Privacy Policy

Effective date: October 24, 2026 | Website: www.catalystcredit.ca

This Privacy Policy explains how Catalyst Private Credit Partners, operating as Catalyst Private Credit (“Catalyst”, “we”, “us”, or “our”), handles personal information in website visits, inquiries, and financing reviews. It covers information about identifiable individuals, including borrowers, business owners, guarantors, and representatives. It does not replace an additional notice or authorization provided for a particular service.

1. Accountability and applicable law

Our Privacy Officer oversees this policy and receives privacy questions, access requests, correction requests, and complaints. We handle personal information under applicable privacy law, including Alberta’s Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA) where it applies, including relevant commercial information flows across provincial or national borders. Other applicable provincial privacy requirements continue to apply where relevant.

Privacy Officer: Privacy Officer, Catalyst Private Credit
Organization: Catalyst Private Credit Partners, operating as Catalyst Private Credit
Email: info@catalystcredit.ca
Mailing address: Rice Howard Place, Tower 1, Suite 2020, 10060 Jasper Avenue, Edmonton, AB T5J 3R8

2. Information collected for an inquiry

When you contact us, we collect the details you provide, such as your name, contact information, province or territory, company name, financing type, requested amount, desired timing, and a description of your purpose, available security, and repayment plan. We also retain relevant correspondence and records of the permissions you give us.

General inquiry forms are intended for a brief description. Do not include account credentials, social insurance numbers, identification documents, medical information, or detailed financial records. If more information is needed, we will explain what is required and how to provide it.

3. Information for a formal financing review

If a request proceeds beyond an inquiry, the information reasonably needed may include identity and address verification, employment or income records, financial statements, tax information, bank statements, credit information, assets and debts, property details, corporate ownership, guarantees, and transaction documents. We limit collection to what is appropriate for the identified purpose.

For insurance related financing, relevant information may include policy ownership, insurer, premium schedule, cash values, illustrations, and assignments. We do not request medical or insurance underwriting records through the general website form. Any necessary collection of sensitive information is addressed through a specific notice and appropriate consent, unless the law permits otherwise.

Information may come from you, an authorized representative, or, where appropriately authorized or otherwise permitted by law, a credit reporting agency, financial institution, insurer, professional advisor, valuation provider, or public registry. Before a credit inquiry, we obtain any required authorization and identify its purpose and applicable scope. A website inquiry alone does not authorize a credit check.

4. Purposes for using information

We use personal information as reasonably needed to respond to requests, assess a proposed transaction, verify relevant details, identify possible financing structures, communicate decisions, and prepare or administer an arrangement in which we are involved. We also use appropriate information to maintain records, address complaints, protect against fraud and misuse, resolve disputes, and meet applicable legal obligations.

We explain any additional material purpose before using information for that purpose and obtain further consent when required. We do not require consent to unnecessary uses as a condition of considering an inquiry.

5. Consent and your choices

We explain the information needed, its purposes, and relevant disclosures in a manner suited to the request. Consent may be express or, where appropriate and lawful, implied from the circumstances. Sensitive information, credit checks, and unexpected disclosures require appropriate specific authorization unless a legal exception applies. Merely browsing the website is not consent to all possible uses of personal information.

You may decline an optional request or withdraw consent by contacting our Privacy Officer, subject to reasonable notice and legal or contractual restrictions. We will explain the consequences. For example, without necessary verification or permission to share information with a proposed lender, we may be unable to complete that review. Withdrawal does not invalidate earlier lawful handling or require deletion of records we must retain.

6. Sharing information

We disclose information only as reasonably needed for the identified purpose and with appropriate consent or another lawful basis. Depending on the transaction, recipients may include:

• A prospective lender or financing party involved in the requested transaction. Before submitting a file, we identify the proposed recipient or recipients, explain the purpose, and obtain the consent required for that disclosure.
• Your authorized broker, insurance advisor, accountant, lawyer, or other representative, within the authority you provide.
• Credit reporting, identity verification, valuation, title, legal, payment, or servicing providers where their involvement is required for the transaction and appropriately authorized.
• Service providers supporting website hosting, communications, document handling, security, and record administration, with access limited to their permitted functions.
• Regulators, courts, law enforcement, or other persons where disclosure is required or permitted by law.

An independent lender or advisor may handle information under its own privacy policy and legal obligations. We do not treat permission to respond to an inquiry as unrestricted permission to circulate an application. We do not sell inquiry or application information for unrelated third party marketing.

If a business transfer or reorganization involves personal information, we apply the consent, agreement, notice, and other protections required by applicable law. This policy does not authorize an unrestricted transfer of customer records.

