Data Protection

At The Culture Practice, protecting the personal data of our clients and partners is fundamental to how we build trust and deliver our services. This Data Protection Statement outlines our commitment to handling personal information responsibly, transparently, and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Core Principles

We adhere strictly to the key data protection principles set out under UK law:

• Lawfulness, Fairness, and Transparency: We process personal data lawfully and clearly communicate how it is used.

• Purpose Limitation: Personal data is collected only for specified, explicit, and legitimate business purposes.

• Data Minimisation: We only collect and retain the minimum amount of personal data necessary for our engagement.

• Accuracy: We maintain accurate records and update or erase incorrect information promptly.

• Storage Limitation: Personal data is held only for as long as needed to fulfill its intended purpose or meet legal obligations.

• Integrity and Confidentiality: We implement robust technical and organisational measures to safeguard data against unauthorised processing, loss, or damage.

What Information We Collect

To deliver our consultancy and organisational culture services, we may collect:

• Contact Details: Names, business addresses, email addresses, and phone numbers.

• Engagement Data: Project notes, survey feedback, workshop contributions, and interview responses.

• Technical Data: IP addresses, browser details, and usage patterns gathered when you visit our website or digital platforms.

How We Use Your Information

We use personal data to:

• Deliver, manage, and refine our consulting services and client engagements.

• Communicate updates, proposals, reports, and administrative notices.

• Comply with statutory, regulatory, and legal duties.

Data Sharing and Security

We do not sell or rent personal data to third parties. Information is shared only with trusted third-party providers (such as secure cloud hosting or project management platforms) operating under strict data processing agreements. Access to sensitive or personal information is strictly restricted to personnel who require it for project delivery.

Individual Rights

Under data protection law, you have rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.

• Rectification: Request corrections to inaccurate or incomplete data.

• Erasure: Request the deletion of your personal data where applicable.

• Objection & Restriction: Object to or restrict specific processing activities.

Data Portability: 

You have the right to request a copy of the personal data you have provided to us in a structured, commonly used, and machine-readable format (such as CSV or JSON), or request that we transfer this data directly to another data controller where technically feasible. 

Contact Us

For any questions regarding this policy or to exercise your data rights, please reach out at victoria@theculturepractice.com.