Privacy Policy

Who we are

This policy explains how Compassionate Cultures uses personal data collected through compassionate-cultures.co.uk.

We are Compassionate Cultures, [company number, 13312266], registered at 81 Davies Road, West Bridgford, Nottingham, NG2 5JB. We are the controller of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). For any question about this policy or your data, email us at [email protected].

This policy covers this website only. The Thrive & Grow Index® survey at thriveandgrowindex.com has its own privacy policy.

What personal data we collect

We collect very little. The site has no account sign-up, contact form or newsletter form.

• When you email us: your name, email address, job title and organisation if you include them, and anything else you choose to tell us.
• When you browse the site (with your consent): information collected by Google Analytics about how you use the site. This includes pages viewed, time on page, how you arrived (e.g. a search engine or link), approximate location (country or city), device type, browser and operating system. Google Analytics uses an identifier stored in a cookie; it does not tell us your name or email address.
• Technical data: our hosting and security providers automatically process your IPaddress and basic request details so the site can load and be protected from attacks.

We do not knowingly collect special category data (such as health information) through this website, and we ask you not to send it by email.

How we use your data and our lawful bases

How we use your data and our lawful bases

We only use your data for the purposes below, and never sell it.

We do not use your data for automated decision-making or profiling that has legal or similarly significant effects on you.

Cookies and Google Analytics

We only set analytics cookies if you click “Accept” or enable them in our cookie settings. Strictly necessary cookies are always on because the site needs them to remember your cookie choice and protect the website.

Who we share your data with

We share data only with service providers who process it on our behalf, under contract:

• Krystal.io — hosts this website.
• Cloudflare — protects the website and our email address from spam and attacks.
• Microsoft 365 handles our email.

We may also share data if the law requires it, or with professional advisers such as our accountant.

International transfers. Some of these providers, including Google and Cloudflare, may process data in the United States or elsewhere outside the UK. Where they do, we rely on a lawful transfer mechanism: the UK–US “data bridge” for certified US companies, or the UK International Data Transfer Agreement or Addendum to the EU standard contractual clauses.

How long we keep data and how we protect it

Data	How long we keep it
Enquiry emails that don’t lead to work	[2 years] from our last contact
Client correspondence and records	[6 years] after our work ends, for tax and legal reasons
Server and security logs	As set by our hosting and security providers, usually a few weeks

We keep the website on HTTPS, keep WordPress and plugins up to date, and limit access to
our email and systems to the people who need it. No method is completely secure, but we take reasonable steps to protect your data.

Your rights

Under UK data protection law you have the right to:

• ask for a copy of your personal data;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to restrict how we use your data;
• object to our use of your data where we rely on legitimate interests;
• ask for your data in a portable format;
• withdraw consent at any time, where we rely on consent (this does not affect anything we did before you withdrew).

To use any of these rights, email [email protected]. We will reply within one month. There is usually no charge.

Complaints. If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy. We may update this policy, for example when we add new tools to the website. The date at the top shows when it last changed.