7. Website technology and cookies

Technical information may include an IP address, browser and device information, pages requested, time of access, referring page, and security or error logs. Such information may be personal information when it identifies, or can reasonably be linked to, an individual.

• Hosting and security tools: the website runs on a managed WordPress hosting platform behind a content delivery and security network (Cloudflare), which processes IP addresses, browser and device information, pages requested and security logs to deliver the website and protect it from abuse. Logs are retained for operational and security purposes.
• Cookies or similar storage needed for website functions: essential session and security cookies set by the website platform and the security network for the duration of a visit or as needed to protect the website.
• Optional analytics: not used at this time.
• Advertising and tracking pixels: not used.

Where optional analytics or advertising tools are introduced, we will provide a meaningful choice and obtain the consent required before enabling them. Refusing optional tracking does not prevent you from making an inquiry. You may change your preferences by contacting our Privacy Officer. Browser controls may also limit cookies, although disabling necessary functions can affect the website.

8. Service providers and processing locations

We remain accountable for personal information under our control when a provider processes it on our behalf. We use contractual or other appropriate measures to limit providers to authorized purposes, require suitable safeguards, and address retention and disposal.

Our website hosting, content delivery, security and email providers may collect, use, store or access information in Canada and the United States, including through support access by their personnel. Document handling and record administration for a financing review take place in Canada unless we tell you otherwise.

Information processed outside Canada may be accessible to courts, authorities, or law enforcement under the laws of those countries. You may request our policies and practices concerning providers outside Canada, including their authorized purposes and processing locations, from the Privacy Officer identified in section 1. We provide any additional notice required for the relevant collection or transfer.

9. Marketing and service communications

We may contact you to respond to your request or communicate about an application or existing arrangement. An inquiry does not automatically subscribe you to a newsletter. Optional promotional electronic messages are sent only with appropriate consent or another lawful basis, and include identification and an unsubscribe method where required.

You may unsubscribe from promotional messages through the message link or by contacting us. We implement unsubscribe requests without delay and within the applicable legal deadline. Necessary communications about an active transaction or legal obligation may continue. Declining optional marketing does not affect consideration of a financing request.

10. Safeguards and privacy incidents

We apply administrative, technical, and physical safeguards appropriate to the information’s sensitivity, quantity, and use. Access is limited to people and providers who need it for an authorized purpose. We select suitable methods for transferring and maintaining sensitive records. No internet service can guarantee absolute security; this does not reduce our obligations under privacy law.

We assess suspected privacy incidents, take reasonable steps to contain harm, and meet applicable reporting and notification duties. Where Alberta PIPA applies, we notify the Alberta Commissioner without unreasonable delay when the statutory real risk of significant harm threshold is met and comply with applicable individual-notification requirements and directions. Where PIPEDA applies, qualifying breaches are reported to the federal Commissioner and affected individuals as soon as feasible, and required breach records are maintained. Other notifications are made as required by law.

11. Retention and disposal

We retain personal information only as long as reasonably needed for the identified purpose and applicable legal obligations. Relevant factors include whether an inquiry becomes an application, whether a loan or other relationship remains active, the need to explain a decision, recordkeeping requirements, disputes, and legal holds. Records used to make a decision are retained for any required access period.

When information is no longer required, we securely destroy it or make it non-identifiable, subject to lawful backup and recovery cycles. We limit access to records retained solely for legal purposes. Contact our Privacy Officer for information about retention applicable to your records.

12. Access and correction

You may write to our Privacy Officer to request access to your personal information and information about its use and disclosure, or to request correction of an error or omission. Provide enough detail to locate the records. We may take proportionate steps to verify your identity or a representative’s authority.

We respond within the time required by the law that applies. If a lawful extension or permitted fee is necessary, we explain it and provide the required notice. Access may be limited by legal exceptions, such as another person’s privacy or legally privileged material. Where a request is refused in whole or part, we explain the applicable reason to the extent permitted and how to seek review. If we do not make a requested correction, we record the disagreement where required.

13. Questions and complaints

Please contact our Privacy Officer with a concern so that we can investigate and respond. You may also seek assistance or make a complaint to the privacy regulator with jurisdiction. For Alberta PIPA matters, contact the Office of the Information and Privacy Commissioner of Alberta at oipc.ab.ca. For PIPEDA matters, contact the Office of the Privacy Commissioner of Canada at priv.gc.ca. Other provincial regulators may have jurisdiction where applicable.

14. Changes and external services

We update this policy when our practices or applicable requirements change and revise the effective date. Material new uses or disclosures are addressed through additional notice and consent where required. Posting a revised policy does not itself supply that consent. External websites and independent service providers have their own policies; review them before providing information directly to them.