Privacy Policy

We collect only the data you choose to provide to us. This may include:

• Your name, email address and any details you enter when booking a call through our online scheduler
• Your name, job title and company name if you correspond with us directly by email

We do not collect sensitive personal data.

We process your personal data on the following legal bases under GDPR Article 6:

• Legitimate interests: to respond to enquiries and to follow up on potential business engagements
• Contractual necessity: to fulfil obligations under any service agreement entered into with you or your organisation
• Legal obligation: where we are required to retain certain information under Irish or EU law

We do not use your data for automated decision-making or profiling.

We use the information you provide solely to:

• Respond to your enquiry or message
• Arrange and hold meetings you have booked with us
• Discuss or deliver the services you have requested
• Comply with any applicable legal or regulatory obligations

We will never sell your data. We will never share your data with third parties for marketing purposes.

We use a small number of trusted third-party services to operate our website and communications:

• Lovable: our website hosting platform
• Zoom: our online scheduling and meeting platform, which processes the details you submit when booking a call
• Our email provider: for receiving and sending correspondence

Each of these providers processes data on our behalf under their own data processing terms.

Some of these providers are based outside the European Economic Area, or process data on servers outside it. Where that is the case, transfers are made under appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

We retain personal data only for as long as necessary for the purpose it was collected:

• Enquiries and booking details: up to 12 months from the date of your last correspondence with us
• Client data under a service agreement: up to 6 years from the end of the engagement, as required under Irish contract and tax law

When data is no longer required, it is securely deleted.

As a data subject, you have the following rights:

• Right of access: to request a copy of the personal data we hold about you
• Right to rectification: to ask us to correct inaccurate data
• Right to erasure: to request deletion of your data where there is no legal basis to retain it
• Right to restriction: to ask us to limit how we use your data
• Right to object: to object to processing based on legitimate interests
• Right to data portability: to receive your data in a structured, machine-readable format

To exercise any of these rights, contact us at paul@cultureflow.cx. We will respond within 30 days.

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Irish Data Protection Commission:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28
www.dataprotection.ie
info@dataprotection.ie

We may update this policy from time to time. The date at the top of this page reflects when it was last revised. We encourage you to review it periodically.