Privacy Policy
Katapult Group Pty Ltd (“Katapult Design”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you visit our website, engage our design services, or interact with us in any way.
By using our website or working with Katapult Design, you agree to the terms of this Privacy Policy.
If you have questions, requests, or concerns about privacy, please contact:
Katapult Group Pty Ltd
Byron Bay
Bundjalung Country
Habitat
40 Parkes Avenue
Byron Bay, NSW 2481
Australia
Sydney
Gadigal Country
The Commons
20-40 Meagher Street
Chippendale, NSW 2008
Australia
Melbourne
Wurundjeri Woi
Wurrung Country
145 Little Smith Street
Fitzroy, VIC 3065
Australia
Last updated: 07/11/2025
Information we collect
1.1 Information You Provide Directly
This may include:
Name, email address, phone number, job title and company
Project enquiries and briefing materials
Content submitted via forms, surveys, or email
Billing and invoicing details if you engage our services
1.2 Information Collected Automatically
When you visit our site, we may automatically collect:
IP address and approximate geolocation
Browser type, device information, operating system
Pages viewed, time spent, referral source
Cookie and tracking data (see Section 7)
1.3 Information from Third Parties
We may receive limited information from:
Analytics providers
Social media platforms
Project partners or suppliers (with your consent)
Katapult does not buy or sell personal data.
How we use personal information
We use collected information to:
Respond to enquiries and provide design proposals
Deliver our services and manage client relationships
Analyse website performance and improve content
Maintain internal business records
Communicate updates, insights, or marketing (only if you opt-in)
Meet legal, regulatory, or contractual obligations
We only use your personal information for the purposes for which it was collected, or for related purposes you would reasonably expect.
Legal basis for processing (GDPR/UK GDPR)
For individuals in the EU/UK, we rely on one or more of the following legal bases:
Consent – e.g., newsletter signup
Performance of a contract – providing proposals or delivering project work
Legitimate interests – improving our website, securing systems, business analytics
Compliance with legal obligations
Sharing and disclosure
Katapult Design may share personal information with:
Trusted service providers (hosting, email, analytics, project partners)
Third-party vendors assisting with project delivery (under confidentiality obligations)
Legal or regulatory authorities when required by law
We do not sell, rent, or trade personal information.
Where third parties store data internationally (e.g., cloud providers), we take reasonable steps to ensure compliant data handling and security.
Data security
We take reasonable technical and organisational measures to safeguard personal information, including:
Secure hosting infrastructure
Access controls and authentication
Encrypted data transfer (HTTPS)
Staff confidentiality and privacy protocols
However, no method of transmission or storage is 100% secure. You acknowledge these inherent risks when interacting with us.
Data rentention
We retain personal information:
For as long as needed to provide services
To comply with Australian financial and legal record-keeping requirements
Until you request deletion (where legally permissible)
Marketing communications can be opted out at any time.
Cookies and tracking technologies
Katapult Design uses cookies and similar technologies to:
Improve site functionality
Understand visitor behaviour
Analyse performance and traffic
Provide a smoother browsing experience
You can manage or disable cookies through your browser settings, though some features may not function as intended.
Your rights
8.1 Under Australian Privacy Law
You have the right to:
Access your personal information
Request correction of inaccurate information
Complain about privacy handling
8.2 Under GDPR/UK GDPR (if applicable)
You may also:
Request deletion of your data
Object to processing
Request data portability
Withdraw consent
Restrict certain types of processing
To exercise rights, please contact us using the details below.
Third-party links
Our website may contain links to external sites.
We are not responsible for their privacy practices and encourage you to review their policies.
Children's privacy
Our website and services are not directed at children under 16, and we do not knowingly collect personal information from them.
International users
As Katapult Design works with clients globally, your data may be processed in countries outside your own.
We take reasonable steps to ensure your information is handled securely and in line with this Policy.
Changes to this policy
We may update this Privacy Policy occasionally.
The revised version will be posted here with an updated effective date.