Privacy Policy

Last updated: 1 November 2026

This policy explains how Agbisit Acquisitions Ltd, trading as CATNA, collects and uses personal data. It covers three groups of people, and each has its own section below:

• people who visit catna.cc, book a call with us or message us on Instagram (Section 3),
• clients enrolled in the CATNA 2.0 program (Section 4),
• people who use CATNA's apps: HQ (our internal tool) and Creator OS (our client platform) each have their own privacy policy (Section 5).

Sections 1, 2 and 6 to 12 apply to everyone.

1. Who we are

Agbisit Acquisitions Ltd is a company registered in England and Wales (company number 16795399), with its registered office at 4 Savile Drive, Halifax, West Yorkshire, HX1 2EU, United Kingdom. We are the controller of the personal data described in this policy. We are registered with the UK Information Commissioner's Office under registration number ZC130402.

Privacy questions and requests: legal@catna.cc. General support: support@catna.cc.

2. The short version

• We collect what you give us (for example, your booking details or the messages you send us) and a small amount of technical data our providers need to run the site.
• We use it to run our calls and our program, to keep the business running, and to protect against fraud and disputes.
• We do not sell your personal data.
• catna.cc does not set any cookies of its own and runs no analytics or advertising trackers today. If that changes, we will update this policy and ask for your consent first where the law requires it.
• You have rights over your data, and you can contact us at any time to use them (Section 9).

3. Visitors to catna.cc, people who book a call, and people who message us

3.1 What we collect

• Booking details. When you book a strategy call, our scheduling provider, Calendly, collects your name, email address, the time zone and time you pick, your answers to the booking questions (which may include your Instagram handle and details about your business), and, if you choose to give it, your phone number.
• Instagram messages. If you message us on Instagram, we receive your username, the profile details Instagram shows us, and the messages you send.
• Strategy call recordings. Our sales team records strategy calls. A recording captures your voice, your image if your camera is on, and anything you share on screen. We tell you at the start of the call that it is being recorded.
• Where you came from. If the link you followed carried campaign tags (such as utm_source or utm_campaign), we pass them to Calendly with your booking so we know which video, ad or post brought you to us.
• Technical data. When you load the site, the companies that host and deliver it receive your IP address, browser type and the pages and files you request, as part of serving them to you.

3.2 How we use it, and our lawful basis

• To arrange and hold your call, send reminders (including text reminders if you gave a phone number), and prepare for the call using your answers. Lawful basis: taking steps at your request before entering into a contract.
• To follow up with you about your call and the program you asked about, by email, text or the contact details you gave us. Lawful basis: our legitimate interest in responding to people who have asked to speak with us. You can tell us to stop at any time, and we will.
• To reply to your messages and keep track of our conversations with you, using software that records where each conversation stands and what you have told us you are interested in. Lawful basis: our legitimate interest in responding to people who contact us and running our sales process.
• To record strategy calls for training, quality and an accurate record of what was said, which helps prevent and resolve disputes. We may use AI note-taking tools to summarise the call. Lawful basis: our legitimate interest in training our team and keeping an accurate record. You can object to the recording at any time (Section 9).
• To understand which of our content and campaigns bring people to us, using the campaign tags. Lawful basis: our legitimate interest in measuring our own marketing.
• To deliver and secure the website. Lawful basis: our legitimate interest in running a working, secure site.

Booking details are copied from Calendly into our internal sales system, which keeps a copy of the full booking record Calendly sends us (including the campaign tags and your phone number if you gave one), and a notification is posted to a private CATNA staff channel on Discord, so the right person can prepare for your call.

You do not have to give us any of this, but we cannot book a call without your name, email address and a time.

3.3 Embedded services

The site embeds services run by other companies, which receive your IP address and technical data when they load and may set their own cookies under their own policies:

• Calendly, for the booking calendar (Calendly privacy notice),
• YouTube, for some client interview videos, in its privacy-enhanced mode (Google Privacy Policy),
• Google Fonts, for the typefaces on the page.

Our other videos and images are served from our own storage.

4. Clients of the CATNA 2.0 program

4.1 What we collect

• your name, email address and purchase and payment information,
• your Discord identifiers and username,
• your onboarding answers and the business information you share with us,
• messages, submissions, forms (including end-of-week forms) and files you share in program channels,
• scheduling and attendance information for calls,
• recordings of 1:1, group and onboarding calls, which may include your voice, your image if your camera is on, and anything you share on screen,
• activity data the program platforms record, such as timestamps, join dates and access logs.

If you use Creator OS (os.catna.cc), CATNA's client platform, its own Privacy Notice explains what it collects, including any Instagram account you connect to it.

4.2 Payments

We do not store full card details. Card payments are processed by Whop, which handles your payment details under its own privacy policy. If you pay by bank transfer against our invoice, we keep the payment record your bank sends with it.

We need your name, email address and Discord username to give you access to the program. Without them we cannot deliver it.

4.3 How we use it, and our lawful basis

• To deliver the program: give you access, coach and support you, run calls, and track your progress. Lawful basis: performance of our contract with you.
• To record calls for quality, training, internal records and to prevent and resolve disputes. Lawful basis: our legitimate interest in delivering a consistent program and keeping an accurate record of what was agreed and delivered.
• To keep the community safe and enforce our terms, including preventing content leaks and payment abuse. Lawful basis: our legitimate interest in protecting our clients and our business.
• To keep business, tax and accounting records. Lawful basis: legal obligation.
• To improve the program: we review progress data and call feedback to change the curriculum and the format of calls. Lawful basis: our legitimate interest in improving what we deliver.

