Data Processing Addendum (DPA)

Effective Date: February 11, 2026

This Data Processing Addendum ("DPA") forms part of the agreement between Coaching Catalysts, LLC ("Company," "Processor," "Service Provider," "we," "us," or "our") and any customer, client, subscriber, member, or user ("Controller," "Customer," "you," or "your") who utilizes our services and provides Personal Data for processing.

This DPA applies to all websites, domains, subdomains, landing pages, funnels, software applications, CRM services, memberships, marketing services, advertising services, coaching programs, consulting engagements, assessments, reports, and related services operated by:

Coaching Catalysts, LLC
d/b/a Catalysts Companies, Catalysts Services, The Coaching Catalysts, and Catalysts Franchise Systems
2301 S Florida Ave.
Joplin, MO 64804-2434
Phone: (417) 861-7559
Email: [email protected]

1. Purpose

This DPA governs the processing of Personal Data by Coaching Catalysts, LLC on behalf of customers in connection with services including, but not limited to:

• CRM services;
• Lead management;
• Marketing automation;
• Email marketing;
• SMS marketing;
• Customer communication systems;
• Google Business Profile services;
• Advertising management;
• Coaching and consulting services;
• Membership platforms;
• Assessments and reports; and
• Related business services.

2. Definitions

For purposes of this DPA:

• Personal Data means information that identifies, relates to, describes, references, or could reasonably be linked to an individual.
• Controller means the party determining the purposes and means of processing Personal Data.
• Processor means the party processing Personal Data on behalf of a Controller.
• Applicable Privacy Laws means privacy and data protection laws applicable to the processing of Personal Data.
• Data Subject means an identified or identifiable individual whose Personal Data is processed.

3. Scope of Processing

The Company may process Personal Data solely for purposes necessary to provide contracted services, fulfill customer requests, maintain accounts, deliver products, improve services, communicate with users, and comply with legal obligations.

Processing activities may include:

• Collection;
• Recording;
• Organization;
• Storage;
• Retrieval;
• Transmission;
• Analysis;
• Reporting;
• Deletion; and
• Other processing necessary to provide services.

4. Categories of Personal Data

Depending upon the services utilized, Personal Data processed may include:

• Name;
• Email address;
• Telephone number;
• Business name;
• Business address;
• Website URL;
• Google Business Profile information;
• Industry information;
• Service area information;
• IP address;
• Browser information;
• Device information;
• Usage data;
• Cookie identifiers;
• Communication records;
• Customer relationship data;
• Lead data; and
• Other information voluntarily provided.

5. Categories of Data Subjects

Personal Data may relate to:

• Customers;
• Prospective customers;
• Website visitors;
• Business owners;
• Employees of customer organizations;
• Leads and prospects;
• Subscribers;
• Members;
• Contractors; and
• Other individuals whose information is submitted through our services.

6. Customer Responsibilities

The Customer represents and warrants that:

• It has lawful authority to provide Personal Data for processing;
• It has obtained all required notices, disclosures, and consents;
• Its use of the Services complies with applicable laws;
• It will not provide unlawfully obtained information;
• It remains responsible for the legality of Personal Data submitted to the Company.

7. Processor Obligations

The Company shall:

• Process Personal Data only as reasonably necessary to provide Services;
• Maintain commercially reasonable safeguards;
• Limit access to authorized personnel and contractors;
• Maintain confidentiality obligations;
• Assist with lawful requests relating to Personal Data where reasonably practicable; and
• Comply with applicable privacy obligations imposed upon service providers.

8. Subprocessors

The Company may utilize third-party service providers and subprocessors to deliver services.

These may include, without limitation:

• GoHighLevel;
• LeadConnector;
• Stripe;
• Twilio;
• Google;
• Google Analytics;
• Google Ads;
• YouTube;
• Meta/Facebook;
• Email service providers;
• Hosting providers;
• Cloud service providers;
• Payment processors; and
• Other vendors necessary to provide services.

The Company may replace, add, or remove subprocessors as business operations require.

9. Security Measures

The Company maintains commercially reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, disclosure, alteration, misuse, or destruction.

No system, network, or method of transmission can be guaranteed completely secure. Accordingly, absolute security cannot be guaranteed.

10. Data Retention

Personal Data may be retained for as long as reasonably necessary to:

• Provide services;
• Maintain business records;
• Comply with legal obligations;
• Resolve disputes;
• Enforce agreements; or
• Support legitimate business operations.

The Company may delete or anonymize information when retention is no longer reasonably necessary.

11. Data Subject Requests

Where applicable under law, Data Subjects may request access to, correction of, deletion of, or information regarding Personal Data.

Requests may be submitted to:

[email protected]

The Company may require verification of identity before responding to requests.

12. International Data Transfers

Personal Data may be processed, stored, transmitted, or accessed in the United States or other jurisdictions where the Company, its vendors, service providers, or subprocessors operate.

By using the Services, users acknowledge and consent to such transfers where permitted by law.

13. Confidentiality

Individuals authorized to process Personal Data on behalf of the Company are subject to confidentiality obligations and are expected to protect Personal Data from unauthorized disclosure.

14. Limitation of Liability

To the maximum extent permitted by law, the Company's liability arising out of or relating to Personal Data processing shall be governed by the limitations of liability contained within the applicable Terms of Service and related agreements.

15. Changes to this DPA

The Company may modify this DPA from time to time. Updated versions will be posted with a revised effective date.

Continued use of the Services following publication of changes constitutes acceptance of the updated DPA.

16. Contact Information

Questions regarding this DPA may be directed to:

Coaching Catalysts, LLC
d/b/a Catalysts Companies, Catalysts Services, The Coaching Catalysts, and Catalysts Franchise Systems
2301 S Florida Ave.
Joplin, MO 64804-2434
Phone: (417) 861-7559
Email: [email protected]