Privacy Culture Limited (“Privacy Culture”, “we”) is committed to earning your confidence and trust by complying with data protection law and following the practices that protect your privacy and safeguard your personal information.

This Privacy Policy explains how we collect, use, store, share and protect your personal information when you visit this website, platform.privacyculture.com, book a demo of the Privacy Culture Platform or otherwise get in touch with us through it. We are registered with the UK Information Commissioner’s Office under registration number ZA551135.

Personal data that our customers hold inside the Privacy Culture Platform itself is processed on their behalf under our Data Processing Addendum, not under this policy. Our main website, www.privacyculture.com, has its own Privacy Policy. Please also read our Cookie Notice, which lists the cookies this website sets.

Who is responsible for your personal information?

Privacy Culture Limited is the controller of the personal information collected through this website. Our details are below. Questions about this policy can go to our Data Protection Officer.

Name: Privacy Culture Limited
Address: Bouverie House, 154-160 Fleet Street, London EC4A 2DQ
Email: [email protected] (Data Protection Officer) or [email protected]
Phone: +44 (0) 20 7112 9360
ICO registration number: ZA551135

What personal information do we collect?

The information we collect through this website may include:

Identity and contact details: Your name, work email address, company, job role and, if you choose to give it, your telephone number, as entered when you book a demo or contact us.
Details about your organisation and needs: The headcount band of your organisation, the tools you currently use for privacy work, your rough timing, whether you are working towards ISO 27701 or a similar standard, and what you would like to improve. These help us make a demo relevant to you.
Device and usage information: Your IP address, browser and device type, the pages you visit, how you move between them and the campaign link that brought you here. Most of this is collected through cookies and similar technologies, and only with your consent where the law requires it. Our Cookie Notice lists each one.
Correspondence: What you tell us in the emails, calls and meetings that follow from your enquiry.
Special category data: We do not ask for special category data, such as health information, through this website. If you include it in a message to us, we will handle it with particular care and only as the law allows.

Cookie Notice

How do we collect your personal information?

We collect information directly from you when you:

Book a demo: Fill in the booking form and choose a meeting time, and during the demo itself.
Get in touch: Email, call or write to us to find out more about the Privacy Culture Platform or our services.
Browse the site: Visit and use this website, through the cookies and similar technologies described in our Cookie Notice.
Follow a campaign link: Arrive from an advert, email or post that carries campaign tags, which tell us which campaign brought you here.
Other sources: We may also receive information from our marketing and analytics providers, from public sources such as your company website or professional networking profile, from colleagues who introduce you, and from event organisers where you have agreed to your details being shared.

Why do we use your personal information, and on what basis?

We use your personal information to respond to your enquiries, to arrange and run the demo you have booked, to follow up with you afterwards, and to enter into and perform a contract with your organisation if it decides to use the Privacy Culture Platform.

We also process personal information for our legitimate business interests: to understand how visitors use this website and improve it, to measure whether our marketing campaigns lead to demo bookings, to keep our systems secure and prevent fraud, to send you information we think will interest you where the law allows, and to produce statistics about our audience. Statistics are aggregated or de-identified so that they cannot identify you.

Whenever we process your information for these purposes we take account of your rights and interests. Our lawful basis for each use is one of the following:

Consent: You have given us clear permission, for example by accepting statistics or marketing cookies in the cookie banner or asking to receive marketing emails. You can withdraw consent at any time.
Legitimate interests: The processing benefits you, Privacy Culture or our affiliates, such as answering your enquiry, improving this website or protecting it, and does not put anyone at undue risk. You can object to processing on this basis.
Contract: The processing is needed to enter into or carry out a contract with you or your organisation, including providing access to the Privacy Culture Platform.
Legal obligation: We are required to process the information to comply with the law.

Your marketing and contact preferences

We respect your preferences about hearing from us. We may contact you with information about the Privacy Culture Platform, our services, events, courses and other resources that we think will interest you.

Email marketing: we will ask for your permission before sending you marketing emails, unless you are a business contact we may lawfully email about similar services. Every marketing email we send carries an ‘Unsubscribe’ link.

