a processor for this data and process it strictly on your instructions; see the deletion commitment below.

Server logs and optional analytics

Our hosting provider records standard web-server logs — your IP address, browser user-agent, the pages requested, and timestamps — which are needed to serve the site securely and diagnose problems. The legal basis is our legitimate interest in operating a secure, reliable website. If site analytics is enabled, we use a privacy-first, cookieless measurement that reports aggregate, non-identifying traffic patterns and sets no cookies; the legal basis is our legitimate interest in understanding which pages are useful.

How long we keep each type of data

• Contact-form enquiries: kept while we correspond and for a reasonable follow-up period afterward, then deleted if the enquiry does not become a project.
• Client catalog files and the deliverables we produce: deleted after delivery and the agreed acceptance window. We do not retain copies of your catalog data once a job is closed, unless you have engaged us for ongoing work and asked us to keep working files.
• Server logs: retained only for the short operational window our host keeps them for security and troubleshooting, then rotated out.
• Analytics: aggregate, non-identifying, and retained only as summary trends; it cannot be tied back to you.

Sub-processors

We keep our supply chain short. We rely on a small number of service providers to run the website and communicate with you. The providers below reflect our current setup; they are placeholders to be confirmed before this policy is treated as final, and we will update this list if they change.

• Hostinger — website hosting and server-log handling. (placeholder, to confirm)
• Cloudflare Web Analytics — optional cookieless, aggregate traffic measurement, used only if analytics is enabled. (placeholder, to confirm)
• Email provider — to send and receive correspondence at our hello@ address. (placeholder, to confirm)

We do not share your data with these providers for any purpose beyond running the service described here, and we do not give them permission to use your data for their own ends.

International data transfers

Depending on where these providers operate, your data may be processed in a country other than your own. Where data leaves your region, we rely on an appropriate safeguard recognised under applicable law — such as standard contractual clauses or an adequacy decision — so that your protections travel with your data. We will name the specific safeguards once the sub-processors above are confirmed.

We do not sell your data, and we do not train on it

We do not sell, rent, or trade personal data, and we do not share it for cross-context behavioural advertising. Your catalog data is confidential: it is used only to perform the job you hired us for, it is not pooled with other clients' data, it is never used to train any model, and it is deleted after delivery. Nothing in your file is repurposed, resold, or fed into anything outside your own engagement.

Your rights and how to exercise them

Subject to applicable law, you can ask us to confirm what personal data we hold about you, give you a copy, correct it, delete it, or restrict how we use it; you can object to processing based on legitimate interest, and where data protection law applies you can lodge a complaint with your supervisory authority. Because we do not sell or share personal data and do not use it for targeted advertising, those CCPA/CPRA rights are honoured by default, and we will never discriminate against you for exercising any right.

To make a request, email support@catalogsmith.com with enough detail to identify your enquiry or file. We may need to verify your identity before acting, and we aim to respond within the timeframe your local law requires.

Cookies and tracking

This site sets no marketing, advertising, or cross-site tracking cookies, and shows no consent banner because none is needed for that purpose. If analytics is enabled, it is cookieless and reports only aggregate, non-identifying traffic — it does not place a cookie on your device or build a profile of you. The only data that leaves your browser in normal use is the standard request information any web server receives.

Changes to this policy

If we change how we handle data — for example, when the sub-processors above are confirmed — we will revise this page and update the "Last updated" date. Material changes that affect you will be reflected here, so it is worth checking this page if our relationship is ongoing.

Contact

Questions about this policy, your data, or any request above can be sent to support@catalogsmith.com. You can also review our terms or start a free 50-SKU sample.