Privacy Policy

The Culture Practice Privacy Policy

1. Introduction

1.1 The Culture Practice is committed to protecting the privacy, confidentiality, and rights of our clients, website visitors, and research participants. This policy details how we process, store, and safeguard personal data.

1.2 We request your consent to our use of cookies in accordance with this policy upon your first visit to our site.

1.3 Our platform incorporates granular privacy controls. You can manage your communication preferences and limit how your data is used at any time by contacting us directly.

2. How We Collect and Use Personal Data

We process personal data to deliver bespoke Equality, Diversity, and Inclusion (ED&I) consultancy, training, and strategic audits.

• Usage Data: We may process analytics data regarding your interaction with our website (e.g., IP address, browser type, referral source, page views, and navigation paths). Purpose: Monitoring, optimising, and improving our site user experience. Legal Basis: Legitimate interests.

• Enquiry & Contact Data: We process names, job titles, organisation details, and communication content submitted via our contact forms or email. Purpose: Responding to business inquiries, delivering project proposals, and managing client relationships. Legal Basis: Consent and legitimate business administration.

• Consultancy & Research Data: We process qualitative and quantitative data provided during research activities (including employee survey responses, workshop contributions, and interview feedback). Purpose: Delivering culture audits, diversity assessments, and strategic recommendations. Legal Basis: Performance of a contract and explicit consent.

• Marketing & Notification Data: We process contact details provided when you subscribe to our insights or newsletters. Purpose: Sending relevant ED&I updates, articles, and service announcements. Legal Basis: Consent.

3. Qualitative Research & Participant Anonymity

3.1 As an ED&I consultancy, we regularly handle sensitive employee feedback. Unless explicitly agreed otherwise as part of a formal reporting structure, all qualitative inputs gathered during audits, focus groups, or interviews are aggregated and anonymised to protect individual participant confidentiality.

4. Sharing Personal Data

4.1 We do not sell or rent personal data to third parties.

4.2 We may share necessary data with trusted professional advisors, insurers, or technical sub-processors (such as secure survey hosting platforms or encrypted cloud storage providers) strictly to deliver our services.

5. International Data Transfers & Security

5.1 Our core data hosting infrastructure is located within the UK and European Economic Area (EEA).

5.2 Where data is processed outside the UK/EEA, we implement statutory safeguards—including Standard Contractual Clauses (SCCs)—to ensure your data remains protected to UK GDPR standards.

6. Data Retention & Erasure

6.1 We retain client and enquiry data only for as long as necessary to fulfill project deliverables or meet statutory record-keeping obligations.

6.2 Consultancy project materials are securely archived or destroyed after 7 years following project completion, while direct marketing data is held until consent is withdrawn.

7. Your Data Protection Rights

Under UK data protection laws, you have the right to request:

• Access & Rectification: Review or update the personal data we hold about you.

• Erasure & Restriction: Request deletion or limited processing of your data.

• Data Portability: Receive your personal data in a structured, machine-readable format.

• Objection: Object to processing based on legitimate interests or direct marketing.

8. Our Contact Details

This website is operated by The Culture Practice.

• Privacy enquiries can be submitted directly via email to Victoria@theculturepractice.co.uk.