Privacy notice.

Who is responsible for your information?

Steady Culture is responsible for personal information collected through this website, enquiries and its own business administration. Privacy questions and requests can be sent to hello@steadyculture.co.uk. Full contracting details are provided privately before any paid engagement begins.

Information we may collect

This may include your name, work contact details, organisation, enquiry details, communications by email or WhatsApp, service records and information needed to administer an agreed engagement. If relevant work begins, documents may contain employee or worker information supplied by a client.

Why we use information and our lawful bases

• Enquiries and contracts: to respond, prepare a proposal and provide agreed services where this is necessary to take steps at your request or perform a contract.
• Legitimate interests: to manage the consultancy, maintain proportionate records, protect information, improve services and establish or defend legal claims.
• Legal obligations: to meet tax, accounting, safeguarding and other applicable requirements.
• Consent: where consent is the appropriate basis, including optional marketing communications. Consent may be withdrawn at any time.

Special-category information is accepted only where genuinely necessary and where an additional lawful condition applies. Clients remain responsible for ensuring they have a lawful basis to share employee information.

How information is obtained

Most information is provided directly by you. During client work, information may also be supplied by an authorised business contact, an employee or representative, or generated through the agreed work.

Sharing and service providers

Information is not sold. It may be shared only where necessary with providers supporting email, secure storage, website hosting, communications, payments, accounting, insurance or professional advice, or where disclosure is required by law. Providers are expected to protect information and use it only for the relevant service.

International transfers

Some technology providers may process information outside the UK. Where UK data-protection law requires safeguards, Steady Culture will rely on an applicable adequacy decision, approved contractual safeguards or another lawful transfer mechanism.

Retention and security

Unsuccessful or inactive enquiry records will normally be reviewed for deletion after 12 months. Core client, contractual, invoice and tax records may normally be retained for up to six years after the relevant relationship ends. Case material may be kept for a shorter or longer period where the agreed service, legal duties, insurance requirements or a dispute reasonably require it. Access is restricted and proportionate technical and organisational safeguards are used.

Your rights

Depending on the circumstances, you may have rights to access, correct or erase information; restrict or object to processing; request portability; and withdraw consent. Rights are not absolute and a lawful exemption may apply. Requests can be sent to the email address above.

Complaints

Please contact Steady Culture first so the concern can be addressed. You may also complain to the Information Commissioner’s Office.

Automated decisions, marketing and children

Steady Culture does not currently use personal information for solely automated decisions with legal or similarly significant effects. Marketing emails will not be sent without an appropriate lawful basis and an unsubscribe route. The website and services are intended for adults acting in a business or professional context and are not directed at children.

Website and cookies

The current website does not intentionally set analytics, advertising or profiling cookies. See the cookie notice for details.

Changes

This notice will be reviewed when services or systems change. The current version and effective date will remain available on this page.