Privacy Notice.

Catoxy Energy Ltd ("Catoxy", "we", "us") is the controller of the personal data collected through this website. This notice explains what we collect, why we collect it, who receives it, and the rights you have. It applies to catoxy-energy.com and its contact form.

1. Who we are

Catoxy Energy Ltd is a company registered in England & Wales under company number 16513847. Our registered office is 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ. For any privacy question, or to exercise your rights, you can reach us at privacy@catoxy-energy.com.

2. What this notice covers

This notice covers this website and its contact form. It does not cover our separate, access-controlled investor area, which carries its own notice.

3. What we collect, why, and our lawful basis

When you use the contact form, we process:

  • Your name — so we know who is contacting us and can reply appropriately.
  • Your email address — to reply to your enquiry (used as the reply-to address).
  • Your organisation (optional) — to route and understand your enquiry.
  • Your enquiry type (general, partner or investor, media, or careers) — to route your message to the right team.
  • Your message — to understand and respond to your enquiry.
  • Your IP address — used only, and only momentarily, to prevent abuse and rate-limit submissions. It is not stored alongside your message.

Our lawful basis is our legitimate interests under Article 6(1)(f) of the UK GDPR and the EU GDPR: responding to enquiries you have chosen to send us, and operating this site securely. We do not use this data for marketing, and we do not sell it.

We do not intentionally collect special-category (sensitive) personal data. Please do not include sensitive personal information in your message.

4. Who receives your data

Your message is delivered to us by email; it is not stored in a website database. The following providers process it on our behalf, under data-processing agreements:

  • Resend — delivers your message to a Catoxy inbox.
  • Vercel — hosts this website and runs the function that processes your submission.
  • Microsoft 365 — hosts the mailbox that receives and stores the enquiry email.

We do not share your data with any other third party except where the law requires it.

5. International transfers

We have configured these providers so that contact-form submissions are processed and stored within the UK and the EEA: the function that processes your submission runs in London, our email delivery provider processes it within the EU (Ireland), and the receiving mailbox is hosted in Microsoft's EU datacentres. Where a provider nevertheless processes personal data outside the UK or the EEA — for example service administration or support access from the United States — we rely on an appropriate safeguard: an adequacy decision (including the EU–US and UK–US Data Privacy Framework where the provider is certified), EU Standard Contractual Clauses, or the UK International Data Transfer Agreement or Addendum.

6. How long we keep it

We keep enquiry emails only as long as we need them to handle your enquiry and any follow-up. As a rule, we delete enquiry emails no later than 24 months after our last contact with you, or sooner where the enquiry is clearly concluded.

7. Your rights

Under the UK GDPR and the EU GDPR you have the right to access, rectify, erase, restrict and object to our processing of your personal data, and the right to data portability. Where we rely on legitimate interests, you may object at any time. To exercise any right, contact privacy@catoxy-energy.com.

You also have the right to complain to a supervisory authority. In the UK this is the Information Commissioner's Office (ICO); in the EU it is your local data-protection authority.

8. Cookies

The public site sets no analytics or marketing cookies. We measure usage with Vercel Web Analytics, which is cookieless and collects only aggregated, anonymised data. The only cookie set anywhere on this site is a strictly-necessary session cookie in our access-controlled investor area — set only after a visitor enters an access code, never on the public site.

9. Changes to this notice

We will update this notice as our website and our processing change, and revise its date accordingly. This notice was last updated on 15 July 2026.