We use software, including AI tools, to help summarise calls and track progress. No decision with a legal or similarly significant effect on you is made by software alone; a person on our team makes it.

Once a week, our Discord bot sends the last seven days of messages in your private channel with our team, yours and ours, to an AI service (Anthropic), which returns a short note for our team only: how you seem to be doing, what you appear stuck on, and any question of yours that went unanswered, with a suggested rating a team member may accept, change or ignore. We do this so that nobody's question is missed and our coaching keeps up with your week. The note is kept in HQ, our internal tool. Our own systems do not keep your messages, which stay in Discord; Anthropic receives them only to write the note, does not use them to train its models under its commercial terms, and deletes what it receives and returns within 30 days by default. The note is never shown to you and never changes anything in Creator OS. Lawful basis: performance of our contract with you, and our legitimate interest in running the program well. You can object at any time by emailing legal@catna.cc, and we will stop preparing these notes for your channel.

4.4 If your enrolment includes a performance guarantee

If your enrolment includes a performance guarantee, administering it means relying on records of your participation (your end-of-week forms, call bookings and attendance, and the content you report), and on information about the new customers you win.

• Your own customers. You are the controller of your own customers' personal data. When you log a new customer for the guarantee, use a reference of your own choosing, the amount paid, the date and how you won them. Do not send us their names or contact details at that stage. We only ask for identifying details if you make a claim, and only for the customers relevant to it.
• Where you do send us information about your customers, you confirm that you are allowed to share it with us. We use it only to assess your guarantee, never to contact or market to your customers, and we delete it once the claim is resolved and the retention period in Section 8 has run.
• Lawful basis: performance of our contract with you, and our legitimate interest in assessing claims accurately.

4.5 Testimonials and marketing

We may ask your permission to use your testimonial, screenshots or results in our marketing. Lawful basis: our legitimate interest in showing prospective clients real results. You can opt out of any use that identifies you at any time by emailing legal@catna.cc, and we will stop new uses. Opting out does not affect the call recordings and records we keep to run the program and prevent disputes.

5. CATNA's apps

HQ (hq.catna.cc) is CATNA's internal tool, used only by authorised staff; its privacy policy, including the YouTube channel and Instagram accounts connected to it, is at hq.catna.cc/privacy. Creator OS (os.catna.cc) is CATNA's client platform; its Privacy Notice is at os.catna.cc/legal/privacy.

6. Who we share data with

We share personal data only with:

• service providers who run parts of our business for us: website and internal-system hosting and storage (Vercel, Cloudflare), our internal systems' database provider (Neon), scheduling (Calendly), payments (Whop), our community and workspace tools (Discord, Notion), the tools our sales team uses to manage and track conversations with people who contact us, call recording and note-taking tools, and the AI service that prepares our team's weekly client-channel notes (Anthropic),
• Google and Meta, when our apps connect to YouTube or Instagram (Section 5),
• our staff and contractors who need it to do their work, under a duty of confidentiality,
• professional advisers, such as lawyers and accountants, where needed,
• authorities, where the law requires it.

We do not sell your personal data.

If CATNA's business is sold or merged, personal data may pass to the buyer, who must use it as this policy describes.

7. International transfers

Several of our providers, including Vercel, Calendly, Discord, Google and Cloudflare, process data outside the UK, mostly in the United States. Where data leaves the UK, we rely on a UK adequacy regulation (including the UK Extension to the EU-US Data Privacy Framework where the provider is certified) or on the UK International Data Transfer Agreement or Addendum. You can ask us for details of the safeguard that applies.

8. How long we keep data

• Booking details, strategy call recordings and Instagram conversation records of people who do not join the program, including the copies in our sales system and staff channel: up to 24 months after your last contact with us, then deleted, unless you ask us to delete them sooner.
• Client records and call recordings: for the length of your program and up to 6 years after it ends, so that we can answer questions, disputes and legal claims.
• AI notes on your private channel: for the length of your program and for 24 months after it ends, then deleted, unless you ask us to delete them sooner.
• Performance guarantee records: for your guarantee period and 12 months after it ends, or until any claim is finally resolved, whichever is later.
• Financial and tax records: as long as UK law requires, usually 6 years.

9. Your rights

Under UK data protection law you can ask us to:

• give you a copy of your personal data,
• correct data that is wrong,
• delete your data,
• restrict how we use it, or object to our use of it (including any use based on our legitimate interests, and any direct marketing, which we will stop),
• send your data to you or another organisation in a portable format.

Where we rely on your consent, you can withdraw it at any time. Some rights have limits; for example, we may need to keep records to deal with a dispute or a guarantee claim. To use a right, email legal@catna.cc. It is free of charge. We will respond within one month, or tell you within that month if a complex request needs up to two more months, and why.

10. Complaints

If you are unhappy with how we handle your data, please tell us first at legal@catna.cc. We will acknowledge your complaint within 30 days and respond in full without undue delay.

You also have the right to complain to the UK Information Commissioner's Office: ico.org.uk/make-a-complaint. If you live outside the UK, you may also be able to complain to the data protection authority where you live.

11. Security and age

We protect personal data with reasonable technical and organisational measures, such as access controls and encryption of stored account tokens. No system is perfectly secure.

Our site and program are for people aged 18 and over. We do not knowingly collect data from anyone under 18.

12. Changes to this policy

We will update this policy when the way we use personal data changes, and change the date at the top. If a change is significant, we will tell clients directly.