Telephone marketing: we may call to follow up on a demo request or to tell you about our services. If your number is registered with the Telephone Preference Service (TPS) or the Corporate Telephone Preference Service (CTPS), we will only call you for marketing purposes with your express permission.

If you tell us that you no longer want direct marketing from us, we will act on that and keep a record of your request so that we do not contact you again with marketing content. You can do this with the ‘Unsubscribe’ link or by using the contact details in this policy.

Your data protection rights and choices

Under data protection law you have the following rights:

Access: You can ask for access to, and a copy of, the personal information we hold about you.
Rectification: You can ask us to correct personal information you think is inaccurate or incomplete. Please tell us so that we can keep your information up to date.
Erasure: You can ask us to delete the personal information we hold about you. We may need to keep a minimal record so that we can honour your request to be excluded from processing.
Restriction: You can ask us to limit how we process your personal information.
Data portability: You can ask for your personal information in a structured, machine-readable format.
Object: You can object to processing that is based on our legitimate interests, and to direct marketing at any time.
Automated decision-making: You have the right not to be subject to a decision based solely on automated processing. We do not make such decisions through this website.
Withdraw consent: Where we rely on your consent, you can withdraw it at any time. For cookies, use the cookie settings on our Cookie Notice; for anything else, contact us.
Exercising your rights: Send your request to the contact details in this policy. We will respond within one month, or tell you if we need longer. There is normally no fee. If you are not satisfied with our response, you may complain to the Information Commissioner’s Office (ICO).

How long do we keep your personal data?

How long we keep your personal data depends on the type of information and what it is used for. We keep it only for as long as is necessary to provide what you have asked for, to enter into or perform a contract, to meet our legal obligations, to resolve disputes and to enforce our agreements.

Details from a demo enquiry that does not lead to a customer relationship are kept while the conversation is active and then reviewed for deletion. Analytics data is kept for the periods set out in our Cookie Notice. When personal data is no longer needed it is securely deleted or anonymised. If you would like a copy of our Data Retention Policy, or have any questions about how your data is stored, contact us at [email protected].

[email protected]

International transfers

Some of the service providers named above are based, or store data, outside the United Kingdom and the European Economic Area, for example in the United States. Where your personal data is transferred outside the UK or the EEA, by us or by a provider acting on our behalf, we put in place the safeguards the law requires, such as the UK International Data Transfer Agreement or Addendum, the EU Standard Contractual Clauses or an adequacy decision, together with the organisational and technical measures needed to protect it.

Security

We take appropriate technical and organisational measures to protect your personal information, in line with our legal obligations. These measures reduce the risk of loss, misuse, unauthorised access, disclosure and alteration.

We require every third party we work with to respect the security of your personal data and to treat it in accordance with the law. We do not allow our service providers to use your personal data for their own purposes, and only permit them to process it for specified purposes and in accordance with our instructions.

Cookies

This website uses cookies and similar technologies to remember your choices, to understand how the site is used and to measure our marketing. Statistics and marketing cookies are only set with your consent, which you can change at any time. Our Cookie Notice lists each cookie, who sets it, what it does and how long it lasts.

Read our Cookie Notice

Changes to this Privacy Policy

We keep this Privacy Policy under regular review to reflect changes in the law and in our own practices. Please check this page from time to time. If we make significant changes to the way we process your personal data, we will show a prominent notice on this website.

Complaints and queries

We do our best to meet the highest standards when handling personal information, and we take any complaint about it seriously. If you think our collection, use or storage of your personal information is unfair, misleading or inappropriate, please tell us.

We also welcome suggestions for improving how we work. Send any correspondence to the contact details in this policy. If you are not satisfied with our response, you may report your concern to the Information Commissioner’s Office (ICO).

Information Commissioner’s Office

How to contact us

Our principal address is Bouverie House, 154-160 Fleet Street, London EC4A 2DQ. You can email our Data Protection Officer at [email protected] or write to [email protected]. You can also call us on +44 (0) 20 7112 9360.