Privacy Policy
Introduction
Cultureshift Communications Ltd (“Culture Shift”), registered in England & Wales and whose registered office is at 4th Floor, 86 Princess Street, Manchester, M1 6NG. We are committed to protecting your privacy and keeping any personal data you provide to us confidential at all times, in accordance with UK data protection laws. This Privacy Notice sets out the information-processing activities that Culture Shift carries out in its capacity as a data controller or as a data processor.
All personal data collected by Culture Shift is processed in compliance with the requirements of the UK General Data Protection Regulation 2018 (GDPR), the Privacy and Electronic Communications Regulation 2003 (PECR), the UK Data Protection Act 2018 (DPA) and the Data Use and Access Act 2025 (DUAA).
Contact Details
Culture Shift Data Protection Officer (‘DPO’) oversees our compliance with data protection legislation. Our ICO registration number is ZA391317.
Our contact details are the following:
Email: DPO@culture-shift.co.uk
Postal address: 4th Floor, 86 Princess Street, Manchester, M1 6NG
How is your information collected?
Personal data is any information about an individual from which that person can be identified. The personal information that we may collect about you broadly falls into the following categories:
Information that you provide voluntarily.
We may process and store information that you have provided voluntarily. For example, when you interact with our website, to book a demo, download our content, or contact us through the ‘contact us’ form, we ask for your email address. It will be clear to you at this point what personal data you are providing.
Information that we collect from your activities.
We collect information about how you use the Culture Shift website automatically through the use of cookies and other technologies. Some of these cookies can be enabled/disabled by selecting your preferences in the preference centre you are presented with when first interacting with this site. More information on cookies can be found under the ‘Use of cookies’ section below.
Public information
We may collect information about you from publicly available sources, such as corporate websites, business directories, and public social media accounts, to reach out to you and promote our products and services. You can ask us to delete your information at any time.
Data Collected, Processing Purposes, Lawful Basis, Data Sharing, and Retention Periods
We will only process (use) your personal information if we have a lawful basis to do so. The table below shows the types of personal data we collect, how we use it, and the legal bases for our use. It also outlines the kinds of organisations we share your data with and the duration of our data retention.
Where you have given us your consent to use your personal information, you have the right to withdraw this consent at any time. You may do this by contacting us as described in the "Contact Details" section above.
Please note that the withdrawal of your consent will not affect any use of the data undertaken before consent is withdrawn, and we may still be entitled to hold and process relevant personal information on bases other than consent. Withdrawing consent may also have the same effects as not providing the information at all; for example, we may no longer be able to provide certain services to you.
In some cases, you will have a legal, contractual, or other requirement or obligation to provide us with your personal information. If you do not provide us with the requested personal information, we may not be able to properly perform our contract with you or comply with legal obligations. If you are not under an obligation to provide such information, failing to do so may still mean we are unable to properly perform our contract with you.
Who we share your information with
We may disclose your personal information to third parties. Where necessary, we may transfer personal information outside of the UK. When doing so, we comply with the UK GDPR, making sure appropriate safeguards are in place. The following are categories of recipients to whom service user information could be transferred:
In some circumstances, we will share personal data with any competent law enforcement body, regulatory, government agency, court, or other third-party where we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person. For example, we may share information about you with HMRC to collect VAT.
Data security
We’re committed to protecting your personal data and have appropriate technical and organisational measures in place to make sure that happens. We maintain physical, electronic, and procedural safeguards for the collection, storage, and disclosure of personal data. We are ISO 27001 and Cyber Essentials certified.
Links to other websites
Our website may contain links to other websites run by other organisations. This privacy notice applies only to our website; we encourage you to read the privacy statements on other websites you visit. We cannot be responsible for the privacy policies of other sites (even if you access them using links found on our site).
How and when will you hear from us
We may use your contact details to update you about the latest news and events from Culture Shift.
Email
We rely on our legitimate interests to send direct marketing communications in a business-to-business context. However, where you have provided a personal email address to us, we will only send you marketing communications if you have provided your prior consent. This does not apply to service communications (see below).
We will always ask for your permission to contact you about our products, latest news and events when you:
- Sign up for our newsletter on the Culture Shift website.
- Register for or attend a Culture Shift event.
You can opt out of our marketing communications at any time by clicking the “unsubscribe” link in any of our emails or by contacting DPO@culture-shift.co.uk.
Service communications
We may send you certain communications, without your consent, if we are under a legal obligation to do so; if we feel sending the communication is in both your and our interests; and/or it would be a disadvantage to you if we didn’t send you the communication.
These communications may include:
- Notifying you about changes to our terms or privacy notice.
- Asking you to provide feedback on Culture Shift products, services and events.
Use of Cookies
Like many sites, the Culture Shift website uses cookies. Cookies are tiny data files sent by an organisation to your computer, stored on your hard drive, and used to recognise you on return visits. They gather statistical information about your browsing behaviour and patterns, but do not personally identify you. Visit our Cookie Policy page to manage your preferences and learn more about how we collect and store cookies.
Your rights in relation to this processing
As an individual, you have certain rights regarding our processing of your personal data, including a right to lodge a complaint with the Information Commissioner as the relevant supervisory authority. If you wish to exercise any of your rights concerning your personal data, you should contact Culture Shift’s Data Protection Officer at the address shown above.
Some of these rights are ‘absolute rights’, meaning you can exercise these rights as and when you like. Others are ‘qualified rights’, meaning certain conditions must be met for you to exercise these rights, or we can apply specific exemptions to prevent you from exercising these rights.
Right of Access (absolute): You have the right to obtain confirmation from Culture Shift as to whether personal data concerning you is being processed and, where that is the case, access to that data.
Right to Rectification (absolute): You have the right to oblige us to rectify inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed by providing a supplementary statement.
Right to Erasure (Right to be Forgotten) (qualified): You have the right (under certain circumstances, but not all) to oblige us to erase personal data concerning you.
Right to Restriction of Processing (qualified): You have the right (under certain circumstances, but not all) to oblige us to restrict the processing of your personal data. For example, you may request this if you are contesting the accuracy of personal data held about you.
Right to Data Portability (qualified): You have the right (under certain circumstances, but not all) to oblige us to provide you with the personal data about you in a structured, commonly used, and machine-readable format. You also have the right to oblige us to transmit data to another controller.
Right to Withdraw Consent (absolute): If the lawful basis for processing is consent, you have the right to withdraw that consent.
Right to Object to Direct Marketing (absolute): Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for marketing, which includes profiling to the extent that it is related to such direct marketing.
Rights in Relation to Automated Decision-Making and Profiling (qualified): We do not perform any automated decision-making based on personal data that produces legal effects or similarly affects you.
To exercise any of these rights, please contact DPO@culture-shift.co.uk.
Where we rely on consent as a lawful basis of processing, you may withdraw your consent at any time by emailing us at DPO@culture-shift.co.uk.
Complaints
As an individual, you have the right to complain. Culture Shift is committed to protecting your privacy and handling your personal data fairly. If you have a concern or complaint regarding how we process your information, we encourage you to contact us directly so we can resolve the matter for you.
Upon receiving your complaint, we will acknowledge receipt within 30 days, investigate the matter and take appropriate steps to resolve your concerns. We will keep you informed of the progress of our investigation and provide a final response without undue delay. Data may be shared internally for investigation or with the Information Commissioner’s Office (ICO) if the complaint is escalated.
If you remain dissatisfied with our response, or if you believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s supervisory authority for data protection.
Information Commissioner’s Office
Telephone: 0303 123 1113
Email: casework@ico.org.uk
Web: https://ico.org.uk/for-the-public/
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Changes to our privacy policy
We may update this Privacy Notice from time to time by posting an amended version of the statement on the Culture Shift website. Please refer to this policy regularly. If at any time we decide to use personally identifiable information in a manner different from what was stated at the time it was collected, we will notify you directly